Effective August 5th, 2013
Ashes is designed to help you liberate and secure your information, not spread it around. To that end, we keep only what we absolutely must, and minimize how long we keep it.
While placing your order, you will provide us with your name and email address, which we will keep to provide support for your order. Your credit card details and address actually skip us entirely and are only handled by our bank-grade secure payment processing company: Stripe. Stripe will pass back to us the information that goes on your receipt: last 4 digits, expiration date, and card type. We store these items so that we can generate and send your receipt whenever you request it.
You will also complete a process called oAuth, giving us access to your Campfire account via a token (so that we never have access to your password). You can revoke this access yourself any time by changing your 37signals password, and we will automatically and permanently delete the token ourselves as soon as your order is completed.
In order to provide better service and improve Ashes, we use analytics tools to automatically and anonymously track all visitors (including you) as they move through and use the website. Your software (browser & operating system), IP address, referring page, and various other non-personal technical data are collected.
We also automatically collect only the specific contents of your campfire chat history necessary to build your archive, the rooms and date ranges you select during the order process.
We don't share or sell your information with anyone, except in the following circumstances:
- To comply with a court order. We'll do everything we can to notify you in advance unless specifically prohibited from doing so. We intentionally destroy our ability to access your data as quickly as possible to minimize the chance of our being compelled to release it.
- If we're acquired or merge with another company, your information collected under this policy would be continue to be governed by this policy.
- As necessary to provide the services you order. Specifically we will share your email address with our email provider in the process of sending you a receipt and then a notification when your order is complete.
- Your order transaction details (name, email) will be kept as long as we're in business.
- Your 37signals authentication token will be kept only until your order is completed.
- Your archive will be kept for a maximum of 30 days, but you can delete it as soon as you'd like, and we will frequently encourage you to do so.
We make every reasonable effort to preserve the security of your information, however it is impossible to provide an absolute guarantee for information transmitted over the internet. In the event of a breach, we will notify all affected users as soon as possible.
The government says we can't offer services to kids under the age of 13. Kids, not having credit cards to use in purchasing our services, are entirely unaffected by this rule, but we're prohibiting them here just for completeness.
We may need to change this policy in the future. If we do, an announcement on all Ashes.io pages will inform users. A complete history of this policy can be reviewed using the interface here: https://gist.github.com/kvangork/6160105
We welcome your questions, comments, and generally pleasant conversation regarding this policy and any other topic that interests you. Please get in touch by emailing us at ashes@forgeapps.com.