1. Introduction

Welcome to WidgetLab ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including our widget applications such as the YouTube Widget, Instagram Widget, and any future widget applications we may develop.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account with WidgetLab, we collect the following information:

• Email Address: Used for account identification and communication
• Password: Stored securely using industry-standard hashing algorithms (bcrypt)
• Name: Your display name (optional)
• User ID: A unique identifier generated for your account
• Account Creation Date: Timestamp of when your account was created
• Last Login: Timestamp of your most recent login

2.2 Widget Configuration Data

When you create and customize widgets using our services, we store:

• Widget configuration settings (layout, styling, display preferences)
• Widget IDs and associated metadata
• Customization preferences and saved settings

2.3 API Keys and Credentials

If you choose to provide API keys for third-party services (such as YouTube API or Instagram API), we:

• Encrypt your API keys before storage using secure encryption methods
• Store encrypted keys in secure, private storage
• Never expose your API keys in plain text or share them with third parties

2.4 Contact Form Information

When you submit a contact form on our website, we collect:

• Your name
• Your email address
• Your message content

This information is processed through Web3Forms and used solely to respond to your inquiries.

2.5 Automatically Collected Information

When you visit our website or use our services, we automatically collect:

• IP Address: Used for security purposes, rate limiting, and preventing abuse
• Browser Information: Browser type, version, and language preferences
• Device Information: Device type, operating system, and screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths
• Referral Information: The website that referred you to our services

2.6 Third-Party Service Data

Our widgets may interact with third-party services (YouTube, Instagram, etc.), and we may collect:

• Public data from these services as configured in your widgets
• Analytics data from Google Analytics
• Chat interaction data from Crisp Chat (if you use our live chat feature)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our widget services
• Account Management: To create and manage your account, authenticate your identity, and process your requests
• Widget Functionality: To store and retrieve your widget configurations, enabling your widgets to function properly
• Communication: To respond to your inquiries, provide customer support, and send important service-related notifications
• Security: To protect against fraud, abuse, and security threats through rate limiting and monitoring
• Analytics: To understand how our services are used, improve user experience, and optimize our website performance
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Data Storage and Security

4.1 Storage Location

Your data is stored securely using industry-standard cloud storage services that provide:

• Private, encrypted storage for sensitive data
• Geographic data centers with redundancy
• Industry-standard security measures

4.2 Security Measures

We implement multiple layers of security to protect your information:

• Encryption: API keys and sensitive data are encrypted before storage
• Password Hashing: Passwords are hashed using bcrypt, a secure one-way hashing algorithm
• Private Storage: User profiles, widget configurations, and sensitive data are stored with private access controls
• HTTPS: All data transmission is encrypted using HTTPS/TLS protocols
• Rate Limiting: API endpoints are protected with rate limiting to prevent abuse
• Authentication: Access to sensitive data requires proper authentication and authorization

4.3 Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

You may request deletion of your account and associated data at any time by contacting us.

5. Third-Party Services

We use the following third-party services that may collect or process your information:

5.1 Google Analytics

We use Google Analytics to understand website usage and improve our services. Google Analytics may collect:

• Page views and navigation patterns
• Device and browser information
• Geographic location (general)

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.2 Crisp Chat

We use Crisp Chat for customer support and live chat functionality. Crisp may collect:

• Chat conversation history
• IP address and device information
• Email address (if provided during chat)

For more information, please review Crisp's Privacy Policy.

5.3 Web3Forms

We use Web3Forms to process contact form submissions. Web3Forms may collect:

• Form submission data (name, email, message)
• IP address

For more information, please review Web3Forms' Privacy Policy.

5.4 YouTube API and Instagram API

Our widgets may interact with YouTube and Instagram APIs to fetch public content. These services have their own privacy policies:

• Google Privacy Policy
• Instagram Privacy Policy

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Correction: You can update or correct your account information through your account settings or by contacting us
• Deletion: You can request deletion of your account and associated data by contacting us
• Data Portability: You can request a copy of your data in a structured, machine-readable format
• Opt-Out: You can opt out of certain data collection, such as Google Analytics, using browser extensions or settings
• Account Management: You can manage your account settings, update your information, or delete your account at any time

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized experiences

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

8. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. By using our services, you consent to the transfer of your information to these countries. We take appropriate measures to ensure your information is protected in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information (we do not sell your personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

12. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, please contact us using the information provided below.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Consent

By using WidgetLab's services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.