Privacy Policy

Ajian Labs ("Ajian Labs", "we", "us", or "our") operates the website at ajianlabs.com and the applications, products, and services we provide through it (collectively, the "Services"). This Privacy Policy describes what information we collect, how we use it, when and with whom we share it, how long we keep it, and the choices and rights available to you.

This policy applies to information we collect when you visit our website, submit a form, create an account, sign in with Google or another third-party provider, or otherwise interact with us. It does not apply to third-party websites or services that we do not control.

By using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Services.

2.1 Information you provide directly

• Contact and enquiry details: your full name, email address, phone number, company or organisation name, website, location, and the details of the project or message you submit through our contact and enquiry forms.
• Account details: if you register for or sign in to one of our products, we collect your name, email address, and authentication credentials, or the profile information described in Section 2.3 when you use a third-party sign-in.
• Communications: records of your correspondence with us, including emails, form submissions, and support requests.
• Billing and transaction details: where you purchase services, we collect the information needed to process payments, such as billing name, address, and payment-related identifiers. Payment card details are handled by our payment processors and are not stored by us.
• Other information you choose to provide to us.

2.2 Information collected automatically

When you use the Services, we and our service providers automatically collect certain technical information, including your IP address and the approximate location derived from it; device, browser, and operating system information; the pages you view, links you click, referring URL, and time spent; and error and diagnostic logs. We collect this information using cookies and similar technologies as described in Section 5.

2.3 Information from third-party sign-in services (including Google)

If you choose to sign in to one of our products using your Google Account, we receive basic profile information from Google: your name, email address, profile picture, a unique Google account identifier, and whether your email address is verified. We use this information only to create and authenticate your account and to communicate with you about the Services. We do not request or access your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google data as part of this sign-in. See Section 4 for our full Google disclosure.

We use the information we collect to:

• provide, operate, maintain, and improve the Services;
• create and manage your account and authenticate you, including through Google sign-in;
• respond to your enquiries, contact form submissions, and support requests, and communicate with you about your account, projects, and our services;
• send administrative messages, service updates, and security alerts, and, where permitted and where you have not opted out, marketing communications;
• personalise your experience and remember your preferences;
• monitor, diagnose, and secure the Services, including detecting, preventing, and addressing fraud, abuse, and technical issues;
• analyse usage and trends to understand how the Services are used and to improve them; and
• comply with legal obligations and enforce our terms and agreements.

Where required by law, we rely on a legal basis such as your consent, the performance of a contract, our legitimate interests (for example, securing and improving the Services), or compliance with a legal obligation. You may withdraw your consent at any time as described in Section 10.

This section describes how we handle information we receive from Google APIs and Google Sign-In.

• What we access: with your permission via Google Sign-In, we receive your basic Google profile information — your name, email address, profile image, and Google account ID. We request only the scopes necessary to authenticate you (openid, email, and profile). We do not request access to Gmail content, Google Drive files, Google Calendar, Google Contacts, or any other Google service data.
• How we use it: solely to create and authenticate your account, display your basic profile within the Services, and communicate with you. We do not use Google user data for advertising, we do not sell it, and we do not use it to determine creditworthiness or for lending purposes.
• How we share it: we do not share Google user data with third parties except with our service providers who process it on our behalf (for example, our cloud hosting and authentication providers) under contractual confidentiality and security obligations, or where required by law. We do not transfer Google user data to third parties for their own purposes.
• Human access: no person at Ajian Labs reads your Google user data except (i) with your affirmative consent, (ii) for security purposes such as investigating abuse, (iii) to comply with applicable law, or (iv) as necessary for internal operations of the Services.

You can revoke our access to your Google Account at any time as described in Section 11.

We use cookies and similar technologies to operate the Services, remember your preferences, keep you signed in, measure and analyse traffic and performance, and improve our content. Cookies are small text files stored on your device.

You can control cookies through your browser settings, including blocking or deleting them. If you disable cookies, some parts of the Services may not function properly. Where required by law, we will request your consent before setting non-essential cookies.

We do not sell your personal information. We share information only as described below:

• Service providers and processors: trusted third parties that perform services on our behalf, such as cloud hosting, database and storage providers (for example, Supabase), email delivery providers (for example, SendGrid), analytics providers, and payment processors. They may access information only as needed to perform their functions and are bound by confidentiality and data protection obligations.
• Legal and safety: we may disclose information if required to do so by law or in the good-faith belief that such action is necessary to comply with legal obligations, protect and defend our rights or property, prevent fraud or abuse, or protect the personal safety of users or the public.
• Business transfers: if we are involved in a merger, acquisition, financing, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.
• With your direction or consent: we may share information when you ask us to or give us permission to do so.

We retain personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods depend on the nature of the information and the purpose for which it was collected. For example, contact form submissions and business correspondence are retained for as long as needed to respond to and manage your enquiry and our business relationship, and Google account profile information is retained while your account remains active. When information is no longer needed, we delete it or anonymise it in accordance with our retention practices.

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration, or destruction. These measures include encryption in transit, access controls, and the use of reputable service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

We may store and process information in countries other than the one in which you live, including the United States and other locations where we or our service providers operate. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection, including using appropriate safeguards such as standard contractual clauses where required.

Depending on your location, you may have some or all of the following rights in relation to your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information.
• Portability: request a copy of your information in a portable format.
• Objection and restriction: object to or request that we restrict certain processing, including direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Non-discrimination: you will not be discriminated against for exercising your rights.

To exercise these rights, contact us at business@ajianlabs.com. We will respond within the timeframe required by applicable law and may need to verify your identity before fulfilling your request.

Marketing communications: you can opt out of marketing emails by using the unsubscribe link in the email or by contacting us. We may still send you non-marketing messages such as service and security notices.

You can revoke our access to your Google Account at any time:

1. Go to your Google Account at myaccount.google.com.
2. Under "Security", open "Third-party apps & services" (or, under "Data & privacy", open "Third-party apps & services").
3. Select Ajian Labs and choose "Remove access" or "Delete access".

You can also manage app access directly at myaccount.google.com/permissions.

To request deletion of the personal information we hold about you, email business@ajianlabs.com with the subject "Data Deletion Request" and the email address associated with your account. We will delete or anonymise your information within the timeframe required by applicable law, except where we are required to retain it for legal reasons. Deleting certain information may mean you can no longer access some parts of the Services.

The Services are not directed to children, and we do not knowingly collect personal information from children under 13 (or under the minimum age required in your jurisdiction). If you believe that a child has provided us with personal information, please contact us at business@ajianlabs.com and we will take steps to delete it.

The Services may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policies of any third-party site or service you visit.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page, update the "Last updated" date, and, where required, provide additional notice (for example, by email or a notice on our website). We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, contact us: