At StillGood AP, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our desktop application and website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application or website.
1. Information We Collect
Account Information
- Email Address: Required for account creation, license delivery, and service communications
- Contact Information: Either phone number OR email address for alert notifications (your choice)
- Payment Information: Processed securely through Stripe (we do not store credit card numbers)
Application Data
- License Key: Unique identifier for your subscription
- Alert Event Data: Equipment monitoring events (timestamps, alert types, equipment status)
- Usage Metrics: Alert counts and timing for rate limiting purposes
Equipment Monitoring Data
StillGood AP monitors your NINA and PHD2 log files locally on your computer to detect equipment failures. This includes:
- Camera connection status and errors
- Guiding performance metrics (RMS, calibration, settling)
- Mount tracking and meridian flip events
- Autofocus and plate solving results
- Sequence execution and image save status
Note: Your actual astrophotography images are never uploaded or accessed by StillGood AP. We only monitor log file text data to detect equipment issues.
2. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: Send SMS or email alerts when equipment failures are detected
- Account Management: Process subscriptions, handle license activation, and manage your account
- Payment Processing: Process monthly subscription payments through Stripe
- Fraud Prevention: Prevent license sharing and unauthorized use
- Rate Limiting: Enforce alert limits (40 SMS or 80 email per 12 hours) to prevent abuse
- Customer Support: Respond to your inquiries and provide technical assistance
- Service Improvements: Analyze usage patterns to improve alert accuracy and add new features
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
3. Third-Party Services
We use trusted third-party services to operate StillGood AP. These services have access to your information only to perform specific tasks on our behalf and are obligated to protect your information:
Stripe (Payment Processing)
Handles all payment processing and subscription billing. Stripe may use cookies for fraud prevention.
View Stripe Privacy Policy →
Twilio (SMS Delivery)
Processes and delivers SMS alerts to your phone number. Only used if you choose SMS notifications.
View Twilio Privacy Policy →
Important: We do not sell, rent, or share your personal information with third parties for their marketing purposes.
4. SMS/Text Messaging Consent
By providing your phone number and selecting SMS alerts, you expressly consent to receive automated text messages from StillGood AP regarding equipment monitoring alerts.
What You're Agreeing To
- You will receive SMS alerts when critical equipment failures are detected during imaging sessions
- Message frequency varies based on equipment performance (up to 40 SMS per 12 hours under our rate limits)
- Message and data rates may apply from your mobile carrier
- SMS delivery is only available to US phone numbers
- Carriers are not liable for delayed or undelivered messages
Opt-Out Instructions
You can stop receiving SMS alerts at any time by:
- Replying STOP to any alert message (you will receive a confirmation message)
- Changing your notification preference to email in the StillGood AP application settings
- Contacting support at support@stillgoodap.com
Privacy Protection: We will never share your phone number with third parties for marketing purposes. Your number is used exclusively for delivering equipment alerts through our service provider, Twilio.
5. Data Retention
Active Subscriptions
While your subscription is active, we retain:
- Account Information: Retained for the duration of your subscription
- Alert History: Stored for 90 days to help you track equipment issues
- Usage Metrics: Retained for rate limiting purposes (rolling 12-hour window)
After Cancellation
When you cancel your subscription:
- Your license key is immediately deactivated
- Alert history is retained for 30 days (for potential reactivation), then deleted
- Account information is retained for 1 year for billing and legal purposes
- You can request immediate deletion of your data (see "Your Privacy Rights" below)
Legal Requirements
We may retain certain information longer if required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes.
6. Data Security
We implement industry-standard security measures to protect your information:
Encryption in Transit
All data transmitted between your application and our servers uses TLS/SSL encryption
Encryption at Rest
Your data is encrypted in our database
Access Controls
Strict access controls and authentication using JWT tokens
Rate Limiting
Abuse prevention through rate limiting and usage monitoring
Note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Your Privacy Rights
All Users
You have the right to:
- Access Your Data: Request a copy of the personal information we hold about you
- Correct Your Data: Update inaccurate or incomplete information through the application settings
- Delete Your Data: Request deletion of your personal information (subject to legal retention requirements)
- Opt-Out of Communications: Stop receiving SMS alerts or change to email notifications
- Cancel Your Account: Cancel your subscription at any time through the Stripe customer portal
California Residents (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: Request information about the categories and specific pieces of personal information we collect
- Right to Delete: Request deletion of your personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Note: We do not "sell" personal information as defined by CCPA. We only share data with service providers necessary to operate StillGood AP.
European Economic Area (GDPR)
If you are in the EEA, you have additional rights:
- Right of Access: Obtain confirmation that we process your data and access to that data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restriction: Restrict processing of your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
privacy@stillgoodap.com
We will respond to your request within 30 days. We may need to verify your identity before processing your request.
8. Cookies and Tracking
Our Website
Our website does not use cookies or set any tracking technologies. We do not track your browsing behavior.
Third-Party Cookies
When you use Stripe to process payments, Stripe may use cookies on their checkout pages for:
- Fraud detection and prevention
- Payment processing functionality
- Security purposes
These cookies are set by Stripe on Stripe's domain, not by StillGood AP. See Stripe's Privacy Policy for more information.
9. International Users
Data Storage Location
Your information is stored on servers located in the United States. If you are accessing StillGood AP from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and service providers are located.
SMS Service Limitations
SMS alerts are currently only available to US phone numbers. International users may select email notifications instead.
GDPR Compliance
For users in the European Economic Area (EEA), we process your data based on one or more of the following legal bases:
- Contract Performance: Processing is necessary to provide the service you requested
- Consent: You have given clear consent for us to process your data for specific purposes (e.g., SMS alerts)
- Legitimate Interests: Processing is necessary for our legitimate interests (e.g., fraud prevention, service improvement)
10. Children's Privacy
StillGood AP is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information. If you believe we might have information from or about a child under 18, please contact us at privacy@stillgoodap.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification to your registered email address
- Displaying a notice in the StillGood AP application
Your continued use of StillGood AP after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We take your privacy seriously and will respond to all legitimate requests within 30 days. For data subject access requests or deletion requests, we may need to verify your identity before processing your request.
Privacy Policy Summary
We Collect:
- • Email & phone/email for alerts
- • Payment info (via Stripe)
- • License & machine ID
- • Equipment alert data
We Don't:
- • Sell your data
- • Use cookies on our site
- • Access your images
- • Share data for marketing
Your Rights:
- • Access your data
- • Request deletion
- • Opt-out of SMS (reply STOP)
- • Cancel anytime
Security:
- • TLS/SSL encryption
- • Encrypted database
- • Rate limiting
- • Access controls