PRIVACY POLICY

Information We Collect

We collect the following categories of personal information:

• Identifiers: Name, email address, postal address, phone number, IP address, and unique device identifiers
• Business Information: Company name, business email, social media handles, and business contact information
• Commercial Information: Records of services purchased, payment history, and transaction details
• Internet Activity: Browsing history on our website, interaction with our services, and cookies data
• Geolocation Data: General location based on IP address
• Professional Information: Business industry, company size, marketing objectives
• Communications: Content of messages, feedback, and inquiries you send to us

How We Collect Information

We collect information through:

• Direct interactions when you contact us, request services, or submit information through services linked from our website
• Automated technologies including cookies, web beacons, and analytics tools
• Third-party sources such as social media platforms (when you grant us access)
• Business partners and service providers

How We Use Your Information

We use your personal information for the following business purposes:

• Provide, maintain, and improve our marketing services
• Process transactions and send related information including confirmations and invoices
• Respond to your inquiries, comments, and requests for customer support
• Send you technical notices, security alerts, and administrative messages
• Communicate with you about products, services, offers, and events (with your consent)
• Monitor and analyze trends, usage, and activities to improve our services
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our terms and policies
• Create aggregated or de-identified data that cannot reasonably identify you

Disclosure of Information

We may share your personal information with:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., hosting, analytics, payment processing)
• Business Partners: With your consent, we may share information with partners for joint marketing initiatives
• Legal Compliance: When required by law, legal process, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

We do not sell your personal information to third parties for monetary consideration. We do not "share" your personal information for cross-context behavioral advertising purposes as defined under the CPRA. We may share information for business purposes as described above.

Categories of Personal Information Disclosed for Business Purposes (past 12 months): Identifiers, commercial information, and internet activity have been disclosed to service providers for analytics, marketing, and operational purposes.

Sensitive Personal Information

Under the CPRA, "sensitive personal information" includes social security numbers, driver's license numbers, financial account information, precise geolocation, racial/ethnic origin, religious beliefs, union membership, genetic data, biometric information, health information, and sexual orientation.

We do not intentionally collect sensitive personal information. If we do collect any sensitive personal information in the future, we will provide you with the right to limit its use and disclosure as required by California law.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information about your browsing activities. You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.

Do Not Track Signals: California law requires us to disclose how we respond to web browser "Do Not Track" (DNT) signals. We currently do not respond to DNT signals because there is no industry-standard interpretation. However, you may opt out of certain tracking by adjusting your browser settings or using the opt-out mechanisms described in this policy.

Global Privacy Control (GPC): We do not sell or share personal information for cross-context behavioral advertising, so there is currently no sale or sharing from which to opt out. If our practices change, we will recognize qualifying opt-out preference signals, including Global Privacy Control, as required by applicable law.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on the type of information and the purposes for which it was collected.

Data Security

We implement appropriate technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

Your Privacy Rights

All Users:

• Access and receive a copy of your personal information
• Correct inaccurate or incomplete personal information
• Request deletion of your personal information
• Opt-out of marketing communications at any time

California Residents - Additional CCPA/CPRA Rights:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom it was shared
• Right to Delete: Request deletion of personal information we collected from you (subject to certain exceptions)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt-out of the sale or sharing of personal information (we do not sell personal information)
• Right to Limit: Limit the use and disclosure of sensitive personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

How to Exercise Your Rights:

To exercise any of these rights, please contact us at info@aslaninbox.com or call us at 1 (888) 646-4445. You may also submit a request through our contact form.

Verification Process: To protect your privacy, we will verify your identity before processing your request. Verification may require you to provide: (1) at least two data points matching information we have on file, and (2) for requests for specific pieces of personal information, a signed declaration under penalty of perjury that you are the consumer whose information is being requested.

Response Timeline: We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 calendar days. If we need additional time (up to 45 more days), we will notify you in writing.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. The authorized agent must provide: (1) your signed written permission, and (2) proof of their own identity. We may also require you to verify your identity directly with us.

Appeal Process: If we deny your request, you have the right to appeal. To appeal, contact us at info@aslaninbox.com with "Privacy Request Appeal" in the subject line. We will respond to your appeal within 60 days.

California "Shine the Light" Law

California Civil Code Section 1798.83 ("Shine the Light") permits California residents who are our customers to request and obtain from us once a year, free of charge, information about the categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information shared and the names and addresses of all third parties with which we shared information.

We do not disclose personal information to third parties for their direct marketing purposes. If this practice changes, we will update this policy and provide you with an opt-out mechanism.

California Delete Act (SB 362) Compliance

We are not a data broker as defined under California Civil Code Section 1798.99.80. We do not sell or license personal information obtained from sources other than directly from consumers. If this status changes, we will register with the California Privacy Protection Agency and provide required deletion mechanisms.

Financial Incentive Programs

We do not currently offer financial incentive programs in exchange for the retention, sale, or sharing of your personal information. If we offer such programs in the future, we will provide you with clear notice and obtain your opt-in consent as required by the CPRA.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those of your country. By using our services, you consent to the transfer of your information to the United States and other countries where we operate.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting a notice on our website or sending you an email. Your continued use of our services after such modifications constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us: