Privacy Policy

1. Who We Are

2. What Data We Collect

We only collect the information necessary to run our services:

• Identification – name, email address, and phone number so we can create/manage your account and communicate with you. We keep this while your account is active plus two years.
• Usage data – IP address, browser/device details, and interactions with our site or extension. This helps improve security, diagnose issues, and understand product use. Aggregated analytics data is stored for up to 14 months.
• Payment details – billing name, address, and the last four digits of your card (handled by our payment processor). Records are retained for seven years to meet tax obligations.
• Marketing preferences – your newsletter opt‑in status and email‑interaction metrics, processed only with your consent and kept until you withdraw it.

We do not intentionally collect sensitive (special‑category) personal data unless you choose to provide it.

3. How We Use Your Data

• Provide, operate, and maintain the website, Chrome extension, and related services.
• Personalise content and remember your preferences.
• Process orders, payments, and support requests.
• Send service emails and—only with your consent—marketing updates (you may opt out anytime).
• Detect, prevent, and investigate fraud or abuse.
• Comply with legal requirements.

We never sell your personal information.

4. Cookies & Similar Technologies

We use first‑party cookies for sign‑in, preference storage, and security, plus Google Analytics/Ads cookies for aggregated statistics. In the EEA/UK, non‑essential cookies load only after you grant consent via our banner. You can change or withdraw consent anytime in Cookie Settings.

5. Sharing & International Transfers

We share personal data only with trusted providers who help us operate our services (e.g., hosting, payments, analytics) under strict contracts and Standard Contractual Clauses where required. An up‑to‑date list of sub‑processors is available at acroqube.com/sub‑processors. Data may be processed outside your country; we ensure adequate safeguards for such transfers.

6. Your Rights

Regardless of where you live, you can:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion or restriction of processing.
• Object to certain processing, including direct marketing.
• Receive a copy of your data in a portable format.

Additional rights may apply under local laws (e.g., CPRA in California, GDPR in the EEA/UK). To exercise any right, email support@acroqube.com. We respond within 30 days (GDPR) or 45 days (US state laws).

7. Security

• TLS 1.3 protects data in transit and AES‑256 protects it at rest.
• Regular vulnerability scans and annual penetration tests.
• Access limited to authorised staff under confidentiality agreements.

If a data breach occurs, we will notify affected users and regulators promptly (within 72 hours under GDPR; seven business days under US laws).

8. Children

Our services are not directed to children under 13. We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Automated Decision‑Making & AI

We use on‑device AI models only when you explicitly invoke them (e.g., fixing selected text). We do not make automated decisions that produce legal or similarly significant effects without human review.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described or to meet legal requirements, after which we securely delete or anonymise it.

11. Marketing Communications

You may unsubscribe from marketing emails at any time via the link in each message or by emailing support@acroqube.com. Service‑related emails will still be sent when necessary.

12. Changes to This Policy

We may update this notice from time to time. We will post any changes here and, for material changes, notify registered users by email at least 14 days before they take effect. The "Last Revised" date reflects the latest update.

13. Contact