Privacy Policy
Effective Date: February 26, 2026
Downgrain Labs LLC (“Downgrain,” “we,” “our,” or “us”) operates the website and platform located at downgrain.com (the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. By accessing or using our Service, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information Provided to Us
We collect the following personal information in connection with providing our Service:
- Name
- Email address
- Phone number
- Company name
- Job title or role
User accounts are provisioned by Downgrain on behalf of our customers. Users do not create accounts directly.
1.2 Information Collected Automatically
When you access our Service, we may automatically collect certain information, including:
- Browser type and version
- Device type and operating system
- IP address
- Pages visited and interactions within the Service
- Date and time of access
- Referring URL
1.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to analyze usage patterns and improve the Service. These may include:
- Essential cookies: Required for the Service to function, such as authentication and session management.
- Analytics cookies: Used to understand how users interact with the Service, helping us improve functionality and user experience.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and operate the Service
- To authenticate users and manage account access
- To communicate with you regarding the Service, including support and updates
- To analyze usage and improve the functionality and performance of the Service
- To comply with legal obligations
We do not sell, rent, or trade your personal information to third parties. We do not use your personal information for advertising purposes.
3. How We Share Your Information
We may share your information only in the following limited circumstances:
- Service providers: We use third-party service providers to operate our platform, including our application hosting provider (Retool), database infrastructure provider (Supabase), and payment processor (Stripe). These providers access your information only as necessary to perform services on our behalf and are contractually obligated to protect it.
- Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
4. Payment Information
Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We do not collect, store, or process credit card numbers, bank account details, or other payment credentials on our systems. For information on how Stripe handles your payment data, please refer to Stripe’s Privacy Policy at https://stripe.com/privacy.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of all data in transit using TLS 1.2 or higher
- Encryption of all data at rest using AES-256
- Role-based access controls limiting data access to authorized personnel
- Multi-factor authentication on all production systems
- Comprehensive audit logging of all data access and administrative actions
While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, or as required by law. Upon termination of the service relationship or upon a verified deletion request, we will permanently delete your personal information from our production systems and provide written confirmation upon request.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct any inaccurate or incomplete information.
- Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
- Portability: You may request a copy of your data in a structured, commonly used format.
To exercise any of these rights, please contact us at the information provided below. We will respond to your request within 30 days.
8. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To make a request under the CCPA, please contact us at the information provided below.
9. Children’s Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
10. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will notify you by updating the effective date at the top of this policy and, where appropriate, providing additional notice through the Service or via email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us at:
Downgrain Labs LLC
Website: https://downgrain.com
Email: Contact Form