PRIVACY POLICY

AquaBoost LLC ("AquaBoost," "we," "us," or "our") operates this website and the AquaBoost TraxLog device-hosted web app. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or purchase our products.

By using our website or purchasing our products, you agree to the terms of this Privacy Policy. If you disagree with any part, please do not use our services.

We may collect the following categories of information:

• Contact information: name, email address, shipping address, and phone number when you place an order or contact us.
• Payment information: processed securely by Stripe. We do not store your payment card numbers on our servers.
• Order information: products purchased, order amounts, and transaction history.
• Device and usage data: browser type, IP address, pages visited, and referring URLs collected automatically when you visit our website.
• Web app data: the AquaBoost TraxLog device-hosted web app operates locally on your network. Your vehicle diagnostic session data stays on your device and is not transmitted to our servers.
• Firmware update data: when your device checks for or installs a firmware update from our servers, it transmits its hardware (MAC) address, its current firmware version, and the version being downloaded. We use this to deliver updates and to understand which firmware versions are in use. We do not store the IP address of firmware update requests.
• Shared ride logs: the CSV file and its engine data, only if you choose to share a log. Logs you view without sharing are never uploaded.

We use the information we collect to:

• Process and fulfill your orders and send order confirmations and shipping updates.
• Respond to customer service inquiries and support requests.
• Send transactional emails related to your purchase (no marketing emails without consent).
• Analyze website usage to improve our website and user experience.
• Deliver firmware updates to your device and monitor firmware version adoption across devices.
• Comply with applicable legal obligations.
• Host ride logs you have chosen to share, and generate the ride summary shown when a share link is posted.
• Detect and prevent fraudulent transactions.

All payments are processed through Stripe, Inc., a PCI-DSS Level 1 compliant payment processor. When you complete a purchase, your payment information is transmitted directly to Stripe and is never stored on our servers. Stripe's privacy policy governs their handling of your payment data.

The log viewer on our website reads your CSV file in your browser. Viewing a log does not upload it, and we never receive it.

If you choose to share a log, the file is uploaded to our servers and published at a link that anyone holding it can open. Ride logs contain vehicle engine data — engine speed, boost pressure, temperatures, throttle position, battery voltage, and diagnostic trouble codes. They do not contain your name, contact information, or location data.

A shared log remains available while it continues to be viewed and is deleted after two years without a view. You may delete a shared log at any time using the delete link issued when you share it. Because a shared link is public, we cannot control copies made by others while it was available.

When you share a log you may optionally ask us to email the links to you. We use that address to send that one message and do not store it.

To limit abuse of the upload form, we store a one-way hash of the uploading IP address for 24 hours. It is used only to count uploads and is not linked to your identity or your order.

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Stripe (payment processing)
• Shipping carriers (to fulfill your order)
• Service providers who assist in website operations under confidentiality obligations
• Law enforcement or government agencies when required by law

Our website uses a limited set of cookies that are necessary for the site to function properly. We do not use advertising cookies, behavioral tracking cookies, or third-party analytics cookies.

The following cookies may be set when you use our website:

• Stripe payment cookies (__stripe_mid, __stripe_sid): Set by our payment processor Stripe when you initiate a checkout session. These are essential for secure payment processing and fraud prevention. They do not track you across other websites.
• Session/functional cookies: Temporary cookies used to maintain basic site functionality (e.g., remembering your session state). These are deleted when you close your browser.

You can configure your browser to refuse or delete cookies. Refusing Stripe cookies may prevent you from completing a purchase. No other site functionality is affected by disabling cookies.

We do not use Google Analytics, Meta Pixel, or any other third-party tracking or advertising scripts.

We retain your personal information only as long as necessary:

• Order and transaction records: retained for 7 years to comply with tax and accounting obligations.
• Customer support communications: retained for 3 years from the date of last contact.
• Website usage logs (IP address, browser data): retained for up to 90 days, then deleted.
• Firmware update logs (device MAC address, firmware version): retained for up to 12 months to support update delivery and product diagnostics.
• Shared ride logs: retained while in use; deleted after two years with no views, or immediately when you use your delete link.
• Upload rate-limiting records (hashed IP address): retained for 24 hours, then deleted.
• Payment information: we do not store payment card data. Stripe retains payment records per their own data retention policy.

You may request deletion of your personal data at any time by contacting us (see Your Rights below). We will honor deletion requests except where retention is required by law.

We implement commercially reasonable security measures to protect your personal information. However, no method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

Depending on your state of residence, you may have rights regarding your personal information. To submit any request, contact us at support@aquaboosttech.com and we will respond within 45 days.

We do not sell, share for cross-context behavioral advertising, or otherwise monetize your personal information.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose what personal information we have collected about you, including the categories, sources, purposes, and third parties it was shared with.
• Right to Delete: You may request deletion of your personal information that we have collected, subject to certain exceptions (e.g., completing a transaction, legal obligations).
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA beyond what is necessary to process your order.

To exercise any of these rights, email support@aquaboosttech.com with the subject line "California Privacy Request." We will verify your identity before processing your request and respond within 45 days.

Our website and products are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us immediately.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the website after changes constitutes acceptance of the revised policy.

For privacy-related questions, contact AquaBoost LLC at support@aquaboosttech.com.