Privacy Policy
What we collect, why, and your rights.
Controller: Thrice Theta Software, British Columbia, Canada. Contact: [privacy@thricetheta.com] .
Scope
This policy covers our websites (thricetheta.com and subdomains), our account portal, our support system, our newsletter, and our mobile apps unless an app publishes its own notice.
What we process and why
| Activity | Data | Purpose and legal basis |
|---|---|---|
| Websites | Server logs at our hosting providers (IP address, user agent, time), retained [30 days] | Security and operations; legitimate interest |
| Web analytics | Cookie-less, aggregated page metrics via Cloudflare Web Analytics, loaded only after you opt in | Understanding which pages are useful; consent |
| Account | Email address, name if you give one, sign-in metadata | Providing the account you asked for; contract |
| Support | Your messages, email address, app and device details you include | Answering your request; contract and legitimate interest |
| Newsletter | Email address, subscription status, confirmation and unsubscribe timestamps | Sending news you asked for; consent, double opt-in |
| Apps | [Per app: e.g. no data leaves the device / crash reports if you opt in] | [purpose and basis] |
We do not sell personal data and do not use it for advertising.
Processors and transfers
We use Cloudflare (websites, analytics), Amazon Web Services (hosting, email delivery, United States), and PurelyMail (mailboxes). Data may be processed outside your country. For transfers from the EU/EEA and UK we rely on the providers’ standard contractual clauses.
Retention
Account data: until you delete your account. Support conversations: [24 months] after the last message. Newsletter: until you unsubscribe. Logs: as stated above.
Your rights
You can access, correct, export, or delete your data from the account portal, or by contacting us. Depending on where you live you may also have the right to object, restrict processing, or complain to a supervisory authority. We respond within 30 days.
Canadian residents: PIPEDA and, in British Columbia, PIPA apply. Complaints may go to the Office of the Privacy Commissioner of Canada. EU/EEA residents: the GDPR applies; [EU representative details if required under Art. 27] .
Cookies
Strictly necessary cookies only, plus the cookie that remembers your consent choice. Analytics is cookie-less. See “Cookie settings” in the footer.
Children
Our services are not directed at children under 13, or the higher age your jurisdiction sets. We do not knowingly collect their data.
Changes
We will post changes here and update the date below. Material changes to how we use existing data are announced to account holders by email.
Lawyer review needed: PIPEDA/PIPA wording, GDPR Art. 13 completeness, EU representative requirement, app-specific disclosures, and app-store privacy label consistency.
Last updated January 1, 0001.