Legal
Privacy Policy
Last Updated: September 24, 2026
1. Introduction
Aspen Ridge Labs LLC, doing business as Aspen Ridge Labs ("Aspen Ridge Labs," "ARL," "we," "us," or "our"), respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you interact with our websites, applications, software, products, and services.
This Policy applies to:
- Visitors to our websites.
- Individuals who contact us or request information about our services.
- Customers and authorized users of our platforms and applications.
- Individuals who participate in projects, support requests, or other business interactions with us.
- Individuals whose personal information we process while providing services to our clients.
This Policy applies to our current services and, where applicable, future products and services operated by Aspen Ridge Labs.
Certain products, services, or client engagements may have additional privacy notices or contractual terms that supplement this Policy.
By using our websites or services, you acknowledge that you have had the opportunity to review this Privacy Policy. Where applicable law requires consent for a particular data processing activity, we will seek that consent separately.
2. Information We Collect
The information we collect depends on how you interact with Aspen Ridge Labs and which services you use.
2.1 Information You Provide Directly
We may collect personal information that you voluntarily provide, including:
Contact and identification information
- Name.
- Email address.
- Telephone number.
- Company or organization name.
- Job title or position.
- Mailing or billing address.
Project and business information
- Project descriptions and requirements.
- Estimated budgets and timelines.
- Business information and preferences.
- Brand materials, logos, images, and other content.
- Communications, feedback, and survey responses.
- Information provided through consultation requests or support inquiries.
Account information
When customer accounts become available, we may collect:
- Name and contact information.
- Username and email address.
- Authentication information.
- Company and organizational information.
- Job title or role.
- Account preferences and profile details.
- Information about account permissions and membership.
- Multi-factor authentication and account recovery information.
We may also collect information you voluntarily provide through future products, services, and applications.
2.2 Information Collected Automatically
When you visit our websites or use our services, we and our service providers may automatically collect certain technical and usage information, including:
- Internet Protocol (IP) address.
- Browser type and version.
- Operating system and device information.
- Pages and content viewed.
- Dates, times, and duration of visits.
- Referring websites and links.
- Interactions with website features.
- Application usage and diagnostic information.
- Security events and technical logs.
We may use this information to operate our services, understand usage patterns, troubleshoot issues, and protect our systems.
2.3 Cookies and Similar Technologies
We may use cookies, pixels, local storage, and similar technologies to:
- Maintain essential website and application functionality.
- Remember preferences.
- Support authentication and account security.
- Understand website and application usage.
- Analyze performance.
- Support marketing activities where applicable.
Some technologies may be provided by third-party services.
You may be able to control cookies through your browser or device settings. Disabling certain technologies may affect the functionality of our websites or services.
Where required by applicable law, we will provide appropriate choices or obtain consent before using non-essential cookies or similar technologies.
2.4 Payment and Billing Information
When we offer paid products or services, we may collect information necessary to process payments and manage customer accounts, including:
- Billing name and address.
- Invoice and transaction details.
- Subscription and payment history.
- Payment status and related records.
- Information about refunds, credits, and billing disputes.
We may use third-party payment processors to handle payment card information and other sensitive payment details.
Where payment methods are saved for future transactions, the payment processor may securely retain the relevant payment credentials or tokens.
We do not intend to store complete payment card numbers or security codes on our own systems.
2.5 Information from Third Parties
We may receive information from third parties, including:
- Authentication providers, such as Google or Apple.
- Payment processors.
- Hosting and infrastructure providers.
- Business partners and subcontractors.
- Clients who provide information necessary for a project.
- Publicly available business information.
- Other service providers involved in delivering our services.
The information received depends on the service and the relationship involved.
2.6 Information Processed on Behalf of Clients
When providing development, hosting, maintenance, consulting, or other services, we may process personal information on behalf of our clients.
This information may include:
- Customer or employee records.
- Business contact information.
- Website or application user information.
- Project files and documents.
- Information stored in client databases.
- Other information that clients choose to provide or make available to us.
In these circumstances, the client may determine the purposes and means of processing, while Aspen Ridge Labs processes information as necessary to provide the contracted services.
Our handling of client information may also be governed by separate contracts, data processing agreements, or other applicable terms.
3. How We Use Personal Information
We may use personal information for the following purposes.
3.1 Providing and Operating Services
We use information to:
- Respond to inquiries and requests.
- Provide website, application, and software development services.
- Manage projects and customer relationships.
- Create and administer customer accounts.
- Provide hosting, maintenance, and technical support.
- Manage support tickets and project status updates.
- Deliver products and services requested by customers.
- Facilitate communication between customers and authorized team members.
3.2 Account Management and Authentication
We may use information to:
- Create and manage customer accounts.
- Authenticate users.
- Manage account permissions and roles.
- Support multi-factor authentication and passkeys.
- Facilitate supported third-party sign-in methods.
- Maintain account security.
- Assist with account recovery and administration.
Where device-based biometric authentication is supported, biometric verification may be performed by the user's device or authentication provider rather than by Aspen Ridge Labs.
3.3 Payments and Financial Administration
We may use information to:
- Process payments and subscriptions.
- Issue invoices and receipts.
- Manage billing accounts.
- Track payment status.
- Process refunds and credits.
- Maintain financial and accounting records.
- Resolve billing disputes.
- Comply with applicable tax and financial obligations.
3.4 Communication
We may use contact information to send:
- Responses to inquiries.
- Project updates.
- Support notifications.
- Account and security notifications.
- Billing notices.
- Contractual and service-related communications.
- Marketing communications where permitted by applicable law.
You may not be able to opt out of certain communications necessary to provide services, maintain account security, or fulfill legal obligations.
3.5 Analytics and Service Improvement
We may use information to:
- Understand how our websites and applications are used.
- Identify technical issues.
- Improve functionality and performance.
- Evaluate customer experience.
- Develop new features and products.
- Analyze trends and usage patterns.
- Improve the quality and reliability of our services.
Where appropriate, we may use aggregated or de-identified information for analytics, research, and product improvement.
3.6 Security and Fraud Prevention
We may use information to:
- Detect and prevent unauthorized access.
- Protect accounts and infrastructure.
- Identify suspicious activity.
- Prevent fraud and abuse.
- Enforce applicable contractual terms.
- Investigate security incidents.
- Protect the rights, safety, and property of Aspen Ridge Labs, our customers, and others.
3.7 Legal and Regulatory Obligations
We may use information to:
- Comply with applicable laws and regulations.
- Respond to lawful requests from authorities.
- Maintain required business records.
- Establish, exercise, or defend legal claims.
- Enforce contracts and agreements.
- Resolve disputes.
3.8 Other Purposes
We may use personal information for other purposes that are disclosed to you at the time of collection or otherwise permitted by applicable law.
If we intend to use personal information for a materially different purpose, we will provide additional information or obtain consent where required.
5. Artificial Intelligence and Automated Tools
Aspen Ridge Labs may use artificial intelligence tools and AI-enabled software to support software development, design, troubleshooting, documentation, quality assurance, and other business activities.
These tools may include third-party AI services and features integrated into development software.
5.1 Information Processed Through AI Tools
Depending on the service and task, information processed through AI tools may include:
- Code and technical documentation.
- Project requirements.
- Business information.
- Text, images, and other project materials.
- Technical or diagnostic information.
- Other information necessary to complete a task.
We seek to minimize the inclusion of personal, confidential, or sensitive information in AI tools when reasonably possible.
However, we cannot guarantee that all personal or confidential information will be removed before information is processed by an AI-enabled tool.
5.2 Purpose and Safeguards
We use AI tools to assist with work performed by Aspen Ridge Labs and do not intend to use client information to train our own AI models.
Third-party AI providers may process information under their own terms and privacy policies. Their handling of submitted information may depend on the service, account configuration, and applicable agreements.
We seek to use appropriate safeguards when processing information through these tools.
5.3 Human Oversight
AI tools are used as aids in our work.
Aspen Ridge Labs retains responsibility for the services it provides and uses human review as appropriate to the task.
We do not intend to use personal information for solely automated decisions that produce legal or similarly significant effects on individuals without providing applicable disclosures and protections.
6. Customer Accounts and Authentication
When customer accounts are available, customers may be able to access account dashboards and manage projects, support requests, billing information, and other services.
We may support authentication through:
- Email addresses and usernames.
- Passwords.
- Multi-factor authentication.
- Passkeys.
- Third-party authentication providers, such as Google or Apple.
We may collect and process authentication information to verify identity, protect accounts, and prevent unauthorized access.
Where authentication is provided by a third party, that provider may process information under its own privacy policy.
Customers are responsible for maintaining the security of their login credentials and notifying us of suspected unauthorized access.
7. Client Content and Intellectual Property
Customers may provide content, files, images, documents, code, business information, and other materials through our services.
Ownership of customer-provided content is governed by the applicable contract or service agreement.
Aspen Ridge Labs may process customer content as necessary to provide the requested services, maintain hosted products, support customers, and fulfill contractual obligations.
Our use of customer content for purposes beyond providing the contracted services will be governed by the applicable agreement and any required permissions or consent.
Customers should not submit personal information or confidential materials that they are not authorized to provide.
8. Data Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of information, the services involved, contractual obligations, and applicable legal requirements.
8.1 Contact and Business Records
Contact form submissions, project inquiries, and business communications may be retained until they are deleted or are no longer reasonably necessary for the purposes for which they were collected.
We may retain relevant communications for business administration, project continuity, dispute resolution, and legal compliance.
8.2 Customer Accounts
We retain customer account information while an account is active and as reasonably necessary after account closure.
We generally intend to retain relevant customer information for at least 180 days following account closure, subject to applicable law, contractual obligations, and operational requirements.
After that period, information may be deleted, de-identified, or retained where necessary for legal, accounting, security, or other legitimate purposes.
8.3 Project Files and Hosted Products
Project files, source code, and hosted products may be subject to separate storage and retention arrangements.
When a customer ends a service, cancels a subscription, or requests account deletion, we may provide options for:
- Transferring project files or source code.
- Transferring domains or other eligible assets.
- Maintaining inactive project materials through a paid storage arrangement.
- Deleting or discontinuing hosted services.
Where a customer does not purchase continued storage, project materials may become inaccessible after the applicable transition period.
We generally intend to provide a period of up to 90 days for customers to retrieve or arrange the continued storage of eligible project materials, subject to the applicable contract and service.
Access restrictions and deletion from active systems may occur at different times.
8.4 Financial and Legal Records
We may retain invoices, transaction records, contracts, tax records, and other financial or legal documentation for up to five years or longer where required by applicable law or necessary for legitimate business purposes.
8.5 Backups and Deletion
Information deleted from active systems may remain temporarily in backups, archives, or disaster recovery systems.
We use reasonable processes to manage the eventual removal of information from these systems, subject to technical limitations and applicable retention requirements.
9. Account Closure and Deletion Requests
Customers may request account closure or deletion through our support channels or available account features.
Because customer accounts may be associated with active subscriptions, hosted websites, applications, source code, or other services, an account closure request may require additional steps.
We may contact the customer to discuss:
- Outstanding payments or contractual obligations.
- Transfer of project materials.
- Continued hosting or storage options.
- Cancellation of subscriptions.
- Discontinuation of services.
- Deletion or retention of relevant information.
We will explain the applicable options and timelines before completing the closure process where reasonably possible.
Certain information may need to be retained to comply with legal obligations, resolve disputes, maintain financial records, or protect our legitimate business interests.
10. Data Security
Aspen Ridge Labs uses reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
These measures may include access controls, authentication mechanisms, security monitoring, encryption where appropriate, and other safeguards suited to the information and services involved.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Customers are responsible for using appropriate security practices when accessing our services and protecting their account credentials.
11. Data Breach and Security Incident Notifications
If we become aware of a security incident involving personal information, we will investigate and take appropriate steps to address the incident.
Where required by applicable law, we will notify affected individuals, clients, regulators, or other relevant parties within the legally required timeframe.
Notifications may be provided by email, through our websites or services, or by another appropriate method.
12. Your Privacy Rights and Choices
Depending on your location and applicable law, you may have rights regarding your personal information.
These rights may include:
- Requesting access to personal information we hold about you.
- Requesting a copy of your personal information.
- Requesting correction of inaccurate information.
- Requesting deletion of certain personal information.
- Requesting restrictions on certain processing activities.
- Objecting to certain processing activities.
- Requesting information about how personal information is used or shared.
- Requesting a portable copy of certain information.
- Withdrawing consent where processing is based on consent.
- Opting out of certain marketing or targeted advertising activities.
- Filing a complaint with a relevant privacy regulator.
These rights may be subject to legal exceptions, verification requirements, and other limitations.
12.1 How to Submit a Request
You may submit privacy requests by:
- Emailing privacy@aspenridgelabs.com.
- Using an available privacy request feature in your customer dashboard.
We may need to verify your identity before processing a request.
Where required by applicable law, we will respond within the applicable legal timeframe.
We generally aim to respond to requests for access or copies of personal information within 30 days and requests for correction or deletion within 14 days, subject to applicable law, the nature of the request, and any permitted extensions.
12.2 Account Information
Where account management features are available, you may be able to update certain personal information directly through your account dashboard.
Some information may need to be retained for legal, security, financial, contractual, or operational reasons.
12.3 Marketing Preferences
You may opt out of marketing communications by using the unsubscribe mechanism included in the communication or by contacting us.
Opting out of marketing communications will not prevent us from sending essential service-related, transactional, security, or legally required communications.
12.4 Complaints
If you have concerns about how we handle personal information, you may contact us using the details in this Policy.
You may also have the right to submit a complaint to a relevant privacy or data protection authority.
13. Marketing Communications
We may send marketing communications about Aspen Ridge Labs, our products, services, announcements, and other business-related updates where permitted by applicable law.
Marketing communications may be sent by email or other supported communication channels.
Where required, we will obtain consent before sending marketing communications.
You may unsubscribe from marketing communications at any time.
We will continue to send essential communications relating to your account, transactions, services, security, and legal obligations where necessary.
14. International Data Transfers
Aspen Ridge Labs is based in the United States.
Depending on the services used and the location of our customers, personal information may be processed or stored in the United States or other countries where we or our service providers operate.
Data protection laws in those locations may differ from the laws in your jurisdiction.
Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.
These safeguards may include contractual protections or other legally recognized transfer mechanisms.
15. Children's Privacy
Aspen Ridge Labs may offer products or services that are accessible to individuals of different ages.
Our general business services are not specifically intended for children under 13 unless a particular product or service expressly states otherwise.
We do not knowingly collect personal information directly from children under 13 through our general business website without appropriate authorization where required by law.
If we learn that we have collected personal information from a child in circumstances that require parental consent or other authorization and that authorization has not been obtained, we will take appropriate steps to address the situation.
Certain products or services may have additional age restrictions or privacy requirements.
Parents or guardians who believe that a child has provided personal information to us may contact us at privacy@aspenridgelabs.com.
16. Third-Party Websites and Services
Our websites and services may contain links to third-party websites, applications, or services.
We do not control the privacy practices of third parties.
When you interact with a third-party service, its own privacy policy and terms may apply.
We encourage you to review the privacy policies of third-party services before providing personal information.
17. Third-Party Applications and Integrations
Our products and services may integrate with third-party applications, platforms, and services.
These integrations may include authentication providers, payment processors, hosting platforms, analytics tools, communication services, and other technologies.
Information shared through an integration may be governed by the privacy policies and terms of the relevant third party.
Where an integration is enabled by a customer, the customer may be responsible for reviewing and managing the permissions granted to that integration.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, products, services, technologies, legal requirements, or privacy practices.
When we make changes, we will update the "Last Updated" date at the top of this Policy.
Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.
We encourage you to review this Policy periodically.
19. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or your personal information, you may contact us using the following information:
Aspen Ridge Labs LLC
Privacy Email: privacy@aspenridgelabs.com
For privacy requests, please include sufficient information for us to understand your request and verify your identity where necessary.