Privacy Policy

Effective Date: June 22, 2026

This Privacy Policy explains how Rising Orchards LLC (“Company,” “we,” “our,” “us”) collects, uses, and protects your information when you use IgorBox.com and our related products and services (collectively, “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

---

1. Information We Collect

We may collect:

• Personal Information: Name, email address, billing details, shipping address, phone number, account credentials.
• Technical Information: IP address, browser type, operating system, device identifiers.
• Usage Data: Interactions with our website, API requests, device telemetry, and session activity captured through session recording/replay and observability technologies (e.g., pages and screens viewed, clicks, taps, scrolling, navigation paths, errors, and performance metrics).
• Support Information: Messages, tickets, or communications you send to us.

---

1A. Notice at Collection (California)

The categories of personal information we collect, the business or commercial purposes for which we collect them, and whether we “sell” or “share” them (as defined by California law) are summarized below:

• Identifiers (e.g., name, email, IP address): account creation, service delivery, security/fraud prevention; not sold/shared for cross-context behavioral advertising.
• Commercial information (e.g., orders, transactions): order fulfillment, support, accounting; not sold/shared.
• Internet/Network activity (e.g., device telemetry, analytics, session recordings): security, performance, debugging, product improvement; not sold/shared for cross-context behavioral advertising.
• Geolocation (coarse, from IP): security, fraud prevention; not sold/shared.
• Inferences (non-PII, aggregated for analytics): product improvement; not sold/shared.

We do not knowingly “sell” or “share” personal information of consumers under 16.

---

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Services.
• Process transactions and deliver products.
• Respond to customer service requests.
• Communicate updates, security alerts, and promotional offers.
• Ensure security and prevent fraud.

Legal bases for processing (EEA/UK): contract performance; legitimate interests (security, product improvement, communications); consent (where required, e.g., certain cookies/marketing); legal obligations.

---

2A. Session Recording, Logging, and Observability

We and our service providers use session recording (also called session replay), logging, and observability technologies to capture how users interact with our Services. These tools may record information such as pages and screens viewed, clicks, taps, scrolling, navigation paths, page content, errors, performance metrics, and related device and network information. We use this information to:

• Diagnose, debug, and resolve technical issues and errors.
• Monitor the performance, reliability, and security of our Services (observability).
• Understand how features are used so we can improve them.

This information is processed by us and by third-party observability and session-recording providers acting as our service providers under contracts that require appropriate confidentiality and data-protection obligations. We do not use session recordings to build advertising profiles or for cross-context behavioral advertising.

Where required by law, we obtain consent before deploying these technologies, and you can manage your choices as described in our Cookie Policy.

---

2B. SMS / Text Messaging

IgorBox, operated by Rising Orchards LLC, offers SMS notifications about your account, device telemetry, orders, and setup status. You opt in by enabling the “SMS Notifications” toggle in your IgorBox account settings; messages are sent only after you enable it. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

No mobile information — including your phone number and your SMS opt-in and consent — will be sold or shared with any third parties or affiliates for marketing or promotional purposes. We disclose your phone number only to the messaging service provider that delivers these texts on our behalf, solely to send the messages you requested. Text-messaging originator opt-in data and consent are not shared with any third parties.

---

3. AI and Anonymized Data Usage

We may use anonymized or aggregated data from your usage of the Services to:

• Improve performance and reliability.
• Develop and train AI models.
• Enhance product features and security.

No personally identifiable information (PII) will be used to train AI models without your explicit consent. We maintain and use deidentified and aggregated data and will not attempt to reidentify such data, and we require service providers to do the same.

---

3A. Third-Party AI & Integration Access

You may choose to connect third-party AI assistants or clients (for example, Claude or ChatGPT) to your Studio through the IgorBox MCP server or API. When you do, the data those tools return — which may include identifiable account information and Studio content (such as shows, controllers, media, and logic rules) — is transmitted to and processed by that client and its AI provider, at your direction and subject to that provider's own terms and privacy policy.

This access is authorized through OAuth, limited to the scopes you grant, and can be revoked by you at any time. We do not control how third-party AI providers handle your data once it has been disclosed to them, and you should review the connected provider's policies before authorizing access.

---

4. Data Sharing

We do not sell your personal information.
We may share your information:

• With service providers who assist in operating our Services.
• When required by law or legal process.
• To protect our rights, users, and security.

We may disclose deidentified or aggregated data that does not identify you. We use service providers and subprocessors under contracts requiring appropriate confidentiality and data protection obligations.

---

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary by category (e.g., account records for as long as you maintain an account; transaction records for up to 7 years for tax/accounting; telemetry, log, and session-recording data for up to 24 months), after which we delete or deidentify data. If you close your account or request deletion, we delete active copies within 30 days and purge backups on a rolling schedule within 90 days thereafter. We may retain minimal logs and records as required for security, fraud prevention, and legal obligations.

---

6. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission or storage is 100% secure.

---

7. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have rights to:

• Access and obtain a copy of your data.
• Request correction or deletion of your data.
• Object to or restrict processing of your data.
• Withdraw consent for processing (where applicable).

To exercise these rights, contact us at help@igorbox.com.

You may also submit a request via web form if provided on our site. We will verify your request and respond within the timeframes required by applicable law (e.g., 45 days for California). If we deny your request, you may appeal by replying to our response and stating “Appeal.” Authorized agents may submit requests with valid authorization and identity verification. Where permitted by law, we may refuse or charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive. We honor Global Privacy Control (GPC) signals as a valid opt‑out of sale/sharing and targeted advertising where applicable.

---

8. International Transfers

As of the Effective Date, we host and store personal information in the United States and do not maintain production data storage in other countries. If you access our Services from outside the United States, your information may be transferred and processed in the United States, where data protection laws may differ from your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK (and the UK Addendum, as applicable).

---

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here, and the “Effective Date” will be updated.

---

10. Contact Us

If you have questions or concerns, contact:
Email: help@igorbox.com
Address: Rising Orchards LLC, 128 Orange Ave, Daytona Beach, FL 32114