Privacy Policy

Last updated: October 26, 2024

At ChromaPilot, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our colour palette tool and related services.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your email address, username, and password (stored securely using industry-standard encryption)
• User Content: Colour palettes, gradients, and images you upload or create within ChromaPilot
• Community Content: Information you choose to share publicly in the community section, including palette names, descriptions, and tags
• Payment Information: If you subscribe to a paid tier, our payment processor collects payment card information. We do not store your payment card details on our servers

1.2 Automatically Collected Information

• Usage Data: Information about how you interact with ChromaPilot, including features used, pages visited, and actions taken
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, and referring URLs for security and diagnostic purposes
• Cookies: We use cookies and similar technologies to maintain your session and remember your preferences. See our Cookie Policy below for details

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve ChromaPilot's features and functionality
• Process your transactions and manage your subscriptions
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve user experience and develop new features
• Detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Comply with legal obligations and enforce our Terms of Service

3. Data Storage and Local Processing

Local Storage: By default, your colour palettes, gradients, and preferences are stored locally in your browser using localStorage. This data never leaves your device unless you explicitly choose to:

• Create an account and sync your work to the cloud
• Share palettes with the community
• Export your data to external services

Cloud Storage: If you create an account, your data is securely stored on our servers and protected with encryption both in transit (TLS/SSL) and at rest.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third-party service providers who assist us in operating ChromaPilot (hosting, analytics, payment processing), bound by confidentiality agreements
• Community Sharing: When you choose to make palettes public, they are visible to other ChromaPilot users
• Legal Requirements: When required by law, legal process, or to protect our rights and users' safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct your account information
• Deletion: Request deletion of your account and associated data
• Export: Download your palettes and data in standard formats (JSON, CSV, etc.)
• Opt-Out: Unsubscribe from marketing emails (transactional emails may still be sent)
• Cookie Control: Manage cookies through your browser settings

To exercise these rights, contact us at our contact page or email privacy@chromapilot.com.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

7. Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data transmission
• Secure password hashing using bcrypt
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements for our systems

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children's Privacy

ChromaPilot is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

10. Third-Party Services

ChromaPilot may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Cookie Policy

We use the following types of cookies:

• Essential Cookies: Required for the website to function (authentication, session management)
• Preference Cookies: Remember your settings (theme, language, default palette size)
• Analytics Cookies: Help us understand how users interact with ChromaPilot (aggregated, anonymized data)

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page with an updated "Last updated" date
• Sending an email notification to registered users
• Displaying a prominent notice within the application

Your continued use of ChromaPilot after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@chromapilot.com
• Contact Form: chromapilot.com/contact

We will respond to your inquiry within 30 days.