Privacy Policy

1. Introduction

Hephaestus Technologies LLC ("Company", "we", "us", or "our"), a limited liability company registered in Albany, New York, operates the Stoplight productivity application ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our web application and mobile application (collectively, the "Platform").

We are committed to protecting your privacy and ensuring the security of your personal information. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide the Service: Create and manage your account, store your data, and enable core features
• To Improve the Service: Analyze usage patterns, develop new features, and enhance user experience
• To Communicate with You: Send service updates, respond to inquiries, and provide customer support
• To Process Payments: Handle subscription billing and payments
• To Ensure Security: Detect and prevent fraud, abuse, and security incidents
• To Personalize Experience: Customize content and recommendations based on your preferences
• To Comply with Legal Obligations: Meet regulatory requirements and respond to legal requests
• To Send Marketing Communications: Share updates about new features, tips, and promotional offers (you can opt out at any time)

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who help us operate the Service (e.g., cloud hosting, payment processing, analytics)
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests (e.g., subpoenas, court orders)
• Protection of Rights: We may share information to protect our rights, property, or safety, or that of our users or the public
• With Your Consent: We may share information for any other purpose with your explicit consent

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical and network security
• Employee training on data protection best practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

Backup copies of your data may persist for up to 90 days before being permanently deleted.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request that we limit how we use your information
• Objection: Object to our use of your information for certain purposes
• Opt-Out: Unsubscribe from marketing communications at any time
• Withdraw Consent: Withdraw your consent for data processing where we rely on consent

To exercise any of these rights, please contact us at privacy@stoplight.app. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 13, please contact us immediately at privacy@stoplight.app.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have different data protection laws than your country.

When we transfer your information internationally, we implement appropriate safeguards to protect your data, including standard contractual clauses and ensuring our service providers maintain adequate data protection standards.

10. Cookies and Tracking Technologies

11. Third-Party Services

Our Service may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Platform.

We may use third-party analytics services (such as Google Analytics) to help us understand how users interact with the Service. These services may collect information about your use of the Service and other websites or apps.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt-out of the sale of your personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@stoplight.app or call us at the number provided below.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

• The right to access, correct, or delete your personal data
• The right to data portability
• The right to restrict or object to data processing
• The right to withdraw consent
• The right to lodge a complaint with a supervisory authority

We process your personal data based on the following legal grounds: (a) your consent; (b) performance of a contract; (c) compliance with legal obligations; (d) protection of vital interests; or (e) our legitimate interests.

14. Do Not Track Signals

Some browsers support a "Do Not Track" (DNT) feature. Currently, we do not respond to DNT signals because there is no industry standard for how to interpret and respond to such signals. We will continue to monitor developments in DNT technology and may implement support in the future.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on the Platform and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: