Privacy Policy

Introduction

Soft Umbrella ("we," "our," or "us") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and otherwise process information in connection with our public website at softumbrella.com; our mobile applications for Android and iOS; and related support, help, account, or download pages we operate for those applications (collectively, the "Services"). Unless we post a separate notice for a specific offering, this policy applies to these Services.

Our primary operations are based in the United States. If you access the Services from other jurisdictions, local laws may provide additional rights and protections.

Services covered by this policy

This policy applies to personal information we process in connection with:

• Soft Umbrella website — pages and content on softumbrella.com, including information you submit when you contact us or sign up for communications you choose to sign up for there.
• Mobile applications — our Android and iOS applications and their in-app features.
• Related support and account pages — support, help, account, or download pages we operate for the applications, where personal information is collected as described in this policy.

We may update or discontinue features from time to time. Unless we provide a separate privacy notice for a new offering, updates remain covered by this policy.

Our role

We act as the data controller for personal information collected through the Services.

Information we collect

The types of information we collect depend on how you use the Services and the choices you make. We may collect information that identifies or relates to you ("personal information") as well as information that does not identify you directly. Categories may include:

• Information you provide — for example, name, email address, username, authentication and account sign-in information, transaction and billing-related information associated with purchases or subscriptions, which may be processed by app stores or payment processors on our behalf, messages you send us (including support requests), content and information you submit or save in the apps or on our sites, and any other information you choose to submit through forms, email, or in-app flows.
• Automatically collected data — for example, IP address, device and browser or app version, operating system, referring URLs, pages or screens viewed, timestamps, crash or diagnostic logs, performance data, usage metrics, security-related events, and similar technical data collected through the Services, including server logs and comparable technologies in our mobile apps, where applicable.
• Information from third parties — for example, data from app stores, analytics providers, authentication providers you choose to use, or payment processors, as permitted by law.
• Derived information — for example, structured or processed outputs, saved settings, and similar results generated from content you provide or from your use of features in the Services.

Payment transactions may be processed by third-party app stores or payment processors, and we do not receive full payment card numbers unless expressly stated at the point of collection.

We may collect other information when reasonably necessary to operate, secure, support, improve, or lawfully provide the Services.

How we use information

We use collected information for purposes reasonably necessary to provide, operate, secure, improve, and support the Services, and as otherwise permitted by applicable law. Uses may include:

• Providing, operating, maintaining, securing, and improving the website, mobile apps, and related support, help, account, or download pages;
• Processing content you provide to deliver the Services and related outputs, syncing or storing your content where you enable those features, and maintaining and improving the accuracy and reliability of those features;
• Communicating with you about the Services, including transactional and support messages, and where permitted by law, promotional communications where we offer them;
• Understanding usage, performance, and trends to guide product development and quality assurance;
• Remembering your settings and preferences, organizing saved content, and similar in-app or on-site functionality you use;
• Detecting, investigating, and helping prevent fraud, abuse, security incidents, or harmful activity;
• Complying with law, responding to lawful requests, and enforcing our terms and policies;
• Internal business purposes such as accounting, auditing, and record-keeping;
• Other purposes we describe at the time of collection or for which we obtain your consent where required.

We do not currently use user-submitted content to train generalized AI or machine learning models. If that changes, we will update this Privacy Policy and provide any additional notice or consent required by applicable law.

We may use aggregated or de-identified information that cannot reasonably be used to identify you for lawful purposes such as analytics and product improvement.

Legal bases for processing (EEA, UK, and similar jurisdictions)

Where required by law, we rely on one or more legal bases to process personal information, including: performance of a contract; legitimate interests (such as security, product improvement, and business operations); compliance with legal obligations; and consent where required. When we rely on consent, you can withdraw it as permitted by law.

How we share or disclose information

We do not currently sell personal information or share personal information for cross-context behavioral advertising. We may use analytics tools to understand how people use the Services and improve them. We may share or disclose information in the situations below, subject to applicable law and any choices or controls we offer you:

• Service providers - with vendors, contractors, and service providers who perform services on our behalf (for example hosting, infrastructure, analytics, customer support tools, email delivery, security, and payment processing), under contractual or other arrangements we consider appropriate for the nature of the services they provide.
• Business transfers - in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the event of insolvency, where information may be transferred as part of that process.
• Legal and safety - when we believe disclosure is required or appropriate to comply with law, regulation, legal process, or governmental requests; to enforce our agreements or policies; or to protect our rights, property, safety, or the rights, property, or safety of our users or others.
• With your direction or consent - when you ask us to share information, use third-party services you connect, or when you otherwise consent.

We may also disclose information to auditors, insurers, and authorities as reasonably necessary for legal, compliance, tax, accounting, security, and corporate governance purposes.

Third-party services are governed by their own privacy policies and practices.

Sensitive information

We do not ask you to provide health information or other special categories of data solely to use basic website or app features. Information or notes you enter might incidentally reveal preferences or conditions; we process such content only to provide the Services you request and as otherwise permitted by law. Account credentials and similar data are handled for authentication, security, and service delivery as permitted by law.

International processing

We may process, store, and transfer information in the United States and in other countries where our service providers operate. Those countries may have data protection laws that differ from those where you live. Where required by applicable law, we will use appropriate safeguards, such as contractual protections and transfer mechanisms recognized by applicable law.

Cookies and similar technologies

We do not currently use cookies on our public website for analytics, advertising, or preference management. Our mobile apps and third-party service providers may use comparable technologies where necessary to operate features such as authentication, security, diagnostics, crash reporting, or service functionality. If our use of website cookies or similar tracking technologies changes, we will update this Privacy Policy and provide any notice or choices required by law.

Data retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, resolve disputes, comply with legal, tax, and accounting requirements, enforce agreements, and maintain backups or archival copies, unless a longer or shorter period is required or permitted by law.

Automated processing

Some features use automated methods to process content, generate outputs, organize information, or help detect abuse.

Security

We implement reasonable technical and organizational measures designed to protect information appropriate to the nature of the processing. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your privacy rights and choices

Depending on your location and applicable law, you may have rights regarding your personal information (for example access, correction, deletion, portability, restriction or objection to certain processing, or withdrawal of consent where processing is consent-based). The availability and scope of these rights vary. To submit a request or question, contact us using the information below. We will respond in accordance with applicable law. You may also have the right to lodge a complaint with a supervisory authority where you live or work, where that right exists.

• Marketing controls - Where we offer promotional communications, you may opt out using the unsubscribe mechanism in those messages.
• App and device settings - Where technologies in our mobile apps can be limited, you may adjust relevant settings in the app or on your device.
• Account controls - You may update account information through your account or by contacting us.
• Authorized agents - Where permitted by law, an authorized agent may submit requests on your behalf, subject to verification.
• Non-discrimination - We will not unlawfully discriminate against you for exercising privacy rights.

How to submit a privacy request: To exercise privacy rights available to you under applicable law, email privacy@softumbrella.com with one of these subject lines (or a substantially similar subject): "Privacy Request - Access", "Privacy Request - Delete", "Privacy Request - Correct", or "Privacy Request - Appeal". Include your full name, email address used with the Services, state/country of residence, and enough detail for us to process your request. We may verify requests by matching information to your account or prior contacts with us, and we may deny or limit requests where permitted by law.

US state privacy disclosures

Depending on where you live, US state law may provide additional rights regarding your personal information (for example rights to know, access, delete, correct, or obtain a copy, or rights relating to certain types of processing where those laws apply).

We do not currently sell personal information or share personal information for cross-context behavioral advertising. We may use service providers for analytics, security, hosting, payments, customer support, and similar operational purposes.

You may submit requests by contacting us at privacy@softumbrella.com. We may need to verify your identity before processing requests. Where required by law, you may appeal a denied request by replying to our response with "Appeal" in the subject line.

Describe your request with enough detail for us to evaluate and process it under applicable law.

Children and minors

Our Services are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it.

Where applicable law provides additional protections for minors (for example individuals under 16 in certain jurisdictions), we apply those protections as required by law, including additional consent or restricted processing where applicable.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the “Last updated” date. Where required by law, we will provide additional notice or obtain consent.

Contact us

Soft Umbrella LLC is the controller of personal information described in this Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@softumbrella.com.

If you are contacting us to exercise privacy rights, include enough information for us to identify your relationship with Soft Umbrella and process your request.