1. Introduction
[Sustaine] ("we," "us," or "our") operates the website sustaine.app and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Sustaine, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use the Service.
Effective date: May 30, 2026
2. Information We Collect
2.1 Information You Provide
When you create an account or use our Service, we may collect:
- Account information: name, email address, password, and company details you provide.
- Brand brief information: company name, industry, target audience, stage, and any other information you include in your brand brief.
- Payment information: billing address and payment method details. Payment processing is handled by Stripe — we do not store your full payment card information.
- Communications: messages you send us through contact forms or support requests.
2.2 Information Collected Automatically
When you use our Service, we may automatically collect:
- Usage data: features accessed, time spent, clicks, and navigation patterns.
- Device data: browser type, operating system, and device identifiers.
- Log data: IP address, access times, and referring URLs.
2.3 Information from Third Parties
We may receive information from third-party services you link to your account, such as OAuth providers for authentication. We use this only in accordance with the permissions you've granted.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Generate brand systems based on your briefs
- Process payments and manage subscriptions
- Respond to your questions and support requests
- Send service-related notifications (e.g., billing, account changes)
- Analyze usage patterns to improve user experience
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share information in the following circumstances:
- Service providers: with vendors who help us operate (hosting, payment processing, analytics). These providers are contractually bound to use your information only to provide services to us.
- Legal compliance: when required by law, court order, or governmental authority.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With your consent: when you have explicitly agreed to sharing.
5. Data Security
We use industry-standard encryption (TLS/SSL) for data in transit, and encryption at rest for sensitive data. Access to personal information is restricted to authorized personnel only. While we strive to protect your information, no method of transmission or storage is 100% secure — we cannot guarantee absolute security.
If you become aware of a security vulnerability, please contact us immediately at security@sustaine.app.
6. Cookies and Tracking
We use cookies and similar tracking technologies to operate our Service. Types of cookies we use:
- Essential cookies: required for authentication and service functionality. These cannot be disabled.
- Analytics cookies: help us understand how visitors use our site. You can opt out of analytics cookies through your browser settings.
- Marketing cookies: used to deliver relevant advertising. These are not currently used on sustaine.app.
You can manage cookie preferences in your browser settings. Disabling cookies may affect some functionality of the Service.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you.
- Correction: request that we correct inaccurate or incomplete information.
- Deletion: request that we delete your personal information (subject to legal retention requirements).
- Portability: request your data in a commonly used, machine-readable format.
- Objection: object to certain processing activities, such as direct marketing.
- Restrict processing: request that we limit how we use your information.
To exercise any of these rights, contact us at privacy@sustaine.app. We will respond within 30 days.
GDPR (European Users)
If you are located in the European Economic Area, the General Data Protection Regulation (GDPR) provides additional rights. Our legal basis for processing your data is primarily performance of contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)). You have the right to lodge a complaint with your local data protection authority.
CCPA (California Residents)
Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.
8. Children's Privacy
Sustaine is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us at privacy@sustaine.app and we will promptly delete the information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective date." For material changes, we will provide prominent notice (e.g., email notification or a notice on the Service) before the change takes effect. We encourage you to review this policy periodically.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, contact us:
Sustaine
Email: hello@sustaine.app
Website: sustaine.app/contact