Privacy Policy
Effective Date: January 01, 2025
Last Updated: January 01, 2025
1. Introduction
Huddle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, and contact details
- Payment Information: Billing address and payment method (processed by our payment provider)
- Usage Data: Information about how you interact with our service
- Communications: Support requests, feedback, and other communications
2.2 Information We Collect Automatically
- Log Data: IP address, browser type, operating system, and access times
- Device Information: Device type, unique device identifiers
- Cookies: We use cookies to enhance your experience and analyze usage
- Analytics: Performance metrics and usage patterns
3. How We Use Your Information
We use the collected information for:
- Providing and maintaining our service
- Processing transactions and billing
- Sending administrative information and updates
- Responding to support requests
- Improving our service and developing new features
- Detecting and preventing fraud or abuse
- Complying with legal obligations
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information:
- With Service Providers: Third parties who help us operate our service
- For Legal Requirements: When required by law or to protect rights
- Business Transfers: In connection with mergers or acquisitions
- With Your Consent: When you explicitly agree to sharing
5. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication
- Employee training on data protection
- Incident response procedures
5.1 Third-Party Platform Connections
When you connect Huddle to your Smartsheet or other platform accounts:
- Zero-Access Architecture: We do not have access to your source platform environments or unencrypted credentials
- Encrypted API Tokens: All authentication tokens are encrypted using AES-256-CBC encryption before storage
- Customer-Only Access: Only you can decrypt and use your connection credentials to access your Smartsheet data
- No Backdoor Access: Our personnel cannot access your Smartsheet environment or view your source data
- Secure Key Management: Encryption keys are securely managed and rotated regularly
5.2 Data Processing
When processing data from connected platforms:
- Data is accessed only through your encrypted credentials
- Processing occurs in isolated, secure environments
- Temporary data is purged after processing
- No cross-customer data access is possible
- All operations are logged for audit purposes
6. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your data (subject to legal requirements)
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
7. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.
9. Children's Privacy
Our service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.
10. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination
11. Cookie Policy
We use cookies and similar technologies to:
- Maintain your session and preferences
- Analyze usage and improve performance
- Provide personalized content
- Security and fraud prevention
You can control cookies through your browser settings. Note that disabling cookies may affect functionality.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through our service. Your continued use after changes constitutes acceptance.
13. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
Huddle Privacy Team
Email: privacy@letshuddle.ai
Phone: 1-800-HUDDLE1
Address: Cronos Consulting Group, Inc.
This Privacy Policy is part of our Terms of Service and should be read in conjunction with them.