Privacy Policy

1. Who is responsible

Global Vibing, a Delaware limited liability company registered to do business in Florida, operates Sturdy Bolt and decides how the personal information described here is used. Contact: business@globalvibing.com.

2. What we collect

• Account information: your work email address, the name you give, your role and department, your language, and the version and time of your acceptance of the terms.
• Workspace content: what the people in your workspace put into the service (tasks, calendar entries, workflows, messages, notifications, documents uploaded for reports, questions asked of the Sturdy Bolt Agent and its answers), and what connected accounts provide (card and bank transactions, advertising performance, chat messages, repository activity) when your workspace connects them.
• Records of use: the actions taken in the workspace (an audit log kept for the workspace's admins and for security), the time of each, and the network address a request came from.
• Campaign details: the campaign fields and the referral code of the link that brought you to sturdybolt.com, if any, stored once with your account identifier when you sign in (see Cookies and campaign measurement).
• Billing: our payment processor collects the card and billing details; we keep the customer and subscription identifiers it gives us, the plan, the billing period and the payment status. We never see or store card numbers.
• Correspondence: what you write to us.

3. How we use it

• to provide the service to your workspace, including the Sturdy Bolt Agent;
• to sign you in, keep accounts and workspaces separate, and protect the service against misuse;
• to bill the workspace and keep the records the law requires;
• to answer your questions and send notices about the service, security and billing;
• to meet legal obligations.

We do not sell personal information, we do not use it for advertising, and we do not use your workspace's content to train models that answer other customers.

4. Artificial intelligence processing

Questions asked of the Sturdy Bolt Agent, the reports it writes and the workspace data they draw on are processed by a third-party artificial-intelligence provider under contract with us, which may be located outside the United States, and by models on our own servers. Only the data needed for the answer is sent, and the provider may use it only to produce that answer for us. Every answer carries the notice that it was generated by an artificial intelligence, can contain errors or omissions, and is for reference only.

5. Who processes it for us

We share personal information only with providers that help us run the service, under their terms and only for that purpose:

• our payment processor (plans, invoices and cards);
• our hosting providers (the servers the service runs on);
• our domain name and network protection provider;
• our email delivery provider (sign-in links and codes, service email);
• the artificial-intelligence provider described above, only for the Sturdy Bolt Agent;
• the providers of the accounts your workspace chooses to connect, which receive only what the connection requires.

We may also disclose information when the law requires it, to protect people or the service from harm, or as part of a sale or reorganization of the business, in which case this policy continues to apply to it.

6. Cookies and campaign measurement

Sturdy Bolt sets the cookies that keep you signed in once you sign in. One more first-party cookie, cg_attribution, exists only when a link with campaign fields (utm_source, utm_medium, utm_campaign, utm_content, utm_term) or a referral code (ref) brought you here: it keeps those fields and the landing page's path for 30 days, holds no identifier, and is not replaced by a later campaign link. A referral code from a later link is added to it when it holds none, and its 30 days then start again. When you sign in while it is present, we store its fields once with your account identifier and the date, so we can count which campaigns bring workspaces.

These records serve counts by day, campaign and referral code only, never to target you. We do not sell or share them, and Sturdy Bolt uses no analytics or advertising cookies and no third-party trackers.

Referrals: when a workspace is created after opening another workspace's referral link, we keep which workspace's link brought it and whether its first invoice was paid, so that workspace's credit can be given. The record holds the two workspace identifiers and no address, and it is deleted with either workspace.

7. How long we keep it

• Workspace content and account information are kept while the workspace exists and its plan is active or merely lapsed.
• When a workspace ends (its plan cancelled and run out, or the agreement ended), its content is kept for ninety days so it can be exported or the plan restored, and then deleted.
• Billing and audit records are kept as long as the law and our accounting require, then deleted.
• Sign-in links and codes expire in minutes and their records are not kept past their purpose.
• A campaign record is deleted with its account, and in any case 13 months after it was stored.

8. Your choices and rights

You can see and change your name and language in the service. Your workspace's super admin can ask for an export of its data, correction of information we hold, or deletion of the workspace, by writing to the address above; we answer within thirty days. Where the law of your place gives you further rights (access, correction, deletion, portability, objection, or a complaint to a supervisory authority), we honor them.

9. Security

Information travels encrypted; each workspace's data is isolated from every other workspace's at the database level; access inside the company is limited to the people who run the service; and the workspace's own admins can read its audit log. No system is perfectly secure, and we tell affected workspaces of a breach as the law requires.

10. Where information is processed

The service is run from the United States. Our providers may process information in the United States and in other countries where they operate, under the safeguards their terms provide.

11. Children

Sturdy Bolt is a business service for adults. It is not directed to anyone under eighteen, and we do not knowingly collect information from children.

12. Changes to this policy

We may update this policy. A new version carries a new date and is accepted together with the terms at the next sign-in; for a change that reduces your rights we also email the super admin beforehand.