Privacy Policy

Introduction

At Chestnut Mare Systems LLC ("we," "us," "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use SaddleWorks, including our website at saddleworksapp.com and our mobile application (collectively, the "Service").

By using SaddleWorks, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us:

• Account Information: Name, email address, phone number, business name, password
• Business Data: Client information, appointments, invoices, inventory, notes, and documents you create and manage
• Payment Information: Billing address, payment card details (processed securely by our payment processor)
• Communications: Messages you send us through support channels or contact forms

1.2 Information Collected Automatically

When you use SaddleWorks, we automatically collect:

• Usage Data: Features used, pages visited, actions taken within the app
• Device Information: Device type, operating system, browser type, app version
• Log Data: IP address, access times, error logs
• Location Data: General geographic location based on IP address (not precise GPS)

1.3 Information from Third Parties

We may receive information from our payment processor regarding transaction status and fraud prevention. We do not receive or store your full payment card numbers.

2. How We Use Your Information

2.1 To Provide and Improve the Service

• Create and manage your account
• Process payments and manage subscriptions
• Provide customer support
• Send transactional emails (appointment reminders, invoices, receipts)
• Improve Service functionality and user experience
• Troubleshoot technical issues

2.2 To Communicate with You

• Respond to your inquiries and support requests
• Send important Service updates and notifications
• Notify you of changes to our Terms or Privacy Policy
• Send promotional emails (only with your consent, and you can unsubscribe anytime)

2.3 For Security and Legal Compliance

• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and the rights of our users

2.4 SMS and Mobile Communications

SaddleWorks enables you to send SMS text message notifications to your clients for appointment reminders, invoice notifications, and other business communications. When you or your clients provide mobile phone numbers for these purposes:

• We use mobile phone numbers solely to deliver the SMS notifications you initiate through the Service
• We do not use mobile phone numbers for marketing or promotional purposes unrelated to Service functionality
• We do not sell or rent mobile phone numbers to third parties

3. How We Share Your Information

We share your information only in the following limited circumstances:

3.1 With Service Providers

We work with trusted third-party service providers who help us operate SaddleWorks:

• Database and Authentication: Cloud infrastructure services for secure data storage and user authentication
• Email Delivery: Services that deliver transactional emails such as appointment reminders and invoices
• Document Processing: Services for PDF generation and document conversion
• Payment Processing: Secure payment processing infrastructure for subscription billing and client payments
• SMS Communications: Services that deliver text message notifications to your clients

These providers are contractually obligated to protect your information and use it only for providing services to us. They cannot use your data for their own purposes.

3.2 For Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (subpoena, court order, search warrant)
• Government or regulatory requests
• Protection of our legal rights or safety of others
• Investigation of potential fraud or security issues

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

3.4 With Your Consent

We may share information with third parties when you explicitly consent to such sharing.

4. Your Data Rights

4.1 Access and Portability

You have the right to access your personal information and download your data. You can export your business data at any time through your account settings.

4.2 Correction and Updates

You can update your account information and business data at any time through the Service.

4.3 Deletion

You have the right to request deletion of your account and personal information. To request deletion, contact us at [email protected]. We will delete your information within 30 days, except where retention is required by law.

4.4 Opt-Out of Marketing

You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email or by contacting us. You cannot opt out of transactional emails necessary for the Service.

5. California Privacy Rights (CCPA)

5.1 Your CCPA Rights

California residents have the right to:

• Know: Request disclosure of personal information we collect, use, and share
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of the sale of personal information (we don't sell data)
• Non-Discrimination: Not be discriminated against for exercising your rights

5.2 Categories of Personal Information

We collect the following categories of personal information as defined by CCPA:

• Identifiers (name, email, phone number, IP address)
• Commercial information (subscription history, payment records)
• Internet activity (usage data, log files)
• Professional information (business name, services provided)

5.3 How to Exercise Your Rights

To exercise your CCPA rights, contact us at [email protected] with the subject line "California Privacy Rights Request." We will verify your identity and respond within 45 days.

5.4 Authorized Agent

You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

5.5 Do Not Sell My Personal Information

We do not sell personal information. We have not sold personal information in the past 12 months and will not sell personal information in the future.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure authentication systems
• Regular security audits and updates
• Limited employee access to personal data
• Secure payment processing (PCI DSS compliant processors)

However, no system is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your information as follows:

7.1 Active Accounts

We retain your data for as long as your account is active and as necessary to provide the Service.

7.2 Deleted or Terminated Accounts

After account deletion or termination, we retain your data for 90 days to allow for account reactivation. After 90 days, we permanently delete your data.

7.3 Legal Requirements

We may retain certain information longer when required for legal, tax, or regulatory purposes:

• Payment records: 7 years (for tax compliance)
• Legal documents: As required by law
• Dispute records: Until disputes are resolved

7.4 Aggregated Data

We may retain anonymized, aggregated data indefinitely for analytics and Service improvement. This data cannot be used to identify you personally.

8. Children's Privacy

SaddleWorks is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

9. International Data Transfers

SaddleWorks is operated in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

U.S. data protection laws may differ from those in your country. We implement appropriate safeguards to protect your information regardless of where it is processed.

10. Cookies and Tracking Technologies

We use essential cookies and similar technologies to operate the Service:

10.1 Essential Cookies

These cookies are necessary for the Service to function and cannot be disabled:

• Authentication cookies (keep you logged in)
• Security cookies (detect fraud and abuse)
• Session cookies (maintain your session state)

10.2 No Third-Party Tracking

We do not use third-party analytics, advertising cookies, or tracking pixels. We respect your privacy and do not allow third parties to track your activity on SaddleWorks.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. If you disagree with changes, you may cancel your account.

12. Third-Party Links

SaddleWorks may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing them with your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Chestnut Mare Systems LLC
Email: [email protected]
Website: https://saddleworksapp.com