Privacy Policy

1. Introduction

Exocortex ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (exocortex.solutions) or use our childcare management software and services. This policy complies with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), and other relevant regulations.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, account preferences
• Professional Information: Job title, organization name, professional credentials
• Child Information: Names, ages, medical information, educational records, photos (with consent)
• Payment Information: Billing address, payment method details (processed securely by third-party providers)
• Communication Data: Messages, support requests, feedback

2.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, features used, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies
• Log Data: Server logs, error reports, performance metrics

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Provide childcare management software and related services
• Account Management: Create and maintain user accounts, process payments
• Communication: Send service updates, support responses, marketing communications (with consent)
• Improvement: Analyze usage patterns to improve our services and user experience
• Security: Protect against fraud, unauthorized access, and security threats
• Legal Compliance: Meet regulatory requirements and legal obligations
• Research: Conduct anonymized research to improve childcare practices

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 With Your Consent

We share information when you explicitly consent to such sharing.

4.2 Service Providers

We work with trusted third-party service providers who assist us in operating our services, including cloud hosting, payment processing, email delivery, and analytics.

4.3 Legal Requirements

We may disclose information when required by law, legal process, or to protect the rights, property, or safety of Exocortex, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit and at rest using AES-256 encryption
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Security assessments and vulnerability testing
• Staff Training: Regular security training for all employees
• Incident Response: Comprehensive data breach response procedures

6. Your Privacy Rights

Under applicable U.S. privacy laws, you may have the following rights:

6.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know: Request information about the personal information we collect, use, and disclose
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate personal information
• Opt-Out: Opt out of the sale or sharing of personal information
• Limit: Limit the use of sensitive personal information
• Non-Discrimination: Not be discriminated against for exercising your rights

6.2 Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, and Utah may have similar rights under their respective state privacy laws.

6.3 How to Exercise Your Rights

To exercise your privacy rights, please contact us using the information provided in Section 14. We will verify your identity before processing your request and respond within the timeframes required by applicable law (typically within 45 days for most requests).

7. Children's Privacy

Our services are designed for childcare organizations and involve the processing of children's information. We comply with applicable children's privacy laws, including COPPA. We only collect and process children's information with appropriate parental consent and for legitimate educational and care purposes.

8. State-Specific Disclosures

8.1 California Privacy Disclosures

Under the California Consumer Privacy Act (CCPA), we are required to disclose:

• Categories of Personal Information: We collect contact information, account data, usage data, and payment information
• Sources: Information is collected directly from you, automatically through our services, and from third-party service providers
• Business Purposes: We use information to provide services, communicate with you, improve our platform, and ensure security
• Third-Party Sharing: We may share information with service providers, payment processors, and as required by law
• Sale of Personal Information: We do not sell personal information to third parties

8.2 Do Not Track

We do not currently respond to "Do Not Track" signals from web browsers. We may use third-party analytics services that collect information about your online activities over time and across different websites.

9. Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of information and applicable legal requirements.

10. Cookies and Online Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website usage and performance
• Provide personalized content and advertisements
• Ensure security and prevent fraud

You can control cookies through your browser settings. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

10.1 Advertising and Analytics

We may use third-party advertising and analytics services that use cookies and similar technologies to collect information about your use of our website and other websites over time. This information may be used to provide targeted advertising and analyze website performance.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. U.S. Privacy Law Compliance

We comply with applicable U.S. privacy laws, including:

• CCPA/CPRA (California): California Consumer Privacy Act and California Privacy Rights Act
• VCDPA (Virginia): Virginia Consumer Data Protection Act
• CPA (Colorado): Colorado Privacy Act
• CTDPA (Connecticut): Connecticut Data Privacy Act
• UCPA (Utah): Utah Consumer Privacy Act
• COPPA: Children's Online Privacy Protection Act
• FERPA: Family Educational Rights and Privacy Act (for educational records)
• HIPAA: Health Insurance Portability and Accountability Act (where applicable)

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services constitutes acceptance of the updated policy. We will provide at least 30 days' notice for material changes as required by applicable law.

14. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have privacy concerns, please contact us: