1. Introduction

EchoTrail Ventures, Ltd. dba Rocky Raccoon ("Rocky Raccoon," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and AI-powered services (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

Information You Provide

Account Information: When you create an account, we collect your name, email address, and other information you provide.
Conversation Data: We collect the queries you submit ("Inputs") and the AI-generated responses ("Outputs") to provide and improve our Services.
Payment Information: If you purchase credits, we collect payment details through our third-party payment processor (Square). We do not store your full credit card number on our servers.
Communications: When you contact us, we collect the information you provide in your messages.
Feedback: Any feedback, suggestions, or reports you submit about our Services, including per-message ratings and general feedback.

Information Collected Automatically

Device Information: Browser type, operating system, device identifiers, and screen resolution.
Usage Data: How you interact with our Services, including pages visited, features used, and time spent.
Log Data: IP address, access times, error logs, and referring URLs.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities. See Section 7 for more details.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services.
Process your requests and respond to your queries.
Create and manage your account.
Process payments and prevent fraud.
Send you technical notices, updates, and support messages.
Communicate with you about products, services, and events.
Monitor and analyze trends, usage, and activities.
Detect, investigate, and prevent security incidents and abuse.
Comply with legal obligations.
Conduct research and develop new products and features.

4. AI Training and Your Data

We may use conversation data (Inputs and Outputs) to improve our Services, subject to the following:

Opt-Out: You may opt out of having your conversation data used for service improvement by contacting us at privacy@rockyraccoon.io.
Exceptions: Even if you opt out, we may still use data that has been flagged for safety review, reported for abuse, or provided as explicit feedback to improve safety and prevent misuse.
De-identification: When using data for research or improvement, we take steps to de-identify or aggregate information where feasible.
Third-Party AI: Your queries are processed by third-party AI providers (see Section 5) to generate responses. These providers may have their own data handling policies.

5. How We Share Your Information

We may share your information with the following categories of third parties:

Service Providers

We use the following third-party services to operate our platform:

Anthropic (Claude AI): Processes your queries and generates AI responses. Your conversation inputs are sent to Anthropic's API for processing.
Clerk: Provides authentication and account management. Receives your name, email, and login credentials.
Square: Processes credit purchases. Receives payment card information directly via their secure SDK.
Google Analytics: Collects anonymized usage data to help us understand how the Services are used.
Amazon Web Services (AWS): Hosts our infrastructure, including databases and application servers.

Other Disclosures

Legal Requirements: When required by law, legal process, or government request, or to protect rights, privacy, safety, or property.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets.
With Your Consent: When you have given us permission to share your information.

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Account Data: Retained while your account is active and for a reasonable period thereafter.
Conversation Data: Deleted conversations are removed from our active systems within 30 days.
Aggregated Data: De-identified or aggregated data may be retained indefinitely for research and analytics.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Services. These technologies help us:

Remember your preferences and settings.
Authenticate users and prevent fraud.
Analyze how our Services are used.
Personalize your experience.

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Services.

8. Your Rights and Choices

Depending on your location, you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your personal information.
Object to or restrict certain processing of your data.
Request portability of your data.
Withdraw consent where processing is based on consent.
Opt out of marketing communications.

To exercise these rights, please contact us at privacy@rockyraccoon.io. We will respond to your request in accordance with applicable law.

We do not engage in automated decision-making that produces legal or similarly significant effects on users.

9. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from your country. Where required by applicable law, we use appropriate safeguards such as Standard Contractual Clauses to protect your information during international transfers.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will take steps to delete it promptly. If you believe we have inadvertently collected such information, please contact us at privacy@rockyraccoon.io.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website with a new "Last updated" date. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

EchoTrail Ventures, Ltd. dba Rocky Raccoon
Colorado, United States
Email: privacy@rockyraccoon.io

14. Additional Disclosures for Specific Jurisdictions

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

Colorado Residents

If you are a Colorado resident, you may have additional rights under the Colorado Privacy Act (CPA), including the right to access, correct, and delete your personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and profiling. We do not sell personal data or engage in targeted advertising.

European Economic Area Residents

If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Our legal bases for processing include performance of a contract (providing the Services), your consent (where applicable), and our legitimate interests (improving our Services and preventing abuse). You may contact us at privacy@rockyraccoon.io to exercise your rights or lodge a complaint with your local supervisory authority.