Privacy Policy

Effective Date: 25 July 2026

Introduction

Rift Creative Works LLC (“we,” “our,” or “us”) is committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our software, website, and related services (the “Services”).

This policy is designed to comply with applicable privacy laws, including but not limited to:

• The General Data Protection Regulation (GDPR)
• The California Consumer Privacy Act (CCPA/CPRA)
• Other applicable global data protection laws

Scope

This Privacy Policy applies to all users of our Services worldwide. Where local laws grant additional rights, those rights apply to you.

Information We Collect

We follow a strict data minimization approach.

Personal Data You Provide

We collect:

Email Address

• When you create an account
• When you purchase or activate a license
• When you contact support

We do not require names, physical addresses, or phone numbers.

Automatically Collected Data

We use only essential cookies:

Authentication Cookies

• Maintain secure login sessions

We do not use tracking, advertising, or analytics cookies.

Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contractual Necessity: To provide account access and licensing
• Legitimate Interests: To maintain security and prevent fraud
• Legal Obligation: To comply with applicable laws

How We Use Your Information

We use your email address to:

• Create and manage your account
• Deliver licensed software functionality
• Send essential service communications (e.g., security alerts, account updates)
• Respond to support requests

We do not:

• Sell or rent your personal data
• Use your data for behavioral advertising
• Send marketing emails without explicit opt-in

Payment Processing

We do not collect or store payment details.

Payments are processed by third-party payment processors. These providers may collect and process your personal data under their own privacy policies and legal obligations.

We only receive limited transaction information (e.g., payment status, transaction ID).

Sharing of Information

We disclose personal data only when necessary:

• Service Providers (Processors): Vendors providing hosting, authentication, or infrastructure services under contractual obligations
• Legal Compliance: When required by law, subpoena, or legal process
• Business Protection: To enforce our terms, prevent fraud, or protect rights and security

We do not sell or share personal data for advertising purposes.

Data Retention

We retain your email address only as long as necessary to:

• Provide Services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

You may request deletion of your account at any time.

Your Privacy Rights

GDPR (EEA, UK, Similar Jurisdictions)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (“Right to be Forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent (where applicable)

You also have the right to lodge a complaint with a supervisory authority.

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal data we collect and how we use it
• Request deletion of your personal data
• Request correction of inaccurate data
• Opt out of sale or sharing (note: we do not sell or share data)
• Non-discrimination for exercising your rights

To exercise your rights, contact us at: contact@spearling.io

Other Jurisdictions

Users in other regions (e.g., Canada, Australia, Brazil) may have similar rights under local laws. We honor applicable rights in accordance with those laws.

Data Security

We implement appropriate technical and organizational measures, including:

• Encryption in transit (HTTPS)
• Secure authentication systems
• Access controls and least-privilege practices

No system is completely secure, but we take reasonable steps to protect your data.

Children’s Privacy

Our Services are not intended for children under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

Do Not Track Signals

Our Services do not respond to “Do Not Track” signals because we do not engage in tracking or behavioral advertising.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we do:

• We will update the “Effective Date”
• Material changes may be communicated via email or within the Services

You are advised to review this Privacy Policy periodically for any changes.

Continued use of the Services constitutes acceptance of the updated policy.

Data Controller Information (GDPR)

Rift Creative Works LLC is the data controller responsible for your personal data. You can reach us at the contact information stated below.

California “Shine the Light” Notice

We do not share personal data with third parties for their direct marketing purposes.

Sensitive Personal Data

We do not collect or process sensitive personal data.

Contact Information

If you have questions or wish to exercise your rights:

Email: contact@spearling.io