Privacy Statement — United States

1. Our Zero-Exposure Philosophy & Architecture

SpooksLab is built on a strict Zero-Exposure, permission-gated architecture designed to maximize your privacy and control. By using SpooksLab, you acknowledge that all sensitive data processing is securely partitioned and occurs entirely outside of SpooksLab's official infrastructure. Through strict permission protocols utilizing decentralized connections (base44), SpooksLab has no access to your personal workflows. We do not have the technical ability to access your data, and SpooksLab never sees, stores, or transmits your sensitive information.

2. The Minimal Data We Collect

Because we intentionally restrict our own access to your infrastructure, we only collect the absolute minimum data required to keep your account active and secure:

• Account Identity Data: An essential User ID (necessary for application functionality and login troubleshooting) and your email address (for critical communications such as updates, support, and billing).
• Payment & Billing Data: We do not collect or store your payment card numbers. All subscriptions and payments are securely routed through our trusted third-party payment processor, Stripe Inc. We only retain the metadata necessary to confirm your active subscription status.
• Application Connection Data: Data strictly necessary to authenticate your application connections via base44sdk, which only you can explicitly approve. We only receive operational metadata (e.g., success logs, health checks) to ensure the connection is working.

3. Data We Do NOT Collect

There is no architectural path for your sensitive data to reach our servers. Therefore, we explicitly do not collect, access, or store:

4. Purposes and Legal Bases for Processing

We process the limited data we hold solely to:

5. Sharing and Disclosure of Personal Data

Your personal data is never sold, traded, or used for behavioral advertising. We only share data with the following essential entities:

• Stripe Inc.: For processing payments and subscriptions securely.
• base44sdk: For managing the secure application connections that you explicitly authorize.
• Legal Authorities: Only if strictly required by law (e.g., subpoenas, court orders) or to protect safety, rights, or property.

6. Data Retention

We retain your personal data only for as long as your account is active or as strictly needed to provide you the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Once your data is no longer necessary for these purposes, it is permanently deleted from our systems.

7. Children's Privacy

The Service is not directed to individuals under the age of 13 (or 16, where applicable by local law). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take immediate steps to delete such information.

8. US State Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal data. SpooksLab voluntarily extends the following core privacy rights to all users, regardless of geographic location:

• Right to Access: You may request to see the exact data we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to legal and billing exceptions.
• Right to Correction: You may request corrections to any inaccurate information.
• Right to Opt-Out: Because we do not sell or share data for behavioral advertising, there is no "sale" of data to opt out of.

9. External Links and Third-Party Services

The Service may contain links to third-party websites or require you to connect third-party applications. This Privacy Statement does not govern the practices of those external services. We strongly recommend reviewing their respective privacy policies before sharing personal information.

10. Governing Law

This Privacy Statement and any disputes related to it shall be governed by and construed in accordance with the laws of the State of Minnesota, without regard to its conflict of law principles.

11. Changes to This Privacy Statement

We may update this Privacy Statement to reflect changes in our practices or legal requirements. Updates will be posted with a new effective date. Where required, we will notify users of material changes via email.

12. Contact Information

For privacy inquiries, data requests, or to exercise your rights, please contact the sole proprietor: SpooksLab — Email: contact@spookslab.com