Lit Propane
Order Tanks

Privacy Policy

Last Updated: April 16, 2026

Effective Date: April 16, 2026

Version: 2.1

1. INTRODUCTION

1.1 Our Commitment to Privacy

At Lit LLC ("Lit," "we," "us," or "our"), we are committed to protecting your privacy and providing transparent information about how we collect, use, store, and share your personal information. This Privacy Policy explains our data practices for all Services we provide.

1.2 Binding Agreement

This Privacy Policy is incorporated into and forms part of our Terms of Use (www.litpropane.com/terms-of-use). By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

1.3 Age Requirement

Our Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from individuals under 18 without parental consent.

2. SCOPE AND APPLICATION

2.1 Services Covered

This Privacy Policy applies to:

  • Mobile Applications: iOS and Android apps for customers and drivers
  • Websites: www.litpropane.com (customer portal) and admin.litpropane.com
  • Related Services: APIs, WebSocket connections, email communications, SMS notifications, push notifications, and customer support interactions

2.2 Third-Party Services

This Privacy Policy does not apply to third-party websites, applications, or services linked from our Services. We encourage you to review the privacy policies of any third-party services you access.

3. INFORMATION WE COLLECT

3.1 Definition of Personal Information

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to you, directly or indirectly. This includes information protected under applicable data protection laws, including but not limited to:

  • California Consumer Privacy Act (CCPA)
  • Idaho Code § 28-51-104
  • General Data Protection Regulation (GDPR) (for European users, if applicable)

3.2 Categories of Information We Collect

3.2.1 Identity and Contact Information

We collect:

  • Name (first, last)
  • Email address (used for login and account notices)
  • Phone number (US numbers only, +1 country code; signup verification code sent by SMS)
  • Mailing address (for delivery purposes)
  • Date of birth (for age verification - must be 18+)
  • Username and password (passwords are encrypted using industry-standard hashing)

For Drivers, we additionally collect:

  • Driver's license number and photograph
  • Secondary identification (government-issued ID)
  • Vehicle information (make, model, color, license plate number)
  • Vehicle photograph
  • Bank account information (for payouts via Stripe Connect)

3.2.2 Financial and Payment Information

  • Payment methods: Credit/debit card information (tokenized via Stripe - we do not store complete card numbers)
  • Payment history: Transaction records, order amounts, refunds
  • Billing address
  • Stripe customer ID (encrypted reference)
  • Last 4 digits of card (for display purposes only)
  • Card brand and expiration date

For Drivers:

  • Stripe Connect account information
  • Earnings history and balance
  • Payout preferences and history

3.2.3 Location Information

CRITICAL DISCLOSURE: We collect precise location data as follows:

For All Users:

  • Delivery addresses (manually entered or selected)
  • Zip codes
  • City and state information
  • Approximate location from IP address

For Drivers During Active Deliveries:

  • Real-time GPS coordinates (latitude/longitude)
  • Location data transmitted every 3-5 seconds via WebSocket
  • Route information and navigation paths
  • Distance traveled
  • Speed and heading (from device GPS)

Purpose: Customer delivery tracking, route optimization, ETA calculations, delivery completion verification.

Visibility: Customers can see driver's real-time location on a map during active deliveries.

Duration: Location tracking occurs only during active deliveries (from "Start Navigation" until "Delivery Complete").

Storage: Historical location data retained for 90 days, then deleted.

3.2.4 Device and Technical Information

  • Device identifiers: Device model, operating system, version
  • Mobile device unique identifier (UDID)
  • IP address
  • Browser type and version
  • Mobile carrier information
  • App version
  • Device settings (language, timezone)
  • Network connection type (Wi-Fi, cellular)

3.2.5 Usage and Analytics Data

  • App usage: Features used, screens viewed, time spent
  • Order history: Past orders, preferences, delivery dates
  • Search queries (address searches, product searches)
  • Click data: Buttons clicked, links followed
  • Error logs: Crash reports, error messages
  • WebSocket connection logs: Real-time connection status

We use Google Analytics and other analytics providers to collect this information.

3.2.6 Communications and Chat Data

  • Email communications: All emails sent/received
  • SMS messages: Text notifications sent (content and delivery status)
  • Push notifications: Notification content and delivery status
  • In-app chat messages: All messages between customers and drivers
  • Customer support communications: Phone calls, emails, chat transcripts

Important: Chat messages are stored indefinitely for quality assurance, safety, and dispute resolution.

3.2.7 Photos and Media

  • Profile pictures (optional, for customers and drivers)
  • Delivery confirmation photos (required, taken by drivers)
  • Driver's license photo (required for driver verification)
  • Secondary ID photo (required for driver verification)
  • Vehicle photos (required for driver approval)

All photos stored securely on AWS S3 with signed URLs (access-controlled).

3.2.8 Social Media Information

If you sign in using social media (Google Sign-In, Apple Sign-In):

  • Social media profile information (name, email, profile picture)
  • Social media account identifier (Google ID, Apple ID)
  • Authentication tokens (stored securely, used for login)

We do not post to your social media accounts or access your friends/contacts without explicit permission.

3.2.9 Biometric Information (Mobile App Only)

Face ID / Touch ID / Face Unlock:

If you choose to enable biometric authentication:

  • We do not collect or store any biometric data (fingerprints, face scans)
  • Biometric authentication is handled entirely by your device's operating system (iOS or Android)
  • We receive only a success/failure notification from your device
  • Biometric data never leaves your device

3.2.10 Background Location (Drivers Only)

Important for Drivers: When you have an active delivery, the app collects location data even when the app is in the background to:

  • Maintain continuous tracking for customers
  • Provide accurate ETAs
  • Enable turn-by-turn navigation

You can disable this by:

  1. Ending your delivery session
  2. Disabling background location in device settings (will prevent accepting new deliveries)

3.2.11 Information from Third Parties

We may receive information about you from:

  • Payment processors (Stripe): Payment verification, transaction status
  • SMS providers (AWS End User Messaging SMS): Delivery status, opt-out requests
  • Email providers (Amazon SES): Email delivery status, bounces, opens
  • Push notification providers (Amazon SNS): Notification delivery status
  • Background check providers (for driver verification)
  • Credit check agencies (if you apply for credit terms)

4. HOW WE USE YOUR INFORMATION

4.1 Service Delivery

We use your Personal Information to:

  • Create and manage your account
  • Process propane delivery orders
  • Match customers with available drivers
  • Calculate delivery fees based on distance
  • Process payments and refunds
  • Verify age (18+ requirement)
  • Verify driver qualifications (license, background checks)
  • Facilitate real-time delivery tracking
  • Enable in-app chat between customers and drivers
  • Confirm delivery completion (photos)

4.2 Communications

We use your contact information to send:

Transactional communications (cannot opt-out):

  • SMS verification codes (account signup)
  • Order confirmations and receipts
  • Delivery status updates
  • Payment confirmations
  • Account security alerts

Operational communications (limited opt-out):

  • "Out for delivery" notifications (SMS and push)
  • "Next up" delivery alerts (SMS)
  • Driver arrival notifications
  • Delivery delay notifications

Marketing communications (can opt-out):

  • Promotional offers
  • New service announcements
  • Customer surveys
  • Newsletters

4.3 Safety and Security

We use your information to:

  • Verify driver identity and qualifications
  • Conduct background checks (drivers)
  • Monitor for fraudulent activity
  • Prevent unauthorized access
  • Investigate suspicious behavior
  • Respond to safety incidents
  • Monitor chat messages for prohibited content
  • Ensure compliance with propane safety regulations

4.4 Service Improvement

We use aggregated and anonymized data to:

  • Analyze usage patterns
  • Improve app performance and user experience
  • Develop new features
  • Optimize delivery routes
  • Test new functionality
  • Fix bugs and errors
  • Monitor system performance

4.5 Legal Compliance

We may use your information to:

  • Comply with legal obligations (tax reporting, subpoenas, court orders)
  • Enforce our Terms of Use
  • Protect our legal rights
  • Respond to government requests
  • Investigate violations of our policies
  • Prevent illegal activities

4.6 Analytics and Advertising

Google Analytics:

We use Google Analytics to understand how users interact with our Services. Google Analytics collects information such as:

  • Pages visited
  • Time spent on pages
  • Referring websites
  • Device and browser information
  • General location (city-level, not precise GPS)

Important: We do not use Google Analytics to identify individual users by name or link analytics data to other personally identifiable information.

Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On (https://tools.google.com/dlpage/gaoptout).

5. HOW WE SHARE YOUR INFORMATION

5.1 We Do Not Sell Your Personal Information

Important: We do not sell your Personal Information to third parties. We do not rent or lease your information for commercial purposes.

5.2 Sharing with Service Providers

We share your information with trusted third-party service providers who help us operate our Services:

  • Stripe - Payment processing (Name, email, payment info, billing address, transaction amounts)
  • AWS End User Messaging SMS - SMS notifications (Phone number, message content, delivery status)
  • Amazon SES - Email delivery (Email address, name, message content, delivery status)
  • Amazon SNS (AWS) — Push notifications (Device token, user ID, notification content)
  • AWS (Amazon Web Services) - Data storage, file hosting (All application data, photos, IDs, backups)
  • Mapbox - Navigation, maps, routing (GPS coordinates, routes, addresses)
  • Redis (hosted) - Caching, session management (Session data, WebSocket messages, temporary data)
  • DigitalOcean - Server hosting, databases (All application data, encrypted in transit/at rest)
  • Google Analytics - Usage analytics (Device info, usage patterns, anonymized data)

Contractual Protections: All service providers are bound by contracts requiring them to protect your data and use it only for specified purposes.

