1. Who We Are

TaffyLabs is a division of Live CGI, Inc. (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website at taffylabs.io (the “Site”), use any TaffyLabs applications or products (including TrueLORE and TaffyStream), or interact with our services.

For questions about this policy, contact us at privacy@taffylabs.io.

2. Information We Collect

Information You Provide

• Contact and inquiry information: Name, email address, and any details you provide when contacting us through our website or email.
• Account information: When you create an account for any TaffyLabs service, we collect your name, email, and authentication credentials.
• Client information: If you engage TaffyLabs for services, we collect business contact information and project-related details as necessary to fulfill our obligations.
• Communications: Any information you provide when corresponding with us.

Information Collected Automatically

• Analytics data: We use Google Analytics to collect usage data including pages visited, time on site, referral source, device type, browser type, and approximate geographic location (city/country level). This data is collected only with your consent where required by law.
• Cookies: We use cookies and similar technologies for analytics and functionality purposes. See Section 5 for details.
• Log data: Our servers automatically record information including your IP address, request timestamps, and referring URLs.

3. How We Use Your Information

• To provide, maintain, and improve our services and products
• To respond to your inquiries and communicate with you about our services
• To analyze site traffic and usage patterns to improve user experience
• To send relevant updates about TaffyLabs products and services
• To detect, prevent, and address technical issues and abuse
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent: For analytics cookies and marketing communications. You can withdraw consent at any time.
• Legitimate interest: For operating and improving our services, and for security purposes.
• Contract performance: For providing services you have requested or engaged us to deliver.

5. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: Required for basic site functionality (e.g., cookie consent preference). These do not require consent.
• Analytics cookies: Google Analytics cookies that help us understand how visitors use our site. These are only set after you provide consent where required by law.

Cookie Inventory

You can manage your cookie preferences by clearing your browser cookies or disabling cookies in your browser settings.

Google Analytics data is processed by Google LLC under their Data Processing Terms. For more information, see Google’s Privacy Policy.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers: Third-party services that help us operate (e.g., AWS for hosting, Google for analytics). These providers are contractually bound to protect your data.
• Legal requirements: When required by law, regulation, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Contact and inquiry data is retained for as long as needed to maintain the business relationship, or until you request deletion.

8. Your Rights

For All Users

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications

Additional Rights for EEA/UK Residents (GDPR)

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Additional Rights for California Residents (CCPA)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at privacy@taffylabs.io.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), access controls, and secure cloud infrastructure (AWS). However, no method of transmission or storage is 100% secure.

10. International Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are in the EEA/UK, we ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

11. Children’s Privacy

Our services are not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at: