Privacy Policy

Privacy Policy – U.S. Version

Last updated: April 18, 2025

1. Introduction

Ligiga LLC ("Gargantua," "we," "us," or "our") respects your privacy and is committed to protecting personal information you provide to us. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your information when you visit any website, mobile app, API endpoint, or other online service that links to it (collectively, the "Services"). By using the Services, you consent to the data practices described in this Policy.

2. Scope

This Policy applies to information collected (i) online through our Services and (ii) offline in the context of business development, events, or customer support. It does not apply to third‑party sites or services that we do not control—even if they are linked or integrated into our Services.

3. Information We Collect

CategoryExamplesCollected From
IdentifiersName, postal address, phone, email, IP addressDirectly from you; automatically via devices
Professional / Business InfoCompany name, role, industry, employee count, project detailsForms, contracts, discovery calls
Payment‑Related DataBilling contact, partial card data, tax ID (if applicable)You; payment processors
Internet / Device InfoBrowser type, OS, referring URLs, clickstream, session time, cookies, pixels, SDK eventsAutomatically
GeolocationApproximate city/region (derived from IP or device settings)Automatically
User‑Generated ContentFiles, code, text, images, feedback, support ticketsYou
Inference DataSegments or profiles created from the data above (e.g., "prospective enterprise buyer")Ourselves; analytics providers

We do not knowingly collect Sensitive Personal Information as defined by the California Privacy Rights Act ("CPRA") unless you voluntarily provide it (e.g., on a résumé) and only for the purpose for which you provided it.

4. How We Use Information

We process personal information to:

  • Provide & Improve Services – create accounts, deliver projects, debug, and enhance functionality.
  • Communicate – respond to inquiries, send transactional emails, schedule demos or calls.
  • Marketing & Advertising – send newsletters, create look‑alike audiences, measure campaign performance (see § 7).
  • Security & Fraud Prevention – monitor logs, authenticate users, investigate misuse.
  • Compliance – meet legal, tax, and contractual obligations, including U.S. export‑control and sanctions laws.
  • Analytics – understand usage trends (aggregated or de‑identified).
  • Business Transfers – support a merger, acquisition, or asset sale.

5. Legal Bases for Processing (when required)

Where U.S. or state law requires a legal basis (e.g., CPRA, GDPR for EU visitors), we rely on: (i) contractual necessity, (ii) legitimate interests (such as security, R&D, or direct B2B marketing), (iii) consent (for non‑essential cookies), and (iv) legal obligation.

6. How We Share Information

Recipient CategoryPurposeSafeguards
Service ProvidersHosting (AWS), analytics (Google Analytics), email (SendGrid), payments (Stripe)Confidentiality clauses; processing instructions
Advertising PartnersAd networks (Meta Ads, Google Ads) for retargeting and attributionLimited to hashed or pseudonymous IDs
Integration PlatformsAPI calls you configure (e.g., Facebook Conversions API, blockchain nodes)As directed by you
Professional AdvisorsAuditors, lawyers, accountantsDuty of confidentiality
AuthoritiesLaw enforcement or regulators when legally compelledVerified requests only
Business SuccessorIn case of merger or acquisitionPrior notice where feasible

We do not sell personal information in the sense of exchanging it for money, but CPRA may classify some sharing with ad partners as a "sale/share." See § 11 for opt‑out rights.

7. Cookies, Pixels & Similar Tech

TechnologyPurpose
Strictly Necessary CookiesSite security, session management
Analytics CookiesTraffic metrics, feature usage
Advertising Cookies / PixelsMeasure conversions, build remarketing audiences (e.g., Meta Pixel, Google Tag)
Server‑Side EventsFacebook Conversions API for more reliable ad attribution
SDKsPush notifications, crash reporting in mobile apps

You can control cookies via browser settings or the cookie banner. Disabling some cookies may impact functionality.

8. Facebook / Meta Integrations

Our use of the Meta Pixel and Conversions API complies with the Meta Business Tools Terms. Data may include hashed identifiers (e‑mail/phone), event timestamps, and custom parameters (e.g., purchase value). Meta processes this data to (i) match events to Meta accounts, (ii) measure ad performance, and (iii) optimize targeting. You can review and modify your ad preferences on Meta platforms.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods:

  • Marketing leads – 24 months from last engagement
  • Contractual records – 7 years (tax & audit)
  • Project artifacts – per Master Services Agreement or Customer Data Deletion Request (§ 12)

10. Security

We employ industry‑standard safeguards:

  • Encryption in transit (TLS 1.2+) and at rest (AES‑256 for critical data)
  • Role‑based access control (RBAC) and MFA for admin tools
  • Regular vulnerability scans and third‑party penetration tests
  • Incident‑response plan aligned with NIST SP 800‑61

No method of transmission or storage is 100% secure; therefore, we cannot guarantee absolute security.

11. Your Choices & State‑Specific Rights

RightCalifornia (CPRA)Other U.S. States*How to Exercise
Access / KnowVariesEmail gargantua@gargantuatechnologies.com
DeleteVariesSame as above
CorrectVariesSame as above
Opt‑Out of Sale/Share"Do Not Sell/Share" link or email
Limit Use of Sensitive PINot applicable (we do not process Sensitive PI)

*Virginia, Colorado, Connecticut, Utah, Texas laws broadly mirror these rights.

We will verify your request (e.g., via email confirmation). Authorized agents may act on your behalf with written permission.

12. Data Deletion Requests (Facebook Requirement)

If you connected your account to Facebook or submitted data through a Facebook ad, you may request deletion by:

  • Emailing privacy@gargantua.tech with subject "Facebook Data Deletion Request", including your full name and the email/phone used in the form.

We will (i) locate associated records, (ii) anonymize or erase them within 30 days, and (iii) confirm completion.

13. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children. If we learn that we have inadvertently obtained data from a child under 13, we will delete it as required by the Children's Online Privacy Protection Act (COPPA).

14. International Data Transfers

We are headquartered in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. or other countries with different data‑protection laws than yours. Where required, we rely on standard contractual clauses (SCCs) or other approved mechanisms to legitimize cross‑border transfers.

15. "Do Not Track" Signals

Our Services do not currently respond to browser "Do Not Track" signals because there is no consistent industry standard.

16. Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted on our website or sent via email. The "Last updated" date reflects the effective date of the latest version. Continued use of the Services after changes signifies acceptance.

17. Contact Us

Ligiga LLC
3 PARKLANE BLVD SUITE 1005W, DEARBORN, MI 48126, USA
Email: gargantua@gargantuatechnologies.com
Phone: +1 407‑680‑7191

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.