Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last Updated: March 6, 2026

1. Overview

Castra Labs ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We may collect the following types of information:

Information You Provide

  • Name and organization name
  • Email address and phone number
  • Billing information
  • Communications and support requests

Automatically Collected

  • IP address, device, and browser information
  • Pages visited and time spent on our website
  • Log data and security event data

3. How We Use Your Information

We use the information we collect to:

  • Provide and manage the services you request
  • Respond to inquiries and communicate about your engagement
  • Process payments and manage billing
  • Improve our website and service offerings
  • Maintain security and integrity of our systems
  • Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

  • Service providers and subcontractors bound by confidentiality agreements
  • Legal or regulatory authorities when required by law or court order
  • In connection with a merger, acquisition, or sale of assets
  • With your explicit consent for any other purpose

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. All data transmitted between clients and our services is encrypted in transit using TLS 1.2 or higher. Sensitive data at rest is encrypted using industry-standard algorithms.

No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. You may request deletion of your data at any time by contacting us directly.

7. Cookies and Tracking

Our website may use cookies and similar tracking technologies for essential site functionality, security, and analytics. You can instruct your browser to refuse all cookies, though some portions of the site may not function properly if cookies are disabled.

We use Vercel Analytics for anonymized page-view metrics. This does not use cookies and does not collect personally identifiable information.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to or restrict certain processing of your data
  • Receive a copy of your data in a structured, machine-readable format

To exercise any of these rights, contact us at the address below.

9. International Data Transfers

If you access our services from outside the United States, you acknowledge that your information may be transferred to and processed in the United States.

10. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last Updated" date. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.

12. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Castra Labs

Privacy inquiries: privacy@castralabs.co