1. Collecting and Processing your Personal Data

1. Providing us with personal data is voluntary and you may withdraw your consent at any time. However, choosing not to provide such data may result in our inability to deliver certain services to you.
2. We do not rent, buy or sell personal data from or to others.
3. We only collect and process your personal data when: we have your consent; we have a contractual obligation (contract); we have a legal obligation; or we have a legitimate interest.
4. We do not process personal data for longer than necessary to fulfill the purpose for processing.
5. We will only retain data for as long as we are required to as per applicable legal obligations such as accounting, tax, labor laws or any other relevant rules and regulations.
6. We process personal data for the following purposes:
   1. You communicate with us. Regardless of your relationship with us, as a potential or existing customer, vendor or other, we process your personal data whenever you communicate with us. This could be when you contact us through email, phone (call, text message) or social media. Depending on where and how you contact us, this may include your name, contact details, IP address and other information you choose to send to us.
      1. We use a customer support system to manage personal data on potential and existing customers. The purpose is to be able to respond to your inquiries and, on some occasions, to keep records in case of complaints or legal claims.
      2. We process the data for as long as communication is necessary, or as required by law for support, accounting and bookkeeping purposes.
   2. You Subscribe to CoCart Headless LLC Services/Software (Become a Customer). When you purchase software or services from us, we collect the personal data you provide during the purchase process. This may include your email address, billing address, payment details, and, where applicable, tax number and company details.
      1. The purpose of this processing is to fulfill our obligation to deliver the services you have purchased and manage the customer relationship.
      2. We process the data for as long as you are a customer, or as required by law for accounting and bookkeeping purposes.
   3. You receive marketing as an existing customer. If we have an existing customer relationship with you, we may send you emails containing a promotional element. The personal data we process is your name and email address. The purpose is to provide you with news and offers related to your subscription.
      1. You can opt out of marketing emails at any time by clicking the unsubscribe link in any such email.
      2. We process the data for as long as we have a customer relationship with you or, if the processing is based on your consent, until you withdraw it. When you ask us not to send you any promotional materials, your account will be flagged as “unsubscribed from marketing” in our internal database, and you will not receive any further marketing emails from us.
      3. We are still required to process data for accountancy, tax and other business purposes if you are our customer.
   4. You receive marketing after giving consent. If you have given us your explicit consent to receive marketing communications, we may use your personal data, such as your name and email address, to send you promotional materials and updates about our products, services, or special offers.
      1. You can opt out of marketing emails at any time by clicking the unsubscribe link in any such email.
      2. We process the data for as long as we have a marketing relationship with you or, if the processing is based on your consent, until you withdraw it.
      3. When you ask us not to send you any promotional materials, your account will be flagged as “unsubscribed from marketing” in our internal database, and you will not receive any further marketing emails from us. We are still required to process data for accountancy, tax and other business purposes if you are our customer.
   5. You Respond to Our Surveys or Fill Out Forms. We sometimes send surveys to our customers to improve our products and services. Additionally, we may collect personal data when you fill out forms on our website, such as feedback forms, inquiries or waitlist forms. Responding to our surveys and filling out forms is completely voluntary.
      1. We process personal data such as your name, contact details, and any other information you choose to share with us in forms. If a survey or form is anonymous, no personal data is processed.
      2. The purpose is to gather your feedback and information to continuously improve our products, services, and customer support.
   6. You supply services to or collaborate with us. When you enter into an agreement with us either as a vendor, partner or data processor, we process personal data such as your name, contact details and correspondence.
      1. The purpose is to enter into this agreement and communicate with you before, during and after our formal business relationship.
      2. We store personal data for as long as we have a formal business relationship, or in accordance with our legal obligations for accounting, tax and other business purposes.
7. You use our website (apisecurity.pro) and/or associated subdomains. When you use our website, we process certain technical information and personal data, such as IP addresses, user agents, access timestamps, and other security-relevant information. Our systems maintain various types of logs containing this information for up to 90 days. The specific personal data we collect may vary depending on how you interact with our services and which features you use.
   1. Additionally, we use trusted third-party service providers to help protect and optimize our services. These providers might process security-relevant information as part of their security and performance services. They might also process how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising.
   2. The purposes for this processing are: to protect our services against fraud, abuse, and cyber attacks; to ensure secure and reliable operation of our systems; to analyze usage patterns for optimization and reliability; to maintain audit trails for security investigations when needed.

2. Whom We Share Your Personal Data With

1. To run our business efficiently and securely, we sometimes will have to share your personal data with other (trusted) parties, such as:
   1. Data processors: Providers of various services that process your personal data on our behalf.
   2. Third-party contractors: Such as accountants, lawyers, software developers, IT support.
   3. Government authorities: When we are obliged to report to them.
2. We use data processors for various purposes, including:
   1. Email, calendar, and digital meetings
   2. Accounting/bookkeeping
   3. This website, including online payments and licensing providers
   4. Transactional and marketing emails to customers
   5. Support ticket system
   6. Log processing, security monitoring, and analytics services
   7. Affiliate program management
   8. Infrastructure and hosting providers

3. Transfer of personal data

1. In some cases, your personal data will be transferred to another country. For example, where we use data processors to manage email services. We only use data processors we trust that are well known, reputable, and have a data processing agreement/addendum. If you have any concerns or questions, please get in touch with us.

4. Accessing and Correcting your Personal Data

1. You have a right to access your personal data and request a correction if you believe it is inaccurate. If you have submitted personal data and would like to have access to it, or if you would like to have it corrected, please get in touch with us using the contact information provided below.

5. How to Contact Us

1. If you have any questions regarding this privacy policy or to access your information, please contact us.

6. Amendments

CoCart Headless LLC may amend this Privacy Policy at any time at its sole discretion. If a revision is material we will attempt to notify you by sending an email to your account’s email address. What constitutes a material change will be determined at our sole discretion. By continuing to access or use our Service after any revisions become effective, you agree to be bound by the revised terms. If you do not agree to the new terms, you are no longer authorized to use the Service.