Privacy Policy

This Privacy Policy explains how Theros Tech LLC ("Theros Tech," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you interact with our websites, software, applications, mobile applications, APIs, customer portals, digital products, hosted services, business communications, and other services that reference or link to this Privacy Policy (collectively, the "Services").

This Privacy Policy applies to personal information that Theros Tech determines how and why to process. In some circumstances, particularly when we provide technology or professional services to a business customer, we may process information on behalf of that customer. In those circumstances, the customer's privacy notices and our contractual obligations to that customer may govern the processing.

Certain Services, products, applications, features, or jurisdictions may be subject to additional privacy notices. If an additional notice conflicts with this Privacy Policy with respect to a specific Service or processing activity, the more specific notice will apply to that activity.

We may collect personal and business information that you voluntarily provide when you communicate with us, request information, submit a contact form, create an account, use a Service, purchase a product or service, participate in a discovery meeting, request support, provide feedback, or otherwise interact with Theros Tech.

Certain Services may allow or require you to create an account. When you do so, we may collect information such as your name, email address, organization, role, username, profile preferences, account settings, and authentication-related information.

We may also maintain information concerning account creation, account status, authorized users, permissions, login activity, security events, and administrative actions for purposes such as providing the Service, maintaining security, preventing unauthorized access, and supporting users.

Passwords, authentication tokens, and similar credentials may be processed using security controls appropriate to the applicable Service. We do not intentionally store plaintext passwords where password-based authentication is implemented by us.

Certain Services may allow you to authenticate through a third-party identity provider, such as Microsoft, Google, Apple, or another single sign-on or identity service.

When you use a third-party identity provider, we may receive information authorized by you and the provider, such as your name, email address, account identifier, organization, profile information, or authentication status.

We do not receive your third-party account password merely because you use an external identity provider to sign in.

The identity provider's processing of your information is governed by its own privacy policy and terms.

When you access or use the Services, we may automatically collect limited technical, device, security, and usage information. The specific information collected depends on the Service, device, configuration, and technologies being used.

If you use a Theros Tech mobile application, we may collect information associated with the application and your device as reasonably necessary to provide, secure, maintain, troubleshoot, and improve the application.

Depending on the application and enabled functionality, this may include device type, operating-system version, application version, device or installation identifiers, language, time zone, network information, crash information, diagnostic data, feature usage, and security events.

The specific categories of information collected by a mobile application may also be described in an application-specific privacy notice and in disclosures presented through the applicable application marketplace.

Certain applications may request permission to access device capabilities when those capabilities are necessary or useful for a feature you choose to use.

Depending on the application, these capabilities may include location services, cameras, photographs, media libraries, files, microphones, notifications, Bluetooth, local networks, calendars, contacts, biometric authentication, or other device functionality.

A Theros Tech application does not necessarily request or use every permission listed above. Permissions are requested based on the functionality of the particular application.

Where supported by your operating system, you can grant, deny, or later revoke application permissions through your device settings. Disabling a permission may prevent the related feature from operating correctly.

Some Services may use location information when location is necessary for an enabled feature.

Depending on the Service and your permissions, location information may consist of approximate location derived from an IP address or more precise device location obtained through operating-system location services.

We will not intentionally collect precise device location through a mobile application unless the applicable application requests the necessary permission or another lawful basis applies.

Where device controls permit, you may disable location access through your operating-system settings, although location-dependent features may no longer function.

A Service may request access to device content or capabilities such as your camera, photographs, microphone, files, contacts, or calendar only when the applicable functionality requires or supports such access.

For example, camera or photo access may be used to upload an image, file access may be used to attach a document, and calendar access may be used to support scheduling functionality.

The availability of these capabilities does not mean that every Theros Tech Service collects this information.

Where required, the applicable application will request device permission before accessing protected device resources.

If you enable push notifications for a Theros Tech application, we or our service providers may process a device or push-notification token to deliver notifications to your device.

Notifications may include operational updates, account information, reminders, security information, product information, or other communications related to the applicable Service.

You can generally disable push notifications through your device settings. Disabling optional notifications does not necessarily prevent us from sending important communications by another permitted method.

Our websites and web-based Services may use cookies, local storage, session storage, pixels, software development kits, or similar technologies to provide functionality, maintain sessions, remember preferences, protect accounts, understand usage, diagnose problems, and improve performance.

Some technologies may be strictly necessary for a Service to operate. Other technologies may be optional and subject to consent or preference controls where required by applicable law.

Browser and device settings may allow you to block or delete certain technologies. Doing so may affect the functionality of the Services.

We may use analytics, logging, monitoring, crash-reporting, security, and performance technologies to understand how Services operate and are used.

Information processed for these purposes may include device information, application versions, feature interactions, error reports, crash reports, performance measurements, network information, timestamps, and pseudonymous or other technical identifiers.

The analytics and diagnostic providers used by a particular Service may vary. Where required, additional disclosures will identify relevant third-party technologies or provide applicable choices.

We may receive information about you from third parties when necessary to provide Services, conduct business, authenticate users, process transactions, support integrations, prevent fraud, or respond to requests.

Certain Services may allow you or an administrator to connect third-party systems, applications, accounts, APIs, or data sources.

When an integration is enabled, we may receive, transmit, store, or otherwise process information from the connected service as necessary to provide the requested functionality.

The information available to us depends on the integration, permissions granted, configuration selected, and third-party platform.

You or your administrator may be able to disconnect an integration or modify its permissions. The third party's handling of information remains subject to its own privacy practices.

If we offer paid Services, subscriptions, application purchases, or other transactions, payment information may be processed by Theros Tech or by a third-party payment processor, application marketplace, or billing provider.

Where a third-party payment processor handles payment-card information directly, Theros Tech may receive transaction details such as payment status, amount, subscription information, transaction identifier, billing contact information, and limited payment-method information rather than complete payment-card credentials.

Payments made through an application marketplace may also be governed by the marketplace provider's privacy and payment practices.

Certain Services may allow customers or users to upload, transmit, store, integrate, generate, or otherwise process information through a Service ("Customer Data").

Customer Data may include personal information depending on how the customer chooses to use the Service.

When Theros Tech processes Customer Data on behalf of a business customer, the customer generally determines the purposes and means of that processing, and Theros Tech acts as a service provider, processor, contractor, or similar role as defined by applicable law.

If your personal information was submitted to a Theros Tech Service by one of our customers, privacy requests concerning that Customer Data may need to be directed to the customer that controls the information.

During professional-services engagements, clients may provide Theros Tech with access to systems, documentation, source materials, workflows, credentials, business records, databases, environments, technical information, or other project-related materials.

We process such information as reasonably necessary to perform the agreed services and in accordance with applicable contracts, Statements of Work, confidentiality obligations, data-processing terms, and other written agreements.

Ownership, confidentiality, retention, return, deletion, and permitted use of client project information may be further governed by the applicable client agreement.

Depending on your relationship with Theros Tech and the applicable Service, we may use personal information for the following purposes:

Where applicable law requires us to identify a legal basis for processing personal information, our legal bases may include performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, our legitimate interests or those of another party, protection of vital interests, and consent.

The appropriate legal basis depends on the Service, information, processing activity, and jurisdiction.

Where processing relies on consent, you may generally withdraw that consent as permitted by applicable law. Withdrawal does not affect processing lawfully performed before withdrawal.

We may use third-party service providers, contractors, and subprocessors to support our business and Services.

These parties may process information on our behalf for purposes such as cloud hosting, infrastructure, email delivery, authentication, analytics, monitoring, customer relationship management, communications, scheduling, payments, security, technical support, application distribution, and other operational functions.

We seek to provide these parties only the information reasonably necessary for their function and to use providers appropriate to the nature of the processing.

We may disclose personal information when reasonably necessary for the purposes described in this Privacy Policy.

Theros Tech does not sell personal information for money as the term "sell" is ordinarily understood.

Certain privacy laws define terms such as "sale," "sharing," or "targeted advertising" more broadly and may treat some transfers involving advertising, analytics, or cross-context behavioral advertising technologies as regulated activities even when no money is exchanged.

If Theros Tech engages in activities that constitute a sale, sharing, or targeted advertising under applicable law, we will provide disclosures and opt-out mechanisms required by that law.

Product-specific privacy notices may provide additional information concerning advertising or analytics technologies used by a particular Service.

Certain Services may include artificial-intelligence, machine-learning, automation, classification, recommendation, summarization, generation, or similar technologies.

When these features process personal information, we will process the information in accordance with this Privacy Policy, applicable product-specific notices, contractual obligations, and applicable law.

The categories of information processed and the purpose of processing will depend on the applicable feature.

Where applicable law provides rights relating to certain automated decisions or profiling, we will honor those rights as required.

Unless a particular Service and applicable written agreement expressly support it, you should not provide Theros Tech with highly sensitive or specially regulated information that is unnecessary for the Service.

This may include protected health information, complete payment-card data, government-classified information, regulated biometric information, highly sensitive authentication information, export-controlled technical data, or other information subject to specialized legal or contractual requirements.

Where an engagement requires processing specially regulated information, additional contractual, security, compliance, or privacy terms may apply.

Theros Tech uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or destruction.

Safeguards may vary based on the nature and sensitivity of the information, applicable Service, architecture, customer requirements, and reasonably foreseeable risks.

No electronic system, network, application, storage platform, or transmission method can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

Users are also responsible for protecting their credentials, devices, authentication methods, and access to accounts.

If we become aware of a security incident affecting personal information for which Theros Tech has notification obligations, we will investigate and respond in accordance with applicable law and contractual requirements.

Where Theros Tech processes affected information on behalf of a customer, notification and cooperation obligations may be governed by the applicable customer agreement or data-processing terms.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing Services, maintaining accounts, supporting customers, fulfilling contractual obligations, maintaining business and transaction records, protecting systems, resolving disputes, enforcing agreements, and complying with legal obligations.

Retention periods may vary based on the category and sensitivity of information, applicable Service, account status, contractual requirements, legal requirements, security considerations, and whether the information is contained in backups or archival systems.

When information is no longer reasonably required, we may delete, anonymize, aggregate, or otherwise dispose of it in accordance with applicable requirements.

Where a Service provides user accounts, users may have the ability to close an account through the Service or by contacting us, subject to the functionality and contractual terms of the applicable Service.

A request to close an account does not necessarily require immediate deletion of every associated record. We may retain information where reasonably necessary for legal compliance, security, fraud prevention, dispute resolution, transaction records, enforcement of agreements, backups, or other lawful purposes.

If your account is controlled by an employer, customer, organization, or administrator, account deletion may be subject to that organization's instructions.

Product-specific instructions may provide additional methods for requesting account or data deletion.

Depending on where you reside and applicable law, you may have rights concerning personal information we maintain about you.

Privacy requests may be submitted to info@therostech.com unless a particular Service provides another request mechanism.

Please provide enough information for us to understand and respond to your request. We may need to verify your identity before fulfilling certain requests.

Where permitted by law, an authorized agent may submit a request on your behalf. We may request evidence that the agent is authorized to act for you.

Certain information may be exempt from a privacy request where retention or processing is permitted or required by applicable law.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

Residents of certain U.S. states may have additional rights under comprehensive state privacy laws. The availability and scope of those rights depend on the jurisdiction, applicability thresholds, our relationship with you, and statutory exemptions.

Where a state privacy law applies to Theros Tech's processing, we will provide and honor applicable rights as required by that law, which may include rights of access, correction, deletion, portability, opt-out, and appeal.

Information processed solely in a business-to-business, employment, or other exempt context may be treated differently where permitted by law.

If California privacy law applies to our processing of your personal information, California residents may have rights concerning access, correction, deletion, and information about categories of personal information collected, disclosed, sold, or shared, as well as rights to opt out of certain sale or sharing activities.

Theros Tech does not sell personal information for monetary consideration. If our practices in the future constitute sale or sharing as defined by applicable California law, we will provide the notices and choices required by law.

We do not unlawfully discriminate against individuals for exercising applicable California privacy rights.

Some browsers and devices support privacy preference signals such as Global Privacy Control.

Where applicable law requires recognition of a qualifying universal opt-out mechanism, we will process supported signals as required for the applicable browser, device, or Service.

Because technical standards and legal requirements continue to evolve, not every browser signal necessarily has the same legal effect in every jurisdiction.

Theros Tech is based in the United States. If you access a Service from outside the United States, your information may be transferred to, stored in, or processed in the United States and other countries where Theros Tech or its service providers operate.

Data-protection laws in those jurisdictions may differ from those in your country.

Where applicable law requires a specific mechanism for international transfers of personal information, we will use an appropriate mechanism as required.

Theros Tech's corporate website and business-facing Services are not directed to children, and we do not knowingly collect personal information from children through those Services in violation of applicable law.

A particular Theros Tech product may have different age eligibility requirements based on its purpose, audience, jurisdiction, and applicable law. Any such requirements will be disclosed through the applicable Service or product-specific privacy notice.

If we learn that personal information from a child was collected in circumstances requiring parental consent or other authorization and the required authorization was not obtained, we will take reasonable steps to address the information as required by applicable law.

Parents or legal guardians who believe a child has provided personal information to Theros Tech inappropriately may contact us at info@therostech.com.

The Services may contain links to or integrations with websites, applications, platforms, products, or services operated by third parties.

Theros Tech does not control the independent privacy practices of third parties. Information you provide directly to a third party is governed by that party's privacy notices and terms.

We encourage you to review the privacy practices of third-party services before providing them with personal information.

If you obtain a Theros Tech application through an application marketplace such as the Apple App Store, Google Play, Microsoft Store, or another distribution platform, the marketplace provider may independently collect and process information concerning downloads, purchases, subscriptions, devices, accounts, usage, diagnostics, or transactions.

The marketplace provider's collection and processing are governed by its own privacy policy.

Theros Tech may receive limited information from a marketplace as necessary to distribute applications, administer purchases or subscriptions, diagnose issues, or support users.

Application marketplaces and operating-system providers may require Theros Tech to provide standardized disclosures concerning categories of data collected by an application, purposes of collection, data sharing, tracking, security practices, account deletion, or similar matters.

These platform disclosures are intended to supplement this Privacy Policy and provide information specific to the applicable application.

Because different Theros Tech applications may collect different categories of information, platform disclosures may vary by application.

If you provide contact information, we may use it to respond to inquiries, provide support, communicate about projects or Services, send transactional or security information, and provide other communications permitted by law.

Where we send optional promotional communications, you may use the unsubscribe mechanism provided in the communication or contact us to request that they stop.

Opting out of promotional communications does not prevent us from sending non-promotional communications that are reasonably necessary for an account, transaction, security matter, contractual relationship, or legal obligation.

If SMS or similar messaging functionality is offered, additional consent and messaging terms may be presented before enrollment where required.

If Theros Tech is involved in a merger, acquisition, financing, corporate restructuring, bankruptcy, sale of assets, change of control, or similar transaction, personal information may be disclosed or transferred as part of evaluating or completing that transaction.

Any recipient will be subject to applicable legal obligations concerning the information.

We may preserve, use, or disclose information when we reasonably believe doing so is necessary to comply with applicable law, regulation, subpoena, court order, legal process, governmental request, or other legal obligation.

We may also process or disclose information when reasonably necessary to investigate fraud or abuse, protect the security and integrity of our Services, enforce agreements, establish or defend legal claims, or protect the rights, property, safety, or security of Theros Tech, our customers, users, or others.

We may update this Privacy Policy as our business, Services, technologies, data practices, or legal obligations evolve.

When we update the Policy, we will revise the effective date shown on this page.

Where required by applicable law, we may provide additional notice of material changes through the applicable Service, application, website, email, or another appropriate method.

We encourage you to review this Privacy Policy periodically.