1. Introduction
Limelyte Technology Group, Inc. ("Limelyte," "we," "us," or "our") operates the Sluicebox platform, including the web application, mobile applications, command-line interface (CLI) tools, application programming interfaces (APIs), and related websites (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Service.
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, phone number, job title, department, and role when you create or are added to an account.
- Business Data: Company names, addresses, websites, hourly rates, and other business details you enter into the platform.
- Work Activity Data: Time entries, project descriptions, task details, notes, comments, estimates, invoices, and other operational data you create through the Service.
- Financial Information: Invoice amounts, payment details, and billing information processed through the Service.
- Communications: Messages you send through contact forms, support requests, or other communications with us.
- Files and Attachments: Documents, images, and other files you upload to the Service.
2.2 Information from Third-Party Integrations
When you connect third-party services, we may receive data from those services, including:
- Google Workspace: Email messages, calendar events, and documents when you authorize Gmail or other Google service integrations via OAuth 2.0.
- Intuit QuickBooks: Customer records, invoices, payments, account information, and financial reports when you connect your QuickBooks Online account.
- Stripe: Payment transaction data, including payment IDs, amounts, and status information for payment processing.
- CRM Systems: Contact records, deal information, and activity data from connected CRM platforms (e.g., Copper, Method CRM).
- Communication Platforms: Message data from connected platforms such as Slack when you authorize integrations.
2.3 Information Collected Automatically
- Usage Data: Pages visited, features used, timestamps, and interaction patterns.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP addresses, access times, referring URLs, and error logs.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and Maintain the Service: To operate, deliver, and improve the features and functionality of Sluicebox.
- Process Transactions: To process invoices, payments, and other financial transactions you initiate.
- Facilitate Integrations: To sync and exchange data with third-party services you connect, including QuickBooks, Google Workspace, Stripe, and CRM platforms.
- Communications: To respond to your inquiries, send service-related notices, and provide customer support.
- Security: To detect, prevent, and address fraud, abuse, and security issues.
- Analytics: To understand usage patterns and improve the Service.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Third-Party Integrations: When you connect external services (QuickBooks, Google, Stripe, CRM systems, etc.), data is shared with those services as necessary to provide the integration you requested. These services are governed by their own privacy policies.
- Service Providers: We use third-party service providers for hosting (Amazon Web Services), payment processing (Stripe), file storage (Amazon S3), and other infrastructure services. These providers access your data only to perform services on our behalf.
- Within Your Organization: Data you enter may be visible to other authorized users within your organization's Sluicebox account, subject to role-based access controls and privacy settings.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Storage and Security
Your data is stored on servers hosted by Amazon Web Services (AWS) in the United States. We implement industry-standard security measures to protect your information, including:
- Encrypted data transmission (TLS/HTTPS)
- OAuth 2.0 with PKCE for third-party authentication (no passwords stored for external services)
- Hashed credentials using bcrypt where applicable
- Role-based access controls
- File integrity verification via SHA-256 checksums
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. When data is deleted within the Service, it is initially soft-deleted (marked as inactive) and may be recoverable for a limited period. Data is permanently purged in accordance with our retention schedules.
We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes and enforcing agreements.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal obligations and legitimate business needs.
- Data Portability: Request a copy of your data in a structured, machine-readable format.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
- Disconnect Integrations: You may revoke access to connected third-party services at any time through your account settings or the third-party service's settings.
To exercise any of these rights, please contact us at hello@limelyte.com.
8. Cookies and Tracking
Our marketing website may use cookies and similar technologies for analytics and functionality. The Sluicebox application uses session tokens for authentication. We do not use third-party advertising trackers.
You can control cookie preferences through your browser settings. Disabling cookies may affect certain functionality of the Service.
9. Third-Party Services
The Service integrates with third-party services that have their own privacy policies. We encourage you to review the privacy practices of any third-party service you connect, including:
Our use of information received from third-party APIs, including the Intuit QuickBooks API and Google APIs, adheres to each provider's applicable developer terms and data use policies.
We are not responsible for the privacy practices of third-party services.
10. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 16, we will take steps to delete that information promptly.
11. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers are located. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws that differ from your jurisdiction.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: