Privacy Policy

Symbology is operated by Streetfortress Industries, LLC ("we", "us", or "our"). This policy explains how we handle personal data when you use the Service. For data-protection purposes, Streetfortress Industries, LLC is the data controller.

We collect only what we need to run the Service:

• Account information — your name, email address, and a securely hashed password. We never store your password in plain text. We also record whether your email has been verified and any profile preferences you set.
• Usage data you create — the companies you add to your watchlist and similar in-app activity.
• Payment records — if you make a supporter contribution, our payment processor (Stripe) handles your card details; we never see or store your full card number. We retain a record of the contribution (amount, the period granted, and the Stripe transaction identifier).
• Session & technical data — session tokens needed to keep you logged in, and standard technical information (such as your IP address and browser type) processed by our hosting infrastructure to deliver and secure the Service.
• Analytics — privacy-friendly, aggregate usage statistics (such as page views) collected through our self-hosted Umami analytics, which does not use tracking cookies or build advertising profiles.

• to create and operate your account;
• to provide core features such as your watchlist and supporter access;
• to send transactional emails — verification, password reset, and welcome messages;
• to process and record supporter contributions;
• to secure the Service, prevent abuse, and meet legal obligations;
• to understand aggregate usage so we can improve the Service.

We do not sell your personal data, and we do not use it for third-party advertising.

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: contract (to provide the account and features you request), legitimate interests (to secure, maintain, and improve the Service), legal obligation (for example, retaining payment records), and consent where required.

We share personal data only with service providers that help us run the Service, and only as needed:

• Stripe — payment processing. Receives your email and contribution details.
• Resend — delivery of transactional email. Receives your email address.
• Hosting & infrastructure providers — process data on our behalf to operate the Service.
• Google Fonts — serving web fonts may expose your IP address to Google as part of standard delivery.

We may also disclose information when required by law, to enforce our Terms, or to protect the rights, safety, and property of Symbology, our users, or others. If we are involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction.

We use a small number of strictly necessary cookies to keep you signed in and to operate the Service. Our analytics are cookieless. We do not use advertising or cross-site tracking cookies.

We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (such as payment and tax records) to comply with legal obligations.

We use reasonable technical and organizational measures to protect your data, including password hashing and encrypted connections. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to restrict or object to certain processing; and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local data-protection supervisory authority.

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion of your personal information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law. To make a request, contact us using the details below.

We and our service providers may process your data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers of personal data.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

For privacy questions or to exercise your rights, contact us at support@streetfortress.com.