Privacy Policy for Checklist

This Privacy Policy describes how Checklist ("we," "us," or "our") collects, uses, and discloses your information when you visit our website https://checklistapp.space (the "Site") and use our services, including our browser extension. We are committed to protecting your privacy and handling your data in a transparent manner. This policy outlines our practices in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect various types of information in connection with the services we provide, which may include personal data. Personal data refers to any information that can be used to identify you directly or indirectly. The types of information we collect depend on how you interact with our Site and services.

1.1. Information You Provide Directly

Create or customize checklists: While we do not require account creation, if features are introduced that allow saving or sharing customized checklists, any data you input into these checklists (e.g., task names, descriptions, completion status) would be collected. This data is primarily stored locally within your browser or device if you are using the extension, but may be synchronized to our servers if cloud sync features are enabled.
Contact us: When you send us emails or other communications, we collect your contact information (e.g., email address) and the content of your message to respond to your inquiries and provide support.
Provide feedback or participate in surveys: Any information you provide in response to surveys or feedback forms, which may include your opinions, preferences, and suggestions.

1.2. Information Collected Automatically

When you access and use our Site or browser extension, we may automatically collect certain information about your device and usage patterns. This information helps us understand how our services are used, improve functionality, and troubleshoot issues. This may include:

Usage Data: Information about how you use our Site and extension, such as the pages you visit, the features you access, the checklists you view or interact with, and the time and duration of your activities. This helps us understand popular content and areas for improvement.
Device Information: Details about the device you use to access our services, including your IP address, browser type and version, operating system, unique device identifiers, and mobile network information. This data is used for compatibility and performance optimization.
Log Data: Server logs may record information such as your web request, IP address, browser type, referring/exit pages, and URLs, and the date and time of your request. This is standard practice for website operation and security.
Cookies and Similar Technologies: We may use cookies and similar tracking technologies (e.g., web beacons, pixels) to collect information about your browsing activities. Cookies are small data files stored on your device that help us recognize you, remember your preferences, and analyze Site usage. You can control cookie settings through your browser, but disabling them may affect certain functionalities of the Site or extension.

1.3. Information from Third Parties

We generally do not receive personal information about you from third parties. If we were to integrate with third-party services in the future (e.g., analytics providers, advertising partners), we would update this policy to reflect the types of data shared and the purposes for such sharing. Any such integration would be done with your privacy in mind and in compliance with relevant data protection laws.

2. How We Use Your Information

We use the information we collect for various purposes, primarily to provide, maintain, and improve our services, and to communicate with you. Our legal basis for processing your personal data depends on the specific context in which we collect it and the purposes for which it is used. Generally, we process your data based on:

Your consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., for marketing communications).
Contractual necessity: Where the processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., to provide you with access to our services).
Legal obligations: Where the processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax and accounting requirements).
Legitimate interests: Where the processing is necessary for our legitimate interests or those of a third party, provided that your fundamental rights and freedoms do not override those interests (e.g., for security purposes, to improve our services, or for analytics).

Specifically, we use your information for the following purposes:

To Provide and Maintain Our Services: This includes operating the Site and the browser extension, enabling you to browse, create, and manage checklists, and ensuring the proper functioning of our features. For example, if you use the extension, your checklist data is processed to display and save your checklists.
To Improve and Personalize Our Services: We analyze usage patterns and feedback to understand how our services are used, identify areas for improvement, and develop new features. This might involve analyzing which checklists are most popular or how users interact with the extension interface to enhance user experience.
To Communicate with You: We may use your contact information to respond to your inquiries, provide customer support, send you technical notices, updates, security alerts, and administrative messages. We will only send promotional communications if you have opted in to receive them.
For Security and Fraud Prevention: We use information to detect, prevent, and address technical issues, security incidents, and fraudulent activities. This includes monitoring for unauthorized access and ensuring the integrity of our systems.
For Analytics and Research: We use aggregated and anonymized data for analytical purposes to understand trends, track the effectiveness of our content, and conduct research to improve our services. This helps us make informed decisions about product development and content strategy.
To Comply with Legal Obligations: We may process your information to comply with applicable laws, regulations, legal processes, or governmental requests, such as responding to subpoenas or court orders.

3. How We Share Your Information

We are committed to maintaining your trust, and we want you to understand when and with whom we may share the information we collect. We do not sell your personal data to third parties. We may disclose your information in the following circumstances:

With Your Consent: We may share your information when you give us explicit consent to do so. For example, if we introduce a feature that allows you to share a customized checklist with others, we would only do so with your direct instruction and consent.
Service Providers: We may engage third-party companies and individuals to perform services on our behalf, such as hosting, data analysis, customer support, and technical maintenance. These service providers will have access to your information only to the extent necessary to perform their functions and are obligated not to disclose or use it for any other purpose. We ensure that these third parties adhere to strict data protection and security standards.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any such change in ownership or control of your personal information.
Legal Requirements and Law Enforcement: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) prevent or investigate possible wrongdoing in connection with the services, (iv) protect the personal safety of users of the services or the public, or (v) protect against legal liability.
Aggregated or Anonymized Data: We may share aggregated or anonymized information that cannot reasonably be used to identify you. This type of data is often used for analytical purposes, such as reporting on usage trends or for research, and does not fall under the scope of personal data.

4. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

For checklist data, if you are using our browser extension, your data is primarily stored locally. If cloud synchronization features are enabled, your checklist data will be retained on our servers for as long as your account remains active or as long as necessary to provide the service. Upon account deletion or cessation of service, we will take reasonable steps to delete or anonymize your checklist data.

5. Your Data Protection Rights

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal data. We are committed to facilitating the exercise of these rights. These rights may include:

Right to Access: You have the right to request copies of your personal data that we hold. We may charge you a small fee for this service.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the contact details provided in the "Contact Us" section below. We will respond to your request in accordance with applicable data protection laws.

6. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under age 13 without verification of parental consent, we take steps to remove that information from our servers.

7. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. We will also inform you via email and/or a prominent notice on our Site, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.