Privacy Policy
This Privacy Policy describes how Trekeffect Inc., a Connecticut corporation doing business as Oaysus ("Company," "we," "us," or "our"), collects, uses, and protects your personal information when you use our platform services ("Services"). Our Services include:
- Subscription Website Services: Pre-built websites for blue-collar professionals hosted on myoaysus.com with optional custom domain support
- E-commerce Platform Services: Full-featured e-commerce solutions with revenue-sharing arrangements for select clients
- Demo and Preview Services: Preview websites for prospective subscription customers
We are committed to protecting your privacy and being transparent about our data practices. This Policy applies to all users of our Services and describes your privacy rights under applicable United States privacy laws, including Connecticut state privacy laws.
1Information We Collect
Information You Provide Directly
- Account Information: Name, email address, business name, phone number, and other details you provide when registering
- Profile Information: Additional details you choose to add to your account profile
- Business Data: For subscription customers - business information, custom domain details, subdomain preferences, and website content
- E-commerce Data: For revenue-share clients - product information, customer data, sales data, and other content uploaded to the platform
- Lead Information: Contact information submitted through lead capture forms on customer websites, stored in our database and accessible to website owners through their dashboard
- Payment Information: Billing address and payment method details processed securely through Stripe
- Device Authorization: When using our CLI tool, device identifiers and authorization tokens to enable authenticated access from your development environment
- Communications: Messages, support requests, and other communications with us
Information We Collect Automatically
- Usage Data: Pages visited, features used, time spent on our platform, and interaction patterns
- Device Information: IP address, device type, operating system, browser type and version
- Location Information: General location based on IP address for service optimization and security
- Log Data: Server logs, error reports, and system performance data
- Cookies and Tracking: Information collected through cookies and similar technologies (see our Cookie Policy)
Information from Third Parties
- Integration Data: Information from third-party services you connect to our platform
- Analytics Services: Data from analytics providers about your use of our Services
- Security Services: Information from security providers for fraud detection and prevention
2How We Use Information
Service Provision
- Provide, maintain, and improve our platform services (subscription websites and e-commerce solutions)
- Process subscription payments and manage billing through Stripe
- Host websites on myoaysus.com subdomains and support custom domain routing
- Generate and provide demo/preview websites for prospective customers
- Process lead capture form submissions and deliver them to website owners
- For e-commerce clients: facilitate product catalog management, order processing, and email marketing
- Manage revenue-sharing arrangements for applicable client accounts
Communication and Support
- Respond to your requests, questions, and provide customer support
- Send service announcements, updates, and security notifications
- Deliver marketing communications (with your consent where required)
- Conduct user surveys and gather feedback
Analytics and Improvement
- Analyze usage patterns to improve our Services and develop new features
- Conduct A/B testing and performance optimization
- Generate aggregated analytics and business intelligence
- Monitor system performance and troubleshoot technical issues
Security and Compliance
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service and other policies
- Comply with legal obligations and respond to legal requests
- Conduct security monitoring and incident response
3Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share information in the following circumstances:
Service Providers
We work with trusted third-party service providers who help us deliver our Services:
- Cloud Hosting: Amazon Web Services (AWS) for database and backend services; Google Cloud Platform (GCP) for frontend hosting and content delivery
- Payment Processing: Stripe for secure payment processing and subscription billing
- Email Services: Transactional email providers for delivering lead capture form submissions
- Analytics: Website and application analytics services
- Security: Fraud detection and security monitoring services
- Customer Support: Help desk and support management tools
These providers are bound by confidentiality agreements and may only use your information to provide services to us.
Business Transfers
If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to different privacy practices.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
Protection of Rights
We may disclose information when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our Terms of Service, suspected fraud, situations involving potential threats to the safety of any person, or illegal activities.
4Data Security
We implement security measures appropriate to our size and the nature of our Services to protect your personal information:
- Encryption in Transit: All data transmitted to and from our Services is encrypted using industry-standard TLS protocols
- Secure Infrastructure: Our Services are hosted on Amazon Web Services (AWS) and Google Cloud Platform (GCP), both of which maintain SOC 2, ISO 27001, and other security certifications
- Access Controls: Limited personnel access to production systems with authentication requirements
- Regular Backups: Automated daily backups with 15-day retention stored securely in AWS
- Secure Authentication: JWT-based authentication tokens for user sessions
- Payment Security: All payment processing is handled by Stripe; we do not store complete payment card information
As an early-stage company, we continuously work to improve our security practices. While we strive to protect your personal information, no security system is impenetrable. We cannot guarantee the absolute security of your data transmitted through our Services.
5Data Retention
We retain your personal information for different periods based on the type of data and our business needs:
- Active Account Information: Retained while your account is active. Upon cancellation, account data is retained for 90 days to allow reactivation, after which it is permanently deleted
- Lead Capture Form Data: Stored in our database and accessible through your dashboard until you delete it or your account is terminated. Lead data is deleted within 30 days of account termination
- Subscription Data: Until subscription cancellation plus 90 days for potential reactivation
- Analytics Data: Individual-level data for 1 year; aggregated data for 2 years
- Transaction and Billing Records: 7 years to meet tax, audit, and legal requirements
- System Logs: 90 days for security monitoring and troubleshooting
- Customer Support Records: 3 years for service improvement and legal purposes
Backup Retention: Deleted data may persist in encrypted backups for up to 15 days before being automatically purged through our rolling backup system.
We may retain certain information for longer periods where required by law or for legitimate business purposes such as fraud prevention.
6Your Privacy Rights
General Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Portability: Request a copy of your data in a machine-readable format
- Opt-out: Opt out of marketing communications at any time
State-Specific Rights
Connecticut Residents (CTDPA)
As a Connecticut corporation, we comply with the Connecticut Data Privacy Act. Connecticut residents have the following rights:
- Right to confirm whether we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to delete your personal data
- Right to obtain a portable copy of your personal data
- Right to opt out of targeted advertising (when applicable)
- Right to opt out of the sale of personal data (we do not sell personal data)
- Right to appeal our decision regarding your privacy request
To appeal a decision, email [email protected] with "Privacy Appeal" in the subject line. We will respond within 60 days.
California Residents (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected, used, shared or sold
- Right to delete personal information held by us
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
Other State Laws
Residents of Virginia, Colorado, and other states with comprehensive privacy laws may have similar rights under those laws. Contact us to exercise your rights.
How to Exercise Your Rights
To exercise your privacy rights:
- Email us at [email protected]
- Update information directly in your account settings (for subscription customers)
- Use the unsubscribe link in marketing emails
We will respond to your request within 30 days and may need to verify your identity before processing certain requests.
7Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and collect information about how you use our Services:
Types of Cookies We Use
- Essential Cookies: Required for the Services to function properly
- Performance Cookies: Help us analyze how you use our Services
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertising (with consent)
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services. For more detailed information, please see our Cookie Policy.
8International Data Transfers
Our Services are primarily designed for users in the United States. Your personal information is stored and processed in the United States using Amazon Web Services (AWS) in the US-East-1 region for backend services and Google Cloud Platform (GCP) for frontend services.
If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and central database are located.
We do not currently target or market our Services to residents of the European Union and do not process personal data subject to the General Data Protection Regulation (GDPR).
9Children's Privacy
Our Services are designed for business use and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.
If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information promptly.
If you believe we have collected information from a child under 18, please contact us immediately at [email protected].
10Do Not Track Signals
Some browsers and devices offer "Do Not Track" (DNT) signals or similar mechanisms. Currently, there is no universal standard for recognizing and implementing these signals.
Our Services do not currently respond to Do Not Track signals. However, you can use the cookie management options described in our Cookie Policy to control our use of cookies for analytics purposes.
11Automated Decision-Making
We do not currently use automated decision-making or profiling that produces legal effects or similarly significant effects on users.
If we implement such features in the future, we will update this Privacy Policy and provide appropriate notice and opt-out mechanisms as required by applicable law.
12Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Investigate the incident promptly to determine the scope and impact
- Take immediate steps to contain and mitigate the breach
- Notify affected users within 72 hours of confirming the breach, or as otherwise required by applicable law
- Provide information about what data was affected and steps you can take to protect yourself
- Report to relevant authorities as required by law
The notification timeline may be extended if law enforcement determines that notification would impede a criminal investigation.
13Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.
We will notify you of any material changes by:
- Sending an email to the address associated with your account
- Posting a notice on our website
- Updating the "Last Updated" date at the top of this Policy
Your continued use of our Services after we post any modifications to this Policy will constitute your acknowledgment of the modifications and your consent to abide by the modified Policy.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Trekeffect Inc. (d/b/a Oaysus)
11 Spinnaker Drive
Niantic, CT 06357
United States
Email: [email protected]
Response Time: We will respond to privacy inquiries within 30 days of receipt.