Privacy Policy

1. Information We Collect

Information You Provide

• Contact Information: Name, email address, company name when you submit contact forms or newsletter signups
• Project Details: Project descriptions, budget ranges, timelines, and technical requirements when requesting services
• Account Information: If you create an account, we collect authentication credentials and profile information
• Communications: Messages, feedback, and correspondence you send to us

Information Automatically Collected

• Analytics Data: Page views, click events, session duration, and user behavior via PostHog Analytics
• Technical Information: IP address, browser type, device information, operating system, and referral URLs
• Cookies: Session cookies for functionality and analytics cookies for improving our services
• Usage Patterns: How you interact with our projects, blog posts, and services

2. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To respond to project inquiries, provide custom development services, and deliver requested content
• Communication: To send project updates, newsletters, and respond to your questions
• Improvement: To analyze usage patterns and improve our website, services, and user experience
• Business Operations: To manage our incubator projects, track project stages, and maintain our service offerings
• Legal Compliance: To comply with applicable laws and protect our rights and safety

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information in these limited circumstances:

• Service Providers: With trusted third-party services that help us operate our business (Supabase for database services, Vercel for hosting, PostHog for analytics)
• Project Collaboration: With your explicit consent, when working on custom development projects that require collaboration with third parties
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of business assets

4. Data Storage and Security

Data Storage

• Database: Personal information is stored securely in Supabase (PostgreSQL) with row-level security policies
• File Storage: Uploaded files are stored in Supabase Storage with appropriate access controls
• Location: Data is primarily stored in the United States through our cloud service providers

Security Measures

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: Strict authentication and authorization for admin access
• Regular Updates: We maintain current security patches and monitor for vulnerabilities
• Limited Access: Only authorized personnel have access to personal information

5. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for basic website functionality and user authentication
• Analytics Cookies: PostHog analytics to understand how visitors use our site
• Preference Cookies: To remember your theme preferences and other settings

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Opt-out: Unsubscribe from marketing communications at any time
• Data Portability: Request your data in a machine-readable format

To exercise these rights, contact us at privacy@greenhouselabs.com.

7. Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

• Contact Inquiries: 3 years from last contact for business development purposes
• Project Data: Duration of the project plus 7 years for legal and warranty purposes
• Analytics Data: 26 months in PostHog, then anonymized or deleted
• Newsletter Subscriptions: Until you unsubscribe or 2 years of inactivity

8. Third-Party Services

Our website integrates with the following third-party services, each with their own privacy policies:

• Supabase: Database and authentication services - Privacy Policy
• Vercel: Website hosting and deployment - Privacy Policy
• PostHog: Analytics and user behavior tracking - Privacy Policy
• Stripe: Payment processing (when applicable) - Privacy Policy

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our servers are located. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

10. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Information

If you have questions about this privacy policy or our privacy practices, please contact us: