This policy explains how Lithical LLC (“Lithical,” “we,” “us”) handles information on lithicalstudio.com and in the Lithical client portal at portal.lithicalstudio.com (together, the “Services”). If you have questions, email us at hello@lithicalstudio.com.
Information we collect
When you visit this website
This website does not use analytics, advertising trackers, or cookies. Our hosting provider keeps standard server logs (such as IP address, browser type, and the pages requested) to deliver and secure the site.
When you contact us
If you email us, we receive your name, email address, and whatever you choose to include in your message.
When you use the client portal
The portal is for Lithical’s clients and staff. To provide it, we collect:
- Account information: your name, email address, and, if you set one, a password (stored only as a secure hash).
- Google sign-in information: if you choose to sign in with Google, Google shares your name, email address, and profile picture with us. See Google user data below.
- Client business information: company and contact details, contracts, reports, invoices, files, and messages exchanged with our team.
- Marketing performance data: when a client connects an advertising or email marketing account (such as Meta or Mailchimp), we read campaign and performance figures from it so we can report on results.
- Payment information: invoices are paid through Stripe. Card and bank details go directly to Stripe and never reach our servers; we receive only whether an invoice has been paid.
- Technical information: sign-in records, error reports, and similar data needed to keep the portal secure and working.
How we use information
- To provide, maintain, and secure the Services.
- To sign you in and keep your account safe.
- To deliver our marketing services and report on their results.
- To send invoices, receipts, and service-related emails.
- To respond to your questions and requests.
- To meet legal, tax, and accounting obligations.
We do not sell your personal information, and we do not use it for advertising.
Google user data
When you sign in with Google, we request only your basic profile: your name, email address, and profile picture. We use this information solely to create and identify your portal account and to sign you in. We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google data.
We do not sell Google user data, share it with third parties except the service providers that host the portal on our behalf, use it for advertising, or use it to train artificial intelligence or machine learning models. Lithical’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Lithical’s access at any time from your Google Account settings, and you can ask us to delete the information we received from Google by emailing hello@lithicalstudio.com.
Cookies
The portal uses cookies that are strictly necessary to keep you signed in. We do not use advertising or tracking cookies.
How we share information
We share information only with service providers that help us run the Services, under agreements that limit their use of it to providing those services to us:
- Supabase (database, sign-in, and file storage)
- Vercel, Render, and Cloudflare (hosting and networking)
- Stripe (invoicing and payments)
- Resend (email delivery)
- Sentry (error monitoring)
- Google (optional sign-in)
Marketing performance data is read from platforms such as Meta and Mailchimp only at a client’s direction. We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger or sale of our business.
Data retention
We keep information for as long as your account is active or as needed to provide our services. Invoices and payment records are kept as long as tax and accounting rules require. When information is no longer needed, we delete it.
Your choices and rights
You can ask to access, correct, export, or delete your personal information by emailing hello@lithicalstudio.com. We will respond within 30 days. Depending on where you live, you may have additional rights under local law, and we will honor them. We will not treat you differently for exercising your privacy rights.
Security
We protect information with encryption in transit, encryption of the keys for connected marketing accounts, access controls, and two-factor authentication for staff. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.
Children
The Services are for businesses and are not directed to children under 16. We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. When we do, we will change the date at the top of this page, and for significant changes we will notify portal users by email.
Contact
Lithical LLC
hello@lithicalstudio.com