1. Introduction

This Privacy Policy describes how SDCCD Measure HH Active Firms, operated by DELT Strategy ("we," "us," or "the Platform") collects, uses, and protects your personal information when you use our subscription-based platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Authentication credentials (managed securely through Manus OAuth)

2.2 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card information. We receive and store only:

• Stripe customer ID
• Subscription status
• Billing dates
• Last four digits of payment method (from Stripe)

2.3 Usage Data

We automatically collect information about how you use the Platform:

• Pages visited and features accessed
• Search queries and filters applied
• Data exports and downloads
• Login times and session duration
• Device information (browser type, operating system)
• IP address

3. How We Use Your Information

We use collected information for:

• Service Delivery: Providing access to Platform features and data
• Account Management: Creating and maintaining your account
• Billing: Processing subscription payments and managing billing
• Communication: Sending service updates, renewal reminders, and support responses
• Platform Improvement: Analyzing usage patterns to enhance features and user experience
• Security: Detecting and preventing fraudulent activity or unauthorized access
• Legal Compliance: Meeting legal obligations and enforcing our Terms of Service

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with trusted service providers who assist in operating the Platform:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Manus: Authentication and hosting infrastructure
• Cloud Storage: Secure data storage and backup

4.2 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.

4.4 No Selling of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication through OAuth 2.0
• Regular security audits and updates
• Access controls and authentication requirements
• Secure cloud infrastructure with automatic backups

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account closure, we retain certain information for:

• Legal compliance and tax purposes (typically 7 years for financial records)
• Dispute resolution and fraud prevention
• Enforcing our Terms of Service

7. Your Rights and Choices

7.1 Access and Correction

You can access and update your account information through your Account page.

7.2 Account Deletion

You may request account deletion by contacting us. We will delete or anonymize your information, except where retention is required by law.

7.3 Communication Preferences

You can manage email notification preferences through your Account settings. Note that certain service-related communications (billing, security alerts) cannot be opted out.

7.4 California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt-out of sale (though we do not sell personal information).

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze Platform usage and performance
• Prevent fraud and enhance security

You can control cookies through your browser settings, but disabling cookies may limit Platform functionality.

9. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

10. International Users

The Platform is operated in the United States. If you access the Platform from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email to active subscribers.

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact us through the Platform's support channels or Account page.