1. Introduction
At GTU Hero, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you use our Next.js SaaS boilerplate platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, username, and password
- Profile Information: Job title, company name, and other professional details
- Content Data: Documents, files, messages, and other content you upload or create
- Communication Data: Messages you send to us and feedback you provide
2.2 Information We Collect Automatically
- Usage Data: How you interact with our platform, features used, and time spent
- Device Information: Device type, operating system, browser type, and IP address
- Log Data: Server logs, error reports, and performance data
- Cookies and Similar Technologies: Data collected through cookies and tracking pixels
2.3 Information from Third Parties
- Authentication Providers: Information from OAuth providers (Google, Microsoft, etc.)
- Integration Services: Data from connected third-party services and APIs
- Payment Processors: Billing and payment information from payment providers
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our SaaS boilerplate platform and services
- Process and analyze your content to deliver platform functionality
- Authenticate your identity and provide secure access to your account
- Process payments and manage your subscription
- Send service updates, security alerts, and administrative messages
- Provide customer support and respond to your inquiries
- Analyze usage patterns to improve our platform and develop new features
- Comply with legal obligations and protect against fraud and abuse
4. AI Processing and Data Use
Content Processing: Your uploaded content may be processed by AI systems (including large language models) to provide knowledge management, search, and assistance features. This processing occurs within secure, controlled environments.
Training Data: We do not use your personal content to train AI models. Our AI processing is limited to providing services to you and your organization.
Data Retention: AI processing results are retained only as long as necessary to provide services and are automatically deleted according to our retention policies.
5. Information Sharing and Disclosure
We may share your information in the following circumstances:
5.1 With Your Consent
We share information when you explicitly consent to such sharing.
5.2 Service Providers
We work with trusted third-party service providers who assist us in providing our services, including:
- Cloud infrastructure providers (AWS, Google Cloud, Azure)
- AI and machine learning service providers
- Payment processors and billing services
- Customer support and communication platforms
- Analytics and monitoring services
5.3 Legal Requirements
We may disclose information when required by law, court order, or legal process, or to protect our rights, property, or safety.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
6. Data Security
We implement comprehensive security measures to protect your information:
- Encryption: Data is encrypted in transit and at rest using industry-standard protocols
- Access Controls: Strict access controls and authentication mechanisms
- Regular Audits: Regular security audits and vulnerability assessments
- Employee Training: Regular security training for all employees
- Incident Response: Comprehensive incident response and breach notification procedures
7. Your Rights and Choices
You have the following rights regarding your personal information:
7.1 Access and Portability
You can access, download, and export your personal data at any time through your account settings.
7.2 Correction and Updates
You can update and correct your personal information through your account settings.
7.3 Deletion
You can request deletion of your account and personal data. Some data may be retained for legal or operational purposes.
7.4 Communication Preferences
You can opt out of non-essential communications through your account settings or unsubscribe links.
7.5 Cookie Controls
You can manage cookie preferences through your browser settings or our cookie preference center.
8. Data Retention
We retain your information for as long as necessary to provide services and fulfill legal obligations:
- Account Data: Retained while your account is active and for 90 days after closure
- Content Data: Retained according to your subscription plan and deletion requests
- Usage Data: Retained for up to 2 years for analytics and service improvement
- Legal Data: Retained as required by applicable laws and regulations
9. International Data Transfers
Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.
10. Children's Privacy
Our services are not designed for or directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.
12. Compliance and Regulations
We comply with applicable privacy laws and regulations, including:
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Children's Online Privacy Protection Act (COPPA)
- Other applicable local and international privacy laws
13. Contact Information
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: [email protected]