Privacy Policy
This privacy policy outlines how Serotana LLC collects, uses, and shares user data. By using our services, you agree to the terms outlined in this policy.

Last updated: May 16, 2024

1. Company Details
Serotana LLC
Contact Email: privacy@mentalkit.app

2. Data Collection
We collect email addresses from users for authorization and logins. Users may also provide additional information voluntarily that is not related to personal identification.

3. Data Usage
Email addresses are used for the following purposes:

• Authorization and Logins: To authenticate users and allow them access to our services.
• Updates: To send minor updates and notifications about changes to our services.
• Privacy Policy Updates: To inform users about updates to our privacy policy.

4. Data Sharing
We share email addresses with Bento, an email and marketing automation platform, to facilitate our email communications. Bento ensures data security and privacy through several measures:

• They use encryption for data protection and store data in secure data centers with state-of-the-art surveillance and access controls.
• Bento does not use third-party services that would access your data.
• They comply with GDPR and other privacy regulations by ensuring that all data processing happens within their secure systems.

5. Data Retention
We retain data indefinitely until the user deletes their account. Users have the right to request data deletion at any time.

6. User Rights

• Access and Correction: Users can access and correct their data through the app.
• Deletion: Users can delete their account automatically through the app using the "Delete Account" button or by emailing privacy@mentalkit.app to request data deletion.
• Restriction: Users can request to restrict the processing of their data by contacting us via email.

7. Security Measures
We implement industry-standard security measures to protect your data. User passwords are encrypted, and we ensure robust security protocols are in place to safeguard data.

8. Cookies and Tracking
We use a single cookie for logging in. No other cookies or tracking mechanisms are employed.

9. Changes to the Policy
Users will be notified of any changes to this privacy policy via email and through the app.

10. Third-Party Services
We use Plausible Analytics, a GDPR-compliant platform, to analyze website traffic without tracking personal data. Plausible collects anonymized data such as page URLs, referrer strings, browser and operating system details, device type, and geolocation at the city level. All data is anonymized within twenty-four hours, and no personal identifiers are stored or shared with third parties.

11. GDPR Compliance
Under the General Data Protection Regulation (GDPR), users have the following rights:

• Right to Access: Users can request access to their personal data.
• Right to Rectification: Users can request correction of any inaccurate data.
• Right to Erasure: Users can request the deletion of their personal data.
• Right to Restrict Processing: Users can request the restriction of processing of their personal data.
• Right to Data Portability: Users can request to receive their personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Users can object to the processing of their personal data.
• Right to Withdraw Consent: Users can withdraw their consent at any time.

To exercise these rights, users can contact us at privacy@mentalkit.app.

12. CCPA/CPRA Compliance
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to Know: Users can request disclosure of the categories and specific pieces of personal information collected about them.
• Right to Delete: Users can request the deletion of personal information collected from them.
• Right to Opt-Out: Users can opt-out of the sale of their personal information.
• Right to Non-Discrimination: Users have the right to not be discriminated against for exercising their CCPA/CPRA rights.

To exercise these rights, users can contact us at privacy@mentalkit.app or use the mechanisms provided within the app.