1. Introduction

Annot8 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website annotation and feedback platform (the "Service").

By using Annot8, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and profile picture when you create an account
Organization Data: Workspace names, team member information, and project details
Feedback Content: Comments, annotations, and feedback you create on websites
Payment Information: Billing details processed securely through our payment provider (we do not store full payment card details)

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, and interactions with the Service
Device Information: Browser type, operating system, device identifiers
Log Data: IP addresses, access times, and referring URLs
Widget Interaction Data: DOM element selectors and page coordinates for annotation positioning (collected only on websites where our widget is installed)

2.3 Information from Third Parties

If you sign up using a third-party authentication provider (e.g., Google, GitHub), we receive your name, email, and profile picture from that provider according to your privacy settings with them.

3. How We Use Your Information

We use the collected information for the following purposes:

To provide, maintain, and improve our Service
To process your transactions and manage your account
To enable collaboration features and display annotations to authorized team members
To send you technical notices, updates, and support messages
To respond to your comments, questions, and customer service requests
To monitor and analyze trends, usage, and activities in connection with our Service
To detect, investigate, and prevent fraudulent transactions and abuse
To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

With Your Team Members: Annotations and feedback are shared with members of your workspace who have appropriate access
Service Providers: We work with third-party companies to help us operate our Service (e.g., hosting, authentication, analytics)
Legal Requirements: When required by law, subpoena, or other legal process
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: When you have given us explicit permission to share your information

5. Third-Party Services

Our Service integrates with the following third-party services:

Clerk: For authentication and user management
Convex: For real-time database and backend services
Vercel: For hosting and deployment
Stripe: For payment processing (if applicable)

Each of these services has their own privacy policies governing how they handle your data.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to:

Comply with our legal obligations
Resolve disputes
Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS/SSL), secure authentication, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 Access and Portability

You can access and export your data at any time through your account settings or by contacting us.

8.2 Correction

You can update your account information at any time through your profile settings.

8.3 Deletion

You can request deletion of your account and associated data by contacting us at privacy@annot8.app.

8.4 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or by updating your preferences in your account settings.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws, including Standard Contractual Clauses where required.

10. GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent (where processing is based on consent)
Right to lodge a complaint with a supervisory authority

Our legal bases for processing include: performance of contract, legitimate interests, consent, and compliance with legal obligations.

11. CCPA (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising your rights

We do not sell personal information. To exercise your rights, contact us at privacy@annot8.app.

12. Cookies and Tracking

We use cookies and similar technologies to:

Keep you signed in to your account
Remember your preferences
Understand how you use our Service
Improve our Service based on usage patterns

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Service.

13. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@annot8.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@annot8.app

Website: https://annot8.app