Privacy Policy

1. Introduction

Welcome to Superunit Inc. ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

‍

2. Information We Collect

We may collect personal information that you provide to us, such as:

• Name
• Email address
• Phone number
• Mailing address
• Other information you choose to provide

We may also automatically collect certain information when you visit our website, including:

• IP address
• Browser type
• Device information
• Log data

‍

3. How We Use Your Information

We use your information for various purposes, including:

• To provide and maintain our services
• To notify you about changes to our services
• To provide customer support
• To gather analysis or valuable information to improve our services
• To detect, prevent, and address technical issues

‍

4. Disclosure of Your Information

We may disclose your personal information in the following situations:

• To comply with legal obligations
• To protect and defend our rights or property
• To prevent or investigate possible wrongdoing in connection with our services
• To protect the personal safety of users of our services or the public

‍

5. Subprocessors

Superunit Inc. uses third-party services to process and store data. Our approved subprocessors include:

• AWS - Cloud infrastructure and hosting
• Vercel - Hosting and deployment
• Supabase - Database, authentication, and storage

‍

6. Privacy Program

‍

a. Governance & Accountability

• The CTO (or assigned Privacy Lead) is responsible for overseeing data privacy compliance and ensuring the company follows our Privacy Program.
• We conduct regular privacy training for all employees covering FCRA, GDPR, CCPA, and other relevant privacy laws, data security best practices, and incident response procedures.

‍

b. Data Collection & Processing

• We maintain a Data Processing Inventory (DPI) that documents what data we collect, how it is processed, where it is stored, and who has access.
• Personal data is collected and processed only when there is a lawful basis, such as user consent, contractual necessity, or legitimate interest.
• Data is retained only as long as necessary for operational and legal purposes.

‍

c. User Rights & Request Handling

• Users have the right to access their data, correct inaccurate information, request deletion, and opt-out of data sharing (for California residents under CCPA).
• Requests can be submitted via hello@superunit.ai and will be processed within 30 days.

‍

d. Data Security Measures

• We implement Role-Based Access Controls (RBAC) to restrict data access to only authorized employees.
• Data is encrypted in transit (TLS 1.2/1.3) and at rest.
• Our subprocessors utilize industry-standard security measures to protect cloud-hosted data.
• If a data breach occurs, our response includes initial assessment within 24 hours, notification to affected users (if required by law), and mitigation to prevent recurrence.

‍

e. Compliance & Audits

• Privacy policies are reviewed annually.
• Internal audits ensure compliance with privacy laws and best practices.
• If laws change, our Privacy Program will be updated accordingly, and affected users will be notified of major changes.

‍