Privacy Policy

1. Introduction

Electric Smudge ("we", "our", "us") operates the electricsmudge.com website and SnappySnap software. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our products.

2. Information We Collect

Account Information: When you create an account, we collect your email address, name (optional), and encrypted password.

License Information: We collect license keys, machine IDs (hashed for privacy), and activation data to manage your software licenses.

Payment Information: Payment processing is handled by Stripe. We receive order IDs and purchase confirmations but do not store credit card details.

Newsletter Subscription: If you subscribe to our newsletter, we collect your email address, subscription preferences, and IP address for consent verification.

Usage Data: We may collect information about how you access and use our website, including IP addresses, browser type, and pages visited.

3. How We Use Your Information

• To create and manage your account
• To process purchases and manage licenses
• To send transactional emails (purchase confirmations, license keys, password resets)
• To send marketing communications if you have opted in
• To respond to customer support requests
• To improve our products and services

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Contract: Processing necessary for account creation and license management
• Consent: Newsletter subscriptions and marketing communications
• Legitimate Interest: Improving our services and preventing fraud

5. Data Sharing

We do not sell your personal information. We may share data with:

• Stripe: For payment processing
• SendGrid: For email delivery
• Cloudflare: For website hosting and security

6. Your Rights

For all users:

• Access your personal data via your account dashboard
• Update or correct your information
• Unsubscribe from marketing emails at any time

Additional rights for EEA users (GDPR):

• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

California residents (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination

7. Data Retention

We retain your account data for as long as your account is active. License information is retained for the duration of your license validity plus 3 years for tax/legal purposes. You may request deletion of your account by contacting us.

8. Security

We implement industry-standard security measures including password hashing (PBKDF2), HTTPS encryption, and secure session management. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.