Privacy Policy

1. Introduction

Approvable Art LLC ("we," "us," or "our") operates the Approvable platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

2.2 Information We Collect Automatically

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing the Service

• Create and manage your account
• Process payments and billing
• Deliver features and functionality
• Provide customer support

3.2 Improving the Service

• Analyze usage patterns and trends
• Develop new features and enhancements
• Fix bugs and technical issues
• Optimize performance

3.3 Security and Compliance

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect the rights and safety of users

4. How We Share Your Information

We do not sell your personal information.

We share information only in these circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing
• Cloud Infrastructure (AWS, Azure, GCP): Data storage and hosting
• Email Providers: Transactional emails

4.2 Legal Requirements

We may disclose information if required to:

• Comply with applicable laws or regulations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

5. Data Retention

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Technical Safeguards

• Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access Controls: Role-based access with authentication requirements
• Tenant Isolation: Multi-tenant architecture with strict data separation
• Secure Authentication: Password hashing, JWT tokens, OAuth support

6.2 Incident Response

In the event of a data breach affecting your personal information, we will:

• Investigate and contain the incident promptly
• Notify affected users within 72 hours (or as required by law)
• Provide information about the nature of the breach and steps taken
• Cooperate with regulatory authorities as required

7. Your Rights and Choices

7.1 Access and Portability

You may request a copy of your personal information in a portable format. Contact us at tyler@approvable.io to make a request.

7.2 Correction

You can update your account information through your account settings or by contacting us.

7.3 Deletion

You may request deletion of your account and personal information. We will delete your data within 30 days, except as required for legal compliance.

7.4 Communication Preferences

• Transactional Emails: Required for service operation (cannot be opted out)
• Marketing Emails: Opt out via unsubscribe link or account settings
• Notification Settings: Customize in-app notification preferences

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

8.1 Right to Know

You may request information about categories of personal information collected, sources, business purposes, and third parties with whom we share information.

8.2 Right to Delete

You may request deletion of your personal information, subject to certain exceptions.

8.3 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

We do not sell personal information.

9. Cookies and Tracking Technologies

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website, sending an email, or displaying a notice within the Service.

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, contact us at: