Privacy Policy

Effective Date: January 1, 2025  |  Last Revised: March 1, 2025

1. Scope and Application

This Privacy Policy applies to all information collected through our website, mobile applications, software platforms, APIs, and any related services (collectively, the "Services"). It also applies to information collected through our customer support channels, marketing activities, and any other interaction you may have with AslenProtexts.

This policy covers both personal information you knowingly provide and information collected automatically when you use our Services. It does not apply to third-party websites or services that may be linked from our platform — those services have their own privacy practices, and we encourage you to review them independently.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you are using our Services on behalf of an organization, you represent that you are authorized to agree to this policy on behalf of that organization.

2. Information We Collect

We collect several categories of information depending on how you interact with us:

2.1 Information You Provide Directly

When you register for an account, purchase our products, contact our support team, or otherwise interact with our Services, you may provide us with:

• Identity and Contact Information: Full name, username, email address, phone number, mailing address, billing address, and date of birth.
• Account Credentials: Passwords (stored in hashed, salted form — we never store plaintext passwords), security questions, and authentication tokens.
• Payment Information: Credit card numbers, bank account details, and billing addresses. Note: Payment information is processed by our PCI-compliant payment processors; we do not store complete card numbers on our servers.
• Professional Information: Job title, company name, industry, and professional credentials (when relevant to the Services being used).
• User-Generated Content: Any content you submit, post, or upload through our platform, including messages, documents, feedback, and reviews.
• Communication Preferences: Your preferences for receiving communications from us, including marketing opt-in/out choices.

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical information:

• Device Information: Device type, operating system and version, unique device identifiers (such as IMEI, MAC address, or device ID), screen resolution, and language settings.
• Usage Data: Pages viewed, features accessed, time spent on the platform, click patterns, search queries within our Services, and navigation paths.
• Log Data: IP address, browser type and version, referring URLs, date and time of requests, error logs, and server response codes.
• Location Data: With your permission, we may collect precise GPS location data. Even without explicit permission, we may infer approximate location from your IP address.
• Performance Data: Information about how our Services perform on your device, including crash reports and diagnostic data.

2.3 Information From Third Parties

We may receive information about you from third-party sources, including:

• Business Partners: If you access our Services through a partner integration, that partner may share information about you with us.
• Data Enrichment Providers: We may supplement your profile with publicly available information or data from commercial data providers to better understand your needs.
• Referrals: If another user refers you to our Services, we may receive your contact information from them.
• Public Sources: We may collect information available in public records, public social media profiles, or other publicly accessible sources.

3. How We Use Your Information

We use the information we collect for a variety of purposes tied to providing and improving our Services:

3.1 Service Delivery and Personalization

• Creating and managing your account, verifying your identity, and authenticating access.
• Processing transactions, fulfilling orders, and managing subscriptions.
• Personalizing your experience by tailoring content, features, and recommendations to your preferences and usage history.
• Enabling you to interact with other users or systems through our platform.
• Providing customer support, troubleshooting technical issues, and responding to your inquiries.

3.2 Communications

• Sending transactional messages such as account confirmations, receipts, password resets, and security alerts.
• Delivering service updates, product announcements, and important notices about changes to our policies or terms.
• With your consent, sending marketing and promotional communications about our products, services, and events.
• Conducting surveys, soliciting feedback, and communicating about user research opportunities.

3.3 Analytics and Product Improvement

• Analyzing how our Services are used to identify trends, diagnose problems, and make improvements.
• Conducting A/B testing and feature experimentation to optimize user experience.
• Building aggregate, anonymized statistical models to inform product development decisions.
• Benchmarking our Services against industry standards and best practices.

3.4 Safety, Security, and Legal Compliance

• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other malicious activities.
• Enforcing our Terms of Service, acceptable use policies, and other applicable agreements.
• Complying with applicable laws, regulations, and legal processes, including responding to subpoenas, court orders, and government requests.
• Protecting the rights, safety, and interests of AslenProtexts, our users, and the public.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our processing of your personal data is grounded in one or more of the following legal bases:

5. Sharing and Disclosure of Information

We do not sell your personal information. We may share information with the following categories of recipients:

5.1 Service Providers and Vendors

We engage trusted third-party companies to help us operate our Services. These include hosting and cloud infrastructure providers, payment processors, email delivery services, analytics platforms, customer support software, security services, and others. These providers are contractually obligated to use your data only as directed by us and to maintain appropriate security measures.

5.2 Business Partners and Integrations

If you access our Services through a third-party integration or connect our platform to a third-party application, we may share relevant data with that partner to enable the integration. You control what third-party integrations are connected to your account.

5.3 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, or other third parties when required by applicable law, regulation, legal process, or government request. We may also disclose information when necessary to protect the rights, property, or safety of AslenProtexts, our users, or others, or to prevent fraud or enforce our Terms of Service.

5.4 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other corporate transaction, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information.

5.5 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your explicit consent to do so.

6. Data Retention

We retain personal information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. Our general retention approach is:

• Active Account Data: Retained for the duration of your account plus a reasonable period after account closure to handle any post-closure matters.
• Transaction Records: Retained for a minimum of 7 years to comply with financial regulations and tax laws.
• Support Communications: Retained for 3 years from the date of the last interaction.
• Marketing Preferences: Retained for 2 years from the date of last interaction or opt-in, whichever is more recent.
• Server Logs: Typically retained for 12 months, with aggregated data retained longer for analytics.

When data is no longer required, we securely delete or anonymize it using industry-standard methods including cryptographic erasure and data shredding.

7. Security

We take data security seriously and implement industry-standard technical and organizational measures to protect your information:

• Encryption: All data transmitted between your device and our servers is protected by TLS 1.2 or higher. Data at rest is encrypted using AES-256.
• Access Controls: Role-based access control (RBAC) ensures that employees and contractors can only access data necessary for their specific job functions.
• Authentication: Multi-factor authentication (MFA) is required for all privileged access to production systems.
• Penetration Testing: We conduct regular third-party penetration tests and vulnerability assessments of our systems and applications.
• Security Training: All employees receive regular security awareness training and phishing simulation exercises.
• Incident Response: We maintain a documented incident response plan and will notify affected users and regulatory authorities of material security breaches as required by law.

Despite these measures, no system is completely secure. We cannot guarantee that unauthorized parties will never circumvent our security measures. If you believe your account has been compromised, please contact us immediately at hello@aslenprotexts.com.

8. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

8.1 Universal Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Portability: Request your data in a machine-readable format for transfer to another service.
• Objection: Object to the processing of your data for certain purposes, including direct marketing.
• Restriction: Request that we restrict processing of your information in certain circumstances.

8.2 Marketing Opt-Out

You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at hello@aslenprotexts.com. Please allow up to 10 business days for your request to take effect.

8.3 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, the right to delete, the right to correct, the right to opt-out of sale or sharing, and the right to limit use of sensitive personal information. We do not sell personal information or share it for cross-context behavioral advertising. To exercise your California rights, contact us at hello@aslenprotexts.com.

8.4 GDPR Rights (European Users)

If you are located in the EEA, you have the right to lodge a complaint with your local supervisory authority if you believe we have processed your data unlawfully. You may also withdraw consent for consent-based processing at any time, which will not affect the lawfulness of processing based on consent before withdrawal.

9. Children's Privacy

Our Services are not directed to, and we do not knowingly collect personal information from, children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at hello@aslenprotexts.com.

10. International Data Transfers

Our Services are operated from the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States, which may not offer the same level of data protection as your home jurisdiction. Where required by applicable law, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission to transfer data from the EEA to the United States.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, products, and services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you interact with. The inclusion of a link does not imply our endorsement of the third party's privacy practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Material changes will be communicated to you via email and/or a prominent notice in our Services at least 30 days before the change takes effect. We encourage you to review this policy periodically. Your continued use of our Services after any changes constitutes acceptance of the updated policy.

13. Contact Information

For any questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact our Privacy Team:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.