Privacy Policy

1. Information We Collect

• Account information: email address and password hash when you register for an account.
• Site information: domain names and configuration settings you provide for each site.
• Consent records: anonymized consent actions, detected tracking categories, and approximate location data derived from visitor interactions with our widget.
• Usage data: pages visited, browser type, and diagnostic logs to help us operate and improve the service.

2. How We Use Your Information

• Provide, maintain, and improve the ConsentKit service.
• Process payments and manage subscriptions via Stripe.
• Communicate with you about your account and support requests.
• Generate aggregated, non-identifying analytics.
• Comply with legal obligations and protect our rights.

3. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe: for payment processing. Stripe's privacy policy applies to payment data.
• Cloudflare: for hosting, security, and edge delivery.
• Service providers: who assist us in operating the service under strict confidentiality obligations.
• Legal authorities: when required by law or to protect our rights.

4. Data Retention

We retain account information for as long as your account is active. Consent records are retained according to your selected plan. When you delete your account, we remove or anonymize your data within 30 days, except where retention is required by law.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing activities.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@consentkit.us.

6. Security

We use industry-standard security measures, including HTTPS encryption, hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

ConsentKit is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website.