Privacy Policy

1. Information We Collect

Depending on how you interact with AppStart, we may collect the following categories of information.

Information You Provide. You may provide:

• Name
• Email address
• Telephone number
• Company name
• Job title
• Business information
• Project requirements
• Messages and communications
• Account information
• Billing information
• Information submitted through contact forms
• Information submitted through project inquiries
• Other information you voluntarily provide

Client Project Information. When you engage AppStart, we may receive information necessary to perform the Services, including:

• Software requirements
• Source code
• Databases
• System architecture
• API credentials
• Technical documentation
• Business data
• Operational information
• System logs
• Configuration information
• Hardware specifications
• Other Client Materials

We treat client project information according to applicable agreements and confidentiality obligations.

2. Automatically Collected Information

When you visit our website, certain information may automatically be collected, such as:

• IP address
• Browser type
• Device type
• Operating system
• Referring website
• Pages visited
• Date and time of access
• Approximate location derived from IP address
• Website interactions
• Diagnostic or technical information

We may use this information to operate, secure, analyze, and improve our website.

3. Cookies and Tracking Technologies

AppStart may use cookies, pixels, analytics tools, log files, and similar technologies. These technologies may help us:

• Understand website traffic
• Measure website performance
• Improve user experience
• Remember preferences
• Analyze marketing campaigns
• Detect fraud and security issues
• Understand how visitors interact with our website

Third-party analytics, advertising, or marketing providers may also use tracking technologies according to their own privacy policies.

4. How We Use Information

We may use information to:

• Provide Services
• Respond to inquiries
• Communicate with clients
• Prepare proposals
• Develop software
• Configure infrastructure
• Provide technical support
• Process payments
• Maintain accounts
• Improve our Services
• Analyze website usage
• Prevent fraud and abuse
• Maintain security
• Comply with legal obligations
• Send business communications
• Develop new products and technologies

We may also use aggregated or de-identified information for analytics, research, product development, and business purposes where legally permitted.

5. Artificial Intelligence and Client Data

AppStart may use artificial intelligence and machine-learning technologies in providing Services. Where client information is processed through AI systems, the applicable project agreement, SOW, NDA, or other contractual terms may establish specific requirements regarding:

• Data retention
• Model training
• Third-party AI providers
• Data processing
• Confidentiality
• Security
• Data residency
• Ownership

AppStart will not knowingly use confidential client information to train a publicly available AI model unless expressly authorized by the client or otherwise permitted by an applicable agreement.

6. How We Share Information

We may share information with trusted third parties when reasonably necessary to operate our business or provide Services. These may include:

• Cloud hosting providers
• Infrastructure providers
• Payment processors
• Software vendors
• AI service providers
• Analytics providers
• Security providers
• Email providers
• Professional advisors
• Contractors and subcontractors
• Other service providers acting on our behalf

We may also disclose information when required to:

• Comply with law
• Respond to lawful requests
• Protect our rights
• Protect users or the public
• Investigate fraud or security incidents
• Protect our systems and property

We do not sell personal information as a business practice. If our data practices change in a way that constitutes a sale or targeted advertising under applicable privacy law, we will provide required notices and applicable opt-out mechanisms.

7. Client Confidential Information

AppStart understands that clients may provide sensitive information while working with us. Client confidential information is used primarily to perform the contracted Services and is subject to applicable contractual confidentiality obligations. Where a client requires additional security, compliance, data-processing, or confidentiality protections, those requirements may be addressed through an NDA, MSA, SOW, Data Processing Agreement, or other written agreement.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. Depending on the nature of the Services, safeguards may include:

• Access controls
• Authentication
• Encryption
• Network security
• Monitoring
• Logging
• Backup procedures
• Least-privilege access
• Security reviews
• Infrastructure controls

No security system can guarantee absolute security. Utah's privacy guidance likewise emphasizes reasonable administrative, technical, and physical safeguards for businesses subject to the UCPA.

9. Data Retention

We retain information for as long as reasonably necessary to:

• Provide Services
• Maintain business records
• Fulfill contractual obligations
• Resolve disputes
• Maintain security
• Comply with legal requirements
• Fulfill legitimate business purposes

Client project data may be retained according to the applicable contract or project agreement. When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal, contractual, and operational requirements.

10. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information. These may include the right to:

• Know whether we process personal information
• Request access to personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Obtain a copy of certain information
• Opt out of certain targeted advertising
• Opt out of certain sales of personal information where applicable
• Exercise other rights provided by applicable law

For example, Utah's UCPA provides qualifying Utah consumers with rights including access, deletion, obtaining a copy of certain personal data, and opt-out rights related to certain sales and targeted advertising. To exercise an applicable privacy right, contact us using the information below. We may need to verify your identity before completing certain requests.

11. California and Other State Privacy Rights

Residents of California and other jurisdictions may have additional rights under applicable privacy laws. Where legally required, AppStart will provide additional notices, disclosures, or mechanisms necessary to exercise those rights. Nothing in this Privacy Policy is intended to limit rights that cannot legally be limited.

12. International Visitors

AppStart may provide Services to customers located outside the United States. If you access our Services from another country, your information may be transferred to and processed in the United States or other countries where AppStart or its service providers operate. Where applicable, we will take reasonable measures required by applicable privacy laws governing international data transfers.

13. Children's Privacy

Our website and Services are not directed toward children under 13. We do not knowingly collect personal information from children under 13 through our website. If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

14. Third-Party Websites

Our website may contain links to third-party websites, services, software, or platforms. AppStart is not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service before providing personal information.

15. Business Transfers

If AppStart is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

16. Data Breaches

If we determine that a security incident has occurred involving personal information, we will take reasonable steps to investigate, contain, and remediate the incident and provide notices required by applicable law. Utah law includes specific obligations concerning certain data breaches, including notification requirements.

17. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in:

• Our Services
• Technology
• Data practices
• Legal requirements
• Business operations

We will post the updated policy on this page and update the "Last Updated" date.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise an applicable privacy right, contact: