Privacy Policy

Last updated: June 18, 2025

This Privacy Policy describes our policies and procedures regarding the collection, use, and disclosure of your information when you use the Service, and it informs you about your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Definitions

Company refers to Clockwork Laboratories, Inc., 350 Townsend St. Suite 713, San Francisco, CA 94107.

Service refers to the Website (https://bitcraftonline.com) and related services provided by the Company.

Personal Data means information that identifies, relates to, describes, or is reasonably capable of being associated with you.

Sensitive Personal Information (SPI) includes information such as government IDs, geolocation, racial or ethnic origin, biometric or health data, and more, as defined under CPRA and GDPR.

Data Subject Rights refer to privacy rights granted under laws like the CPRA, GDPR, and others.

Cookies and Tracking Technologies include browser cookies, Flash cookies, web beacons, and similar technologies.

Information We Collect

Personal Data You Provide:

  • Name, email, postal address, phone number, and account details.
  • Content you share via social logins (Google, Facebook, Twitter).

Automatically Collected Data:

  • IP address, browser type, device ID, operating system, usage statistics.
  • Location data inferred from IP.
  • Cookie and tracking information.

Cookies and Tracking Technologies

We use cookies for:

  • Session management
  • Functionality (e.g., language, preferences)
  • Analytics (e.g., Google Analytics)
  • Advertising and behavioral targeting

We honor Global Privacy Control (GPC) browser signals. Cookie choices may be managed via browser settings. You may also opt-out of targeted advertising through industry-standard opt-out platforms such as:

Your mobile device may allow you to limit ad tracking via:

  • "Limit Ad Tracking" on iOS
  • "Opt out of Ads Personalization" on Android

Use of Personal Data

We use your data to:

  • Provide and maintain the Service
  • Manage your account
  • Process transactions and enforce contractual obligations
  • Communicate updates and offers (with opt-out rights)
  • Analyze usage trends and improve our Service
  • Personalize content and advertising
  • Prevent fraud and ensure system integrity
  • Comply with legal obligations
  • Perform internal business operations and research

Sensitive Personal Information

We may collect SPI including government IDs, financial account credentials, precise geolocation, racial or ethnic origin, and health data. We do not use SPI to infer characteristics or for secondary purposes beyond those allowed by law, including:

  • Providing requested services
  • Preventing, detecting, and investigating security incidents or fraud
  • Short-term, transient use
  • Performing services on our behalf
  • Maintaining and improving the quality or safety of our services

You may limit our use or disclosure of SPI by contacting us at contact@clockworklabs.io.

Data Retention

We retain personal data only as long as necessary for the stated purposes. Retention periods vary depending on:

  • Legal and regulatory requirements
  • Nature of the data and the relationship
  • Ongoing business needs (e.g., dispute resolution, compliance)

For example:

  • Account and transaction data: retained for up to 7 years
  • Analytics and usage data: up to 2 years
  • Marketing consents: until revoked or 5 years from last interaction

Automated Decision-Making and Profiling

We may use profiling and limited automated decision-making to personalize your experience (e.g., content recommendations or targeting). We do not use automated processes to make decisions that produce legal or similarly significant effects without human intervention.

You may object to profiling and request human review of significant decisions by contacting contact@clockworklabs.io.

Sharing and Disclosure of Personal Data

We share data with:

  • Service Providers for analytics, hosting, payment processing, support, and marketing
  • Affiliates under common control
  • Business Partners for co-branded promotions
  • In business transfers, such as mergers or acquisitions
  • Legal Authorities when required to comply with legal obligations
  • With your consent or for purposes described at the time of collection

International Data Transfers

Data may be transferred and processed outside your jurisdiction, including to the U.S. Where required by law (e.g., GDPR), we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK Addendum to SCCs or IDTA
  • Adequacy decisions

You may request a copy of the relevant safeguards by contacting us at contact@clockworklabs.io.

Your Privacy Rights

You may have the following rights, depending on your jurisdiction:

  • Access and Portability: Request access to or a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request erasure of personal data, subject to exceptions.
  • Restriction and Objection: Restrict processing or object to certain uses (e.g., profiling).
  • Data Portability: Request export of your data in machine-readable format.
  • Withdraw Consent: Revoke consent at any time where processing is based on consent.

To exercise these rights, email contact@clockworklabs.io. We may verify your identity before fulfilling requests. Responses will be provided within 45 days.

U.S. State Privacy Rights (CPRA, VCDPA, CPA, CTDPA, UCPA)

You have the right to:

  • Know what categories and specific pieces of personal information we collect
  • Know sources of personal information and purposes of collection
  • Know categories of third parties with whom we share personal information
  • Opt out of the sale or sharing of personal information
  • Correct inaccurate information
  • Delete personal information
  • Limit use and disclosure of sensitive personal information
  • Not be discriminated against for exercising these rights

You may exercise your rights by emailing us at contact@clockworklabs.io. We will verify and respond to requests within 45 days.

GDPR Rights (EU/EEA/UK)

Under the GDPR and UK GDPR, you have the following rights:

  • Right of access to personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing for legitimate interests or direct marketing
  • Right not to be subject to automated decision-making without human review

Legal bases for processing include:

  • Consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests
  • Vital interests

You may lodge complaints with your local data protection authority.

Children's Privacy

We do not knowingly collect data from users under 13. We also do not sell or share data from minors under 16 without affirmative opt-in authorization from the minor (ages 13–16) or parental consent (under 13).

Parents may request deletion of their child’s information by contacting contact@clockworklabs.io.

Third-Party Links and Social Media

Our Service may link to third-party websites. We are not responsible for their content or privacy practices. Please review their policies independently.

Updates to This Policy

We may update this Privacy Policy periodically. If material changes occur, we will notify you via email or prominent notice. Continued use of the Service indicates acceptance of the revised policy.

Contact Us

If you have any questions or would like to exercise your rights, contact us at:

Clockwork Laboratories, Inc.
350 Townsend, Suite 713, San Francisco, CA 94107