Privacy Policy

1. Introduction

Pillar Apps, LLC ("Pillar Apps," "we," "us," or "our") operates patchd. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and related services. By accessing or using patchd, you agree to the practices described in this policy.

Pillar Apps is based in Colorado, United States. If you have questions, contact us at support@pillarapps.com.

2. Information We Collect

2.1 Information You Provide

• Account information - name, email address, and password when you register.
• Payment information - billing details processed securely through Stripe. We do not store full credit card numbers on our servers.
• User-generated content - data, files, audio recordings, or other content you upload or create within the application.
• Communications - messages you send to us via email or support channels.

2.2 Information Collected Automatically

• Device & usage data - IP address, browser type, operating system, referring URLs, pages viewed, and interaction timestamps.
• Location data - approximate location derived from IP address; precise location only when you use features powered by Google Maps and grant permission.
• Hardware telemetry - if you use connected hardware devices, we collect device status, sensor readings, and operational data via Particle IoT.
• Error & performance data - crash reports, performance metrics, and diagnostic information collected through Sentry.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain patchd.
• Process transactions and send billing-related communications.
• Provide AI-powered features including voice transcription.
• Send transactional emails (account verification, password resets, notifications).
• Monitor and improve application performance, security, and reliability.
• Respond to your inquiries and provide customer support.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

4. Third-Party Services

We use the following third-party services to operate patchd. Each has its own privacy policy governing the data they process on our behalf:

5. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how patchd is used. These include:

• Essential cookies - required for authentication and core functionality. These cannot be disabled.
• Functional cookies - store your preferences (theme, language, layout).
• Analytics cookies - help us understand usage patterns and improve patchd.

You can control cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some features.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data - retained until you delete your account.
• Transaction records - retained for 7 years to comply with financial and tax regulations.
• Server logs - automatically deleted after 90 days.
• Error reports - retained for 90 days via Sentry.
• Audio recordings - processed for transcription and deleted from third-party servers within 24 hours of processing. You may retain transcripts in your account.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest.
• Row-level security policies in our database (Supabase).
• Regular security audits and dependency updates.
• DDoS protection and Web Application Firewall via Cloudflare.
• PCI-DSS compliant payment processing via Stripe.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access - request a copy of the personal data we hold about you.
• Correction - request correction of inaccurate or incomplete data.
• Deletion - request deletion of your personal data.
• Portability - request your data in a structured, machine-readable format.
• Objection - object to certain processing of your data.
• Withdraw consent - where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at support@pillarapps.com. We will respond within 30 days.

9. Colorado Privacy Act

If you are a Colorado resident, the Colorado Privacy Act (CPA) provides you with additional rights regarding your personal data, including the right to access, correct, delete, and obtain a portable copy of your data, as well as the right to opt out of targeted advertising, the sale of personal data, and certain profiling activities. To exercise these rights or to appeal a decision regarding your request, contact us at support@pillarapps.com.

10. Children's Privacy

patchd is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@pillarapps.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. For significant changes, we may also notify you by email. Your continued use of patchd after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us: