Legal
Privacy Policy
How we collect, use, and protect your personal information.
Last Updated: March 6, 20261. Overview
Castra Labs ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services.
By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.
2. Information We Collect
We may collect the following types of information:
Information You Provide
- Name and organization name
- Email address and phone number
- Billing information
- Communications and support requests
Automatically Collected
- IP address, device, and browser information
- Pages visited and time spent on our website
- Log data and security event data
3. How We Use Your Information
We use the information we collect to:
- Provide and manage the services you request
- Respond to inquiries and communicate about your engagement
- Process payments and manage billing
- Improve our website and service offerings
- Maintain security and integrity of our systems
- Comply with legal obligations
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:
- Service providers and subcontractors bound by confidentiality agreements
- Legal or regulatory authorities when required by law or court order
- In connection with a merger, acquisition, or sale of assets
- With your explicit consent for any other purpose
5. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. All data transmitted between clients and our services is encrypted in transit using TLS 1.2 or higher. Sensitive data at rest is encrypted using industry-standard algorithms.
No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. You may request deletion of your data at any time by contacting us directly.
7. Cookies and Tracking
Our website may use cookies and similar tracking technologies for essential site functionality, security, and analytics. You can instruct your browser to refuse all cookies, though some portions of the site may not function properly if cookies are disabled.
We use Vercel Analytics for anonymized page-view metrics. This does not use cookies and does not collect personally identifiable information.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information
- Object to or restrict certain processing of your data
- Receive a copy of your data in a structured, machine-readable format
To exercise any of these rights, contact us at the address below.
9. International Data Transfers
If you access our services from outside the United States, you acknowledge that your information may be transferred to and processed in the United States.
10. Children's Privacy
Our services are not directed to children under 13, and we do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last Updated" date. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.
12. Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:
Castra Labs
Privacy inquiries: privacy@castralabs.co