Introduction
PaletteCheck (palettecheck.com/palettecheck.ai) is operated by Forthean Labs LLC ("we," "us," or "our"), a limited liability company registered in the State of Texas, United States, with its website at fortheanlabs.com. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our brand compliance checking platform.
Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect several types of information for various purposes:
Personal Information
- Name, email address, and contact information
- Company name and billing information
- Password (encrypted) and authentication data
Content You Provide
- Brand guideline PDFs you upload
- Text and images you submit for analysis
- Extracted brand information (colors, fonts, voice)
Usage Data
- IP address, browser type, and device information
- Pages visited and features used
- Time spent and interaction patterns
How We Use Your Information
We use the information we collect for the following purposes:
- To Provide the Service: Process your brand guidelines, perform compliance checks, and deliver results
- To Maintain Your Account: Create and manage your account, process payments, and send service-related communications
- To Improve the Service: Analyze usage patterns, identify technical issues, and develop new features
- To Communicate: Send you updates, security alerts, administrative messages, and respond to your inquiries
- To Personalize Experience: Customize content and features based on your preferences and usage
- To Ensure Security: Detect, prevent, and address fraud, security threats, and technical issues
- To Comply with Legal Obligations: Meet legal requirements, respond to legal requests, and enforce our Terms of Service
AI and Machine Learning
Important: How We Use AI
PaletteCheck uses artificial intelligence to analyze your brand guidelines and content. Your data is processed by our AI systems but is never used to train AI models. Your content remains yours.
Our AI processing includes:
- Extracting brand elements (colors, fonts, voice) from PDF documents
- Analyzing content for brand compliance
- Generating compliance scores and recommendations
We use third-party AI services (such as Anthropic's Claude) to process your content. These services have their own privacy policies and data handling practices.
How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: Third-party services that help us operate (hosting, payment processing, analytics)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your information
All service providers are contractually obligated to protect your information and use it only for specified purposes.
Data Security
We implement robust security measures to protect your data:
256-bit Encryption
All data encrypted in transit and at rest
SOC 2 Compliant
Industry-standard security practices
Secure Infrastructure
Hosted on enterprise-grade servers
Access Controls
Strict employee access policies
Data Retention
We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account Information: Retained while your account is active and for a reasonable period after account closure
- Brand Guidelines: Retained until you delete them or close your account
- Usage Data: Retained for analytical purposes, typically up to 2 years
- Legal Obligations: Some information may be retained longer to comply with legal requirements
When you delete your account, we will delete or anonymize your personal information, subject to legal retention requirements.
Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information and data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a structured, machine-readable format
- Opt-Out: Unsubscribe from marketing communications
- Objection: Object to certain types of processing
To exercise any of these rights, please contact us at privacy@palettecheck.ai or through our contact form.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.
When we transfer information internationally, we implement appropriate safeguards, including standard contractual clauses approved by relevant authorities, to ensure your information receives adequate protection.
Children's Privacy
The Service is not intended for children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.
California Privacy Rights (CCPA)
If you are a California resident, you have specific rights regarding your personal information:
Right to Know
Request what personal information we've collected about you.
Right to Delete
Request deletion of your personal information.
Right to Opt-Out
Opt out of the sale of your personal information.
Non-Discrimination
We won't discriminate against you for exercising your rights.
Note: PaletteCheck does not sell personal information to third parties.
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right of access to your personal information
- Right to rectification of inaccurate information
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent (where processing is based on consent)
To exercise these rights, please contact us. You also have the right to lodge a complaint with your local data protection authority.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending you an email notification (for significant changes)
- Displaying a notice on the Service
Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.