1. Who we are
NullSect Labs operates nullsectlabs.com and the I AM 215 JAWN publishing project. In this policy, “we,” “us,” and “our” refer to those services. Questions may be sent to iam215jawn@nullsectlabs.com.
2. Scope
This policy applies when you visit our websites, subscribe to updates, contact us, use an owner-facing tool, or authorize a supported social account. It does not control independent third-party services or websites that we link to.
3. Information we collect
- Information you provide: contact details, newsletter email addresses, messages, support requests, and information submitted through forms. Newsletter leads may be encrypted at rest in our hosting storage until they are synchronized with an email-delivery provider.
- Connected-account information: identifiers, profile details, permissions, and access tokens supplied through an official OAuth flow for an account you authorize.
- Technical information: IP address, browser and device information, request logs, security events, and basic usage data collected by our hosting and security providers.
- Transaction information: if paid products are introduced, the payment processor handles payment-card data; we may receive transaction status and limited billing details but do not store full card numbers.
We do not ask for your Facebook, Instagram, TikTok, Google, YouTube, X, Pinterest, or other platform password.
4. How we use information
We use information to provide and secure the services; authenticate authorized owners; create, schedule, or publish owner-approved content; respond to requests; maintain subscription preferences; diagnose errors; prevent abuse; comply with law; and improve our websites and workflows. We do not sell personal information.
5. Social-platform and Google API data
When you connect Meta products, TikTok, Google or YouTube, X, Pinterest, or another supported service, we access only the permissions shown during that provider’s consent process. We use that data only to deliver the requested integration, such as identifying the authorized account, uploading content, publishing approved content, or reading limited performance information when authorized.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Provider access can be revoked from that provider’s account settings.
6. Sharing and providers
We may disclose information to hosting, database, email, analytics, security, payment, and social-platform providers only as needed to operate the services; to professional advisers under appropriate duties; in a business transfer; or when required to protect rights, safety, or comply with law. We do not permit providers to use information for unrelated marketing.
7. Cookies, local storage, and analytics
Our services may use essential cookies or local storage for sessions, security, saved settings, consent records, and features such as MY 215. These technologies keep requested features working and are not used by us to secretly sell a visitor's personal information.
We use Vercel Web Analytics for aggregated page-view, referrer, device, and visitor statistics. Vercel Web Analytics is designed to operate without third-party advertising cookies and does not provide us with information that directly identifies individual visitors. Hosting and security providers may still process technical information such as IP addresses and request data to deliver and protect the site.
8. Advertising and sponsorships
We may display clearly labeled advertising, sponsorships, or affiliate links. If Google advertising or another optional advertising provider is activated, that provider may use cookies, web beacons, IP addresses, device information, or similar identifiers to deliver, limit, measure, and report advertising. Advertising partners may process information under their own privacy policies.
Optional advertising code remains disabled until the required consent and publisher configuration is ready. Where consent is legally required, visitors will receive an appropriate choice before optional advertising storage or personalized advertising is used. Visitors may also manage Google ad personalization through Google's My Ad Center. We will not ask visitors to click advertisements or manipulate advertising activity.
9. Retention and deletion
We retain information only as long as reasonably necessary for the purposes described above, legal obligations, dispute resolution, and security. OAuth tokens are retained while an integration remains authorized and are removed or invalidated when access is revoked or no longer needed.
To request deletion, visit our data-deletion page or email us. We may verify your identity and retain limited records when legally required.
10. Your choices and rights
You may unsubscribe using an email’s unsubscribe control, revoke connected-app access through the relevant platform, or request access, correction, or deletion by contacting us. Depending on where you live, additional privacy rights may apply. We will not discriminate against you for exercising an applicable right.
11. Security, children, and processing
We use reasonable administrative and technical safeguards, but no online system is completely secure. The services are not directed to children under 13, and we do not knowingly collect their personal information. Information may be processed in the United States and other locations where our providers operate.
12. Changes and contact
We may update this policy as our services or legal obligations change. Material updates will be posted here with a revised date. Contact iam215jawn@nullsectlabs.com or use our contact page.