Castford, Inc. ("Castford," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at castford.com and use our platform services.
1. Information We Collect
Information You Provide
We collect information you voluntarily provide when you register for an account, subscribe to a plan, request a demo, or contact us. This includes:
- Name, email address, and business contact information
- Company name, job title, and industry
- Billing and payment information (processed securely by our payment processor)
- Communications you send to us, including support requests
Information Collected Automatically
When you access our platform, we automatically collect certain technical information:
- Device type, browser type, and operating system
- IP address and approximate geographic location
- Pages visited, time spent, and interaction patterns
- Referring URLs and search terms
Financial Data You Upload
Our platform processes financial data you choose to connect or upload, including data from integrated third-party services such as accounting software and payroll providers. This data is processed solely to deliver the services you have requested and is governed by your subscription agreement.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain our platform and services
- To process transactions and manage your subscription
- To personalize your experience and deliver relevant features
- To communicate with you about your account, updates, and support
- To analyze usage patterns and improve our platform
- To detect, prevent, and address technical issues and security threats
- To comply with legal obligations and enforce our terms
3. Data Sharing and Disclosure
We do not sell your personal information. We may share information in the following circumstances:
- With service providers who assist in operating our platform (hosting, analytics, payment processing), subject to confidentiality agreements
- When required by law, regulation, or legal process
- To protect the rights, property, or safety of Castford, our users, or the public
- In connection with a merger, acquisition, or sale of assets, with notice to affected users
4. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, regular security audits, and SOC 2 Type II compliance practices. While no method of transmission over the internet is completely secure, we take commercially reasonable steps to protect your information.
5. Cookies and Tracking
We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze platform usage. You can control cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled while using the service.
6. Third-Party Services
Our platform integrates with third-party services at your direction. When you connect a third-party service, their privacy policies govern their handling of your data. We encourage you to review the privacy policies of any third-party services you connect.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. After account closure, we retain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your data at any time by contacting us.
8. Your Rights
For All Users
You have the right to access, correct, or delete your personal information. You may also request a copy of your data in a portable format or opt out of marketing communications at any time.
California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.
European Residents (GDPR)
If you are located in the European Economic Area, you have additional rights including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is contractual necessity and legitimate interest.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
10. International Data Transfers
Your information may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Castford, Inc.
Email: legal@castford.com
Website: castford.com