5.3 Sharing with Drivers (Independent Contractors)

When you place an order, we share necessary information with the assigned driver:

  • Your name and phone number (for delivery coordination)
  • Delivery address
  • Order details (tank sizes, quantities)
  • Special delivery instructions
  • Your in-app chat messages

Important: Drivers are independent contractors, not Lit employees. They are contractually required to:

  • Use your information only for delivery purposes
  • Not share your information with third parties
  • Maintain confidentiality
  • Comply with Lit's privacy and security policies

5.4 Sharing with Customers (for Drivers)

When you accept a delivery as a driver, we share your information with the customer:

  • Your first name (last name initial)
  • Your real-time location during delivery (GPS coordinates)
  • Your vehicle information (make, model, color, license plate)
  • Your profile picture (if uploaded)
  • Your driver rating
  • Estimated time of arrival

5.5 Sharing for Legal Reasons

We may disclose your Personal Information without your consent if required to:

  • Comply with legal obligations: Court orders, subpoenas, search warrants, regulatory requests
  • Protect rights and safety: Enforce Terms of Use, prevent fraud, protect against harm
  • Government requests: Law enforcement, regulatory agencies, national security (where legally required)
  • Litigation: Respond to legal claims, participate in legal proceedings

We will notify you of legal requests unless prohibited by law.

5.6 Business Transfers

If Lit is involved in a merger, acquisition, sale of assets, or bankruptcy:

  • Your Personal Information may be transferred to the acquiring entity
  • The acquiring entity will be required to honor this Privacy Policy
  • We will notify you via email and/or prominent notice on our Services

5.7 With Your Consent

We may share your information in other circumstances with your explicit consent.

6. COOKIES AND TRACKING TECHNOLOGIES

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website or use our mobile app. We use cookies and similar technologies (pixels, web beacons, local storage) to enhance your experience and understand how you use our Services.

6.2 Types of Cookies We Use

Essential Cookies (Cannot opt-out):

  • Session cookies (maintain login state)
  • Authentication tokens (verify identity)
  • Security cookies (prevent fraud)

Analytics Cookies (Can opt-out):

  • Google Analytics (usage tracking)
  • Performance monitoring
  • Error tracking

Advertising Cookies (Can opt-out):

  • Personalized advertising
  • Retargeting campaigns
  • Ad effectiveness measurement

6.3 Managing Cookies

Browser Controls:

Most browsers allow you to:

  • Block all cookies
  • Block third-party cookies only
  • Delete existing cookies
  • Receive warnings before cookies are stored

Note: Blocking essential cookies may prevent you from using certain features of our Services.

Mobile App:

You can control app tracking in your device settings:

  • iOS: Settings > Privacy > Tracking
  • Android: Settings > Privacy > Ads

6.4 Do Not Track Signals

We do not currently respond to "Do Not Track" (DNT) browser signals. We handle all user information consistent with this Privacy Policy.

7. REAL-TIME LOCATION TRACKING

7.1 Critical Information for Drivers

When you accept a delivery and begin navigation, we track your location in real-time:

  • Frequency: GPS coordinates collected every 3-5 seconds
  • Transmission: Location sent to our servers via WebSocket connection
  • Visibility: Customers see your location on a map in real-time
  • Background tracking: Continues even if app is in background (for continuous tracking)
  • Duration: From "Start Navigation" until "Delivery Complete"

Purpose:

  • Provide real-time tracking to customers
  • Calculate accurate ETAs
  • Optimize multi-delivery routes
  • Verify delivery location
  • Improve service quality

Data Retention: Historical location data stored for 90 days, then automatically deleted.

7.2 Location Permissions Required

Drivers: Must grant "Always Allow" location permission (iOS) or "Allow all the time" (Android) to:

  • Accept deliveries
  • Navigate to delivery locations
  • Provide real-time tracking to customers

Customers: Can grant "While Using the App" permission for:

  • Address autocomplete
  • Calculating delivery fees
  • Viewing driver location during delivery

7.3 How to Disable Location Tracking

Drivers:

  • Finish your current delivery
  • Log out or go offline
  • Disable location permission in device settings (will prevent accepting new deliveries)

Customers:

  • Disable location permission in device settings (will limit functionality: no address autocomplete, cannot view driver location)

7.4 Location Data Usage

We use location data to:

  • Real-time tracking: Display driver location on customer's map
  • ETA calculation: Estimate delivery arrival time
  • Route optimization: Plan efficient multi-delivery routes
  • Delivery verification: Confirm driver arrived at correct address
  • Service analysis: Understand delivery patterns, optimize coverage areas (aggregated data only)

We do not:

  • Track your location when you're not on an active delivery (drivers)
  • Track your location when app is closed (except during active delivery)
  • Share your location with advertisers or data brokers
  • Use your location for purposes unrelated to deliveries

7.5 Location Data Security

Location data is:

  • Encrypted in transit (HTTPS/TLS)
  • Encrypted at rest (database encryption)
  • Access-controlled (only authorized personnel can access)
  • Automatically deleted after 90 days

8. COMMUNICATIONS AND NOTIFICATIONS

8.1 Types of Communications

8.1.1 Email Communications

Transactional Emails (cannot opt-out):

  • Order confirmations and receipts
  • Password reset requests
  • Payment confirmations
  • Account security alerts

Operational Emails (limited opt-out):

  • Delivery status updates
  • Service announcements
  • Policy changes

Marketing Emails (can opt-out):

  • Promotional offers
  • Newsletters
  • Surveys

Opt-Out: Click "Unsubscribe" in any marketing email. Processing may take up to 10 business days.

8.1.2 SMS/Text Messