Privacy Policy — Shiny Labs

This policy explains what personal information Shiny Labs LLC (“Shiny Labs”, “we”, “us”) collects when you visit this website or use one of our products — shnyVault, Claros Money and the Capital Compass Estimator — why we collect it, and what choices you have. We are the data controller for that information.

1. Information we collect

Information you give us

Account information — your name, email address and, for paid plans, billing details. We use a third-party payment processor and do not store full card numbers on our systems.
Content — the data you put into a product: your card collection and shop inventory, transactions, planning inputs and any files you upload. This content is yours; we process it only to provide the service to you.
Correspondence — the messages you send to our support, privacy or security addresses.

Information collected automatically

Service logs — IP address, device and browser type, pages or screens requested, and timestamps. We use these to keep the service running, to debug problems and to detect abuse.
Diagnostics — crash reports and error traces from our apps, so we can fix defects.

We do not sell personal information, and we do not use it for third-party advertising or cross-service tracking.

2. Cookies and similar technologies

Our website uses only the cookies strictly necessary to operate it — for example, to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies or third-party analytics trackers on this website.

3. How we use information

To provide, maintain and improve our products.
To authenticate you and keep accounts secure.
To process payments and send receipts and service notices.
To respond to support, privacy and security requests.
To detect, investigate and prevent fraud, abuse and security incidents.
To comply with legal obligations.

Where the GDPR applies, our legal bases are performance of a contract (providing the service you signed up for), our legitimate interests (security, abuse prevention, product improvement), consent where we ask for it, and compliance with legal obligations.

4. How we share information

We share personal information only with service providers who process it on our behalf and under contract — for example, cloud hosting, payment processing, email delivery and error monitoring. They may use it only to provide services to us.

We may also disclose information where required by law or valid legal process, to enforce our terms, or to protect the rights, safety and property of Shiny Labs, our customers or the public. If Shiny Labs is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction; we will give notice before your information becomes subject to a different policy.

5. International transfers

We operate from the United States, and our service providers may process information in other countries. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Retention

We keep account information and your content for as long as your account is active. If you delete your account, we delete or anonymise your content within 30 days, except where we must retain records for legal, tax or accounting purposes. Service logs are retained for up to 12 months.

7. Security

We encrypt data in transit using TLS and at rest, restrict internal access to what each role requires, log administrative access, and review our practices regularly. No system is perfectly secure, but we take reasonable and appropriate measures to protect your information, and we will notify affected users and regulators of a breach where the law requires it.

8. Children

Our products are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Your rights

Depending on where you live, you may have the right to access a copy of your personal information, correct it, delete it, restrict or object to certain processing, withdraw consent, and receive your data in a portable format. Residents of California may request disclosure of the categories of information we collect and may not be discriminated against for exercising their rights.

To exercise any of these rights, email privacy@shinylabs.io. We will respond within the period required by applicable law. If you are in the EEA or the UK and are not satisfied with our response, you may complain to your local supervisory authority.

10. Changes to this policy

We may update this policy from time to time. We will change the “last updated” date above, and for material changes we will give notice by email or in the product before the change takes effect.

11. Contact us

Shiny Labs LLC
Frederick, MD, United States
privacy@shinylabs.io