Privacy Policy

This privacy policy describes how Semnal LLC ("we," "us," or "our") collects, uses, and protects your personal information when you use Versufy (the "Service"). We are committed to protecting your privacy and being transparent about our data practices in accordance with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and California Privacy Rights Act (CPRA).

Data Controller

Semnal LLC is the data controller responsible for your personal information. For questions about this policy or to exercise your privacy rights, contact us at [email protected].

Information We Collect

We collect information you provide directly and information collected automatically:

Information You Provide

• Account information (email address, password)
• Profile information (preferences, settings)
• Decision content (titles, choices, features, feature values, images)
• Payment information (processed securely through Stripe; we do not store full card details)
• Communications with us (support requests, feedback)

Information Collected Automatically

• IP address and device identifiers
• Browser type and operating system
• Pages visited, time spent, and navigation patterns
• Referring website and exit pages
• Date and time of access
• Location data (general geographic location based on IP)

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract: To provide our services when you create an account and manage your subscription
• Legitimate Interest: To improve our services, ensure security, prevent fraud, and analyze usage patterns
• Consent: For marketing communications and non-essential cookies (analytics)
• Legal Obligation: To comply with applicable laws, regulations, and tax requirements

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Process and manage your account and subscriptions
• Enable you to create, share, and fork decisions
• Process payments through Stripe
• Respond to your requests and provide customer support
• Send service-related communications (account alerts, security notices, subscription updates)
• Send marketing communications (with your consent)
• Analyze usage patterns to improve Service functionality
• Detect, prevent, and address technical issues, security threats, and fraud
• Comply with legal obligations

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Account information: Retained while your account is active and for 30 days after deletion request
• User-generated content (decisions, choices): Retained indefinitely unless you request deletion
• Payment records: Retained for 7 years (tax compliance)
• Analytics data: Retained for 26 months (Google Analytics retention)
• Marketing data: Retained until you withdraw consent
• Communication records: Retained for 3 years

You may request earlier deletion by contacting [email protected], subject to legal retention requirements.

Information Protection

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using SSL/TLS technology
• Secure storage on protected networks with access controls
• Regular security assessments and updates
• Employee training on data protection practices

Your password is encrypted and never stored in plain text. Our personnel will never ask you for your password.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Essential Cookies

Required for Service functionality, authentication, and security. These cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our Service. We use Google Analytics to collect aggregate usage data. These cookies require your consent and will only be set if you accept analytics cookies.

Preference Cookies

Remember your settings and preferences for future visits.

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect Service functionality. We honor Do Not Track (DNT) browser signals and will not track, plant non-essential cookies, or use advertising when DNT is enabled.

Third-Party Disclosure

We do not sell, rent, or trade your personal information. We may share information with:

• Service Providers: Companies that help us operate our services (hosting, analytics, payment processing, email delivery) under confidentiality agreements
• Legal Requirements: When required by law, court order, or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any change in ownership)
• Public Decisions: When you make decisions public, they are visible to all users and visitors

Our current third-party service providers include:

• Stripe (Privacy Policy) - Payment processing
• Google Analytics (Privacy Policy) - Usage analytics
• Cloudflare R2 (Privacy Policy) - File storage
• Resend - Transactional email delivery
• Sentry (Privacy Policy) - Error tracking (production only)

International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are accessing our Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. We implement appropriate safeguards for international transfers, including standard contractual clauses where required by GDPR.

Your Privacy Rights

All Users

• Access your personal information through your account settings
• Update or correct your information at any time
• Delete your account and personal data
• Opt out of marketing communications
• Download your decision data (export functionality)

European Union Residents (GDPR)

If you are located in the EU/EEA, you have additional rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (for processing based on consent)
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

EU Supervisory Authorities: https://edpb.europa.eu/about-edpb/board/members_en

We will not process data of users known to be under 16 years of age without parental consent.

California Residents (CCPA/CPRA)

California residents have the following rights:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: Opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

Categories of Personal Information Collected:

• Identifiers (email, IP address)
• Internet activity (pages viewed, decisions created)
• Geolocation data (approximate location from IP)
• User-generated content (decisions, choices, features)

Business Purpose: We use this information to provide and improve our services as described in this policy.

Sale of Information: We do not sell your personal information as defined under the CCPA/CPRA.

To exercise your California privacy rights, contact us at [email protected]. We will verify your identity before processing requests.

Children's Privacy (COPPA)

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly. If you believe we have information from a child under 13, please contact us immediately at [email protected].

Email Communications (CAN-SPAM Act)

We collect your email address to:

• Send service-related notifications and updates
• Process password resets and account security
• Respond to inquiries and support requests
• Send subscription-related communications
• Send marketing communications (with your consent)

In compliance with the CAN-SPAM Act, we:

• Do not use false or misleading subjects or sender information
• Identify promotional messages as advertisements
• Include our physical business address in emails
• Honor opt-out and unsubscribe requests within 10 business days
• Provide an unsubscribe link in all marketing emails

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users via email within 72 hours of discovery
• Post a notification on our Service
• Notify relevant supervisory authorities as required by law (EU/EEA)
• Provide information about the breach, likely consequences, and steps you can take to protect yourself

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting a notice on our Service or sending you an email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

Contact Us

For questions about this privacy policy, to exercise your privacy rights, or to file a complaint, contact us at:

Semnal LLC
4363 Sentinel Pl. NW
Kennesaw, GA 30144
Email: [email protected]

We will respond to all privacy-related requests within 30 days.