Privacy Policy

Personal Information You Disclose to Us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you express interest in our products and Services, participate in activities on the Services, or contact us. The personal information we collect depends on your interactions with us and may include:

• Email addresses
• Names

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to such information.

Sensitive Information

We do not process sensitive personal information.

Payment Data

If you make purchases, we may collect data necessary to process your payment, such as your payment instrument number and security code. All payment data is handled and stored by Stripe. You may find their privacy notice at https://stripe.com/privacy.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for various reasons, including:

• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues with our Services.

In Short: We process your personal information based on legal grounds such as consent, contract performance, legal obligations, or legitimate interests.

We may process your personal data if one of the following applies:

• You have given consent for specific purposes.
• Processing is necessary for the performance of a contract with you or pre-contractual obligations.
• Processing is necessary to comply with a legal obligation.
• Processing is necessary for our legitimate interests or those of a third party.

For EU users, we comply with the GDPR. Contact us for clarification on the specific legal basis for processing.

We may share your information with service providers under written contracts, such as Stripe for payment processing. We do not sell or share personal information for commercial purposes.

We retain personal information as long as necessary for the purposes for which it was collected, or as required by law. For example:

• Category A (Identifiers): As long as the user has an account with us.
• Category B (Customer Records): As long as the user has an account with us.
• Category D (Commercial Information): As long as the user has an account with us.
• Category H (Sensory Data): As long as the user has an account with us.

We have organizational and technical measures to protect your personal information. However, no electronic transmission or storage is 100% secure, so we cannot guarantee absolute security.

We do not knowingly collect data from or market to children under 18 years of age.

Depending on your location, you may have rights under data protection laws, including:

• Withdraw consent at any time.
• Object to processing if based on legitimate interests.
• Access your data.
• Rectify inaccurate data.
• Restrict processing.
• Delete your data.
• Data portability to receive or transfer your data.
• Lodge a complaint with a data protection authority.

For EU users under GDPR, you can object to processing for direct marketing without justification. Contact us to exercise these rights.

We do not respond to Do-Not-Track signals as there is no uniform standard. We do not use trackers or cookies.

Under certain US state laws, you may have rights including:

• Right to know whether we process your data.
• Right to access your data.
• Right to correct inaccuracies.
• Right to request deletion of your data.
• Right to obtain a copy of your data.
• Right to non-discrimination for exercising your rights.
• Right to opt out of targeted advertising, data sales, or profiling.

Additional state-specific rights may include accessing categories of data processed (Minnesota), obtaining lists of third parties we share data with (California, Delaware, Maryland, Minnesota, Oregon), or limiting sensitive data use (California). To exercise these rights, contact us at privacy@steady-turtle.com. We verify requests using provided information and may require additional details for security.

California "Shine The Light" Law

California residents can request information about personal data shared with third parties for direct marketing. Submit requests to privacy@steady-turtle.com.

In Short: Yes, we update this notice to comply with relevant laws.

We may update this Privacy Notice, indicated by a revised date. Material changes will be notified prominently or directly. Review this notice frequently to stay informed.

For questions or comments, contact us at:

You may have the right to access, correct, or delete your personal information, or withdraw consent, subject to applicable laws. To request this, contact us at privacy@steady-turtle.com.