AuthorityTech

Privacy Policy

Last updated: October 31, 2025

This Privacy Policy explains how AuthorityTech LLC (“AuthorityTech,” “we,” “our,” or “us”) collects, uses, and protects personal information when you use our website authoritytech.io, related subdomains, and connected applications (collectively, the “Platform”).

By using the Platform, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account, submit a campaign, or interact with us, we collect:

Name, company, and contact details
Email address and password
Payment information (processed securely through Stripe — we do not store full card numbers)
Campaign data (descriptions, budgets, uploaded materials)
Support inquiries or communication logs

1.2 Automatically Collected Information

We may automatically collect:

Device details (browser type, operating system, IP address)
Usage data (pages visited, actions taken, timestamps)
Cookies or similar identifiers for analytics, performance, and security

1.3 Third-Party Integrations

We may receive limited data from:

Stripe – secure payment processing, identity verification, and fraud prevention
SendGrid – transactional email delivery
Analytics providers – usage insights and performance data

We do not sell personal information or share it for advertising.

2. How We Use Your Information

We use collected data to:

Operate, maintain, and improve the Platform
Facilitate campaign creation, execution, and reporting
Process payments and verify account activity
Communicate updates, invoices, and service notifications
Prevent fraud, abuse, and unauthorized access
Comply with legal and regulatory requirements

We process data only for legitimate business interests or as required to deliver contracted services.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under one or more of the following legal bases:

Contractual necessity: To provide and manage your account and campaigns
Legitimate interest: To maintain security, improve services, and prevent misuse
Consent: When you opt in to newsletters or marketing communications
Legal obligation: When required by applicable law

4. Data Retention

We retain your data only as long as necessary to provide services or meet legal, financial, or regulatory obligations.

Inactive accounts and related personal data may be deleted after 24 months of inactivity unless retention is required for lawful record-keeping.

Backups may retain residual data for up to 90 days for security and disaster-recovery purposes.

5. Cookies & Tracking Technologies

AuthorityTech uses cookies and similar technologies to:

Maintain session authentication
Improve platform functionality
Analyze aggregate usage trends

You may disable cookies in your browser settings, but certain features may not function correctly.

6. Data Sharing & Disclosure

We may share personal data only in these limited circumstances:

Service Providers: With trusted partners such as Stripe (payments), SendGrid (email), and analytics tools, under strict confidentiality and security agreements.
Stripe Disputes: We may share limited information (e.g., email, IP address, payment details) to verify transactions, prevent fraud, and resolve disputes.
Legal Requirements: When necessary to comply with law, regulation, or government requests.
Business Transfers: If AuthorityTech is involved in a merger, acquisition, or asset sale, your data may be transferred under continued protection obligations.

We do not sell or rent personal information.

7. Data Security

We use industry-standard administrative, technical, and physical safeguards, including:

HTTPS encryption for all communications
Encrypted password storage (scrypt)
Role-based access controls
Secure session management with HttpOnly cookies
Regular security reviews and penetration testing

Sensitive operational access is restricted to authorized personnel under least-privilege controls.

Despite these measures, no system is completely secure; use of the Platform is at your own risk.

8. Your Rights

Depending on your location, you may have the right to:

Access a copy of your personal data
Request correction or deletion
Object to or restrict processing
Withdraw consent (where applicable)
Request data portability

To exercise your rights, contact privacy@authoritytech.io.
We will respond within 30 days after verifying your identity.

9. International Data Transfers

AuthorityTech operates in the United States.
If you access the Platform from outside the U.S., your information may be transferred to and processed in the U.S., where privacy laws may differ.

When required, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards for lawful international transfers.

10. Children’s Privacy

The Platform is not intended for individuals under 18 years of age.
We do not knowingly collect personal information from minors.
If you believe a minor has submitted data, contact us for prompt removal.

11. Changes to This Policy

We may update this Privacy Policy periodically.
Material updates will be posted with a revised effective date.
Continued use of the Platform after updates constitutes acceptance.

12. Contact Us

For privacy inquiries or data-related requests:

AuthorityTech LLC
Email: privacy@authoritytech.io
Dallas, Texas, USA