Privacy Policy

1. Introduction

Indigo Labs Limited("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our presentation feedback service.

We comply with the UK Data Protection Act 2018 and the UK GDPR. By using our service, you consent to the data practices described in this policy.

2. Information We Collect

Information You Provide

• Account information (name, email address, password)
• Profile information (organisation name, role)
• Presentation titles
• Payment information (processed securely via Stripe)
• Communications with us (support requests, feedback)

Information Collected Automatically

• Session feedback and engagement data from your audience
• Usage data (features used, presentation statistics)
• Device information (browser type, operating system)
• IP address and approximate location
• Cookies and similar tracking technologies

Audience Participant Data

When audience members join your presentations, we collect minimal data:

• Feedback and engagement responses
• Session participation data

Note: We do not require audience members to create accounts or provide personal information beyond an optional display name.

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our service
• Processing your transactions and managing subscriptions
• Sending important service updates and notifications
• Responding to your inquiries and support requests
• Analysing usage patterns to improve our service
• Detecting and preventing fraud or abuse
• Complying with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: To provide our services as agreed in our Terms and Conditions
• Legitimate Interests: To improve our service, ensure security, and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications (which you can opt out of anytime)

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Trusted third parties who assist in operating our service (e.g., Stripe for payments, Supabase for hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale, or acquisition
• Your Consent: When you explicitly agree to sharing

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure data centres with physical security

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account data: Retained while your account is active
• Presentation data: Retained according to your subscription plan
• Financial records: 6 years for tax and accounting purposes
• Audience feedback: A minimum of 90 days after the presentation session unless you remove it earlier

8. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Restriction: Request limited processing of your data
• Withdraw Consent: Where processing is based on consent

To exercise these rights, please contact us at privacy@indigo-labs.co.uk

9. International Transfers

Your data may be processed in countries outside the UK. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities.

10. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Cookies

We may use essential cookies to maintain your session and preferences. We also may use analytics cookies (with your consent) to understand how you use our service. You can manage cookie preferences in your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@indigo-labs.co.uk
• Address: Indigo Labs, 72 Aldershot Road, Fleet, GU51 3FT, Hampshire, United Kingdom

14. Complaints

If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113