Privacy Policy

1. Introduction

Circo Industries LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information of our users, customers, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (dirgenapp.com), interact with us, or use the DirGen™ application ("Application"). Please read this Privacy Policy carefully. By using our website or the Application, you consent to the practices described in this policy.

2. Scope of This Policy

This Privacy Policy covers two distinct contexts:

• The DirGen Application (Sections 3): A Salesforce-native managed package that runs entirely within your Salesforce Org. The Application does not collect, transmit, or store your data outside of the Salesforce platform.
• Our Website and Business Operations (Sections 4 through 10): The dirgenapp.com website and our business communications, where we may collect limited personal information as described below.

Your use of the Salesforce platform itself is governed by Salesforce's own privacy policy and your agreement with Salesforce, Inc. This Privacy Policy does not cover Salesforce's data practices.

3. The DirGen Application & Your Data

3.1 No Data Collection by DirGen

The DirGen Application is a 100% Salesforce-native managed package. It operates entirely within the Salesforce platform and does not collect, access, transmit, or store any of your data outside of your Salesforce Org. Specifically:

• The Application makes no external API callouts.
• The Application does not send data to any servers, endpoints, or services outside of Salesforce.
• The Application does not collect usage analytics, telemetry, or tracking information.
• The Application does not use cookies or any browser-based tracking within Salesforce.
• All data processing, including photo retrieval, report querying, and PDF generation, occurs natively within your Salesforce Org.

3.2 Data Processed by the Application

When you use DirGen, the Application reads data from your Salesforce reports and records (such as names, titles, contact details, and photographs) solely to generate PDF directories. This data remains within your Salesforce Org at all times. The Company does not have access to your Salesforce data unless you explicitly grant access for support purposes (for example, by providing login credentials for troubleshooting).

3.3 Your Responsibility

You are solely responsible for the personal data contained in your Salesforce Org and in any directories generated by the Application. This includes ensuring that you have obtained all necessary consents for the collection and use of photographs and personal information, and that your use of the Application complies with all applicable privacy laws and regulations.

3.4 AppExchange Platform Data

The Company may receive aggregated, anonymized data through the Salesforce AppExchange platform (such as installation counts and license status) in accordance with Salesforce's standard partner reporting. This data does not include any of your Salesforce Org data or personally identifiable information about your users.

4. Information We Collect via Our Website

4.1 Information You Provide

We collect information that you voluntarily provide to us when you interact with our website or business, including:

• Contact Information: Name, email address, company name, and job title when you sign up for our email list, submit a contact form, or request support.
• Support Correspondence: The content of emails and support requests you send to us.
• Business Information: Company name, Salesforce Org details, and professional information relevant to your subscription or support request.

4.2 Information Collected Automatically

When you visit dirgenapp.com, we may automatically collect certain technical information, including:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website URL
• General geographic location (country/region level, not precise location)

This information is collected through standard web server logs and analytics tools as described in Section 6 below.

5. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and maintaining our services: Processing your subscription, delivering support, and communicating about your account.
• Improving our website: Analyzing website traffic and usage patterns to improve site performance and content.
• Communications: Sending product updates, release notes, and support-related information to active subscribers. If you opt in to our email list, sending occasional product news and announcements.
• Legal compliance: Fulfilling legal obligations, resolving disputes, and enforcing our agreements.

We do not use your information for automated decision-making or profiling.

6. Cookies & Tracking Technologies

6.1 Website Cookies

Our website (dirgenapp.com) is hosted on Cloudflare Pages. We may use a minimal set of cookies and similar technologies to:

• Essential cookies: Cookies necessary for basic website functionality, such as security and performance features provided by Cloudflare.
• Analytics cookies: If we use analytics tools (such as Cloudflare Web Analytics or similar privacy-focused analytics), these may collect anonymized, aggregate data about page views and visitor counts. We do not use Google Analytics or other tools that track individual users across websites.

6.2 Email Tracking

If we use an email service provider for marketing communications, it may use standard email tracking pixels to measure open rates and click-through rates. You can opt out of marketing emails at any time by clicking the unsubscribe link in any email.

6.3 No Behavioral Advertising

We do not use cookies or tracking technologies for behavioral advertising, retargeting, or cross-site tracking. We do not sell or share your data with advertising networks.

7. Third-Party Service Providers

We use a limited number of third-party service providers to operate our website and business. These providers may process personal information on our behalf in accordance with their own privacy policies:

• Cloudflare: Website hosting, CDN, and security. Cloudflare Privacy Policy
• Salesforce AppExchange: Application distribution, licensing, and payment processing. Salesforce Privacy Statement

We require our service providers to handle your data in a manner consistent with this Privacy Policy. We do not sell, rent, or trade your personal information to any third party.

8. Data Sharing & Disclosure

We do not sell your personal information. We may disclose your information only in the following limited circumstances:

• Service Providers: With the third-party providers listed in Section 7, solely to the extent necessary for them to provide services on our behalf.
• Legal Requirements: When required by law, subpoena, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, in which case your information may be transferred to the acquiring entity. We will provide notice of any such transfer.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect the personal information we collect. Our website is served over HTTPS with TLS encryption. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your personal information has been compromised, please contact us immediately at support@dirgenapp.com.

With respect to the DirGen Application, all security controls are enforced within the Salesforce platform. The Application inherits the security infrastructure of your Salesforce Org, including encryption, authentication, and access controls. For details on Salesforce's security practices, please refer to trust.salesforce.com.

10. Data Retention

We retain personal information collected through our website and business operations only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. Specifically:

• Email list subscribers: Until you unsubscribe or request deletion.
• Support correspondence: For the duration of your subscription plus a reasonable period thereafter for reference purposes.
• Business records: As required for accounting, tax, and legal compliance purposes.
• Website analytics: Aggregated analytics data may be retained indefinitely as it does not contain personally identifiable information.

The DirGen Application does not retain any data outside of your Salesforce Org. Any data stored by the Application (such as saved directory configurations) remains in your Org and is subject to your own data retention policies.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to legal obligations that may require us to retain certain records.
• Opt-Out: Unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly.
• Portability: Request your personal information in a commonly used, machine-readable format where technically feasible.

To exercise any of these rights, please contact us at legal@dirgenapp.com. We will respond to your request within thirty (30) days.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). These include:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information was collected, and the business purpose for collecting it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• No Sale of Personal Information: We do not sell personal information as defined under the CCPA. We have not sold personal information in the preceding twelve (12) months.

To submit a CCPA request, please email legal@dirgenapp.com with the subject line "CCPA Request."

13. International Users

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and business operations are located. By using our website, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation. These may include the right to lodge a complaint with your local data protection authority. For inquiries regarding international data transfers, please contact us at legal@dirgenapp.com.

With respect to the DirGen Application: because the Application runs entirely within your Salesforce Org and does not transmit data externally, the Application itself does not cause any international data transfers. Your Salesforce data residency is governed by your agreement with Salesforce, Inc.

14. Children's Privacy

Our website and the Application are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at legal@dirgenapp.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Effective Date" at the top of this page and notify active subscribers via email. We encourage you to review this Privacy Policy periodically. Your continued use of our website or the Application after any changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us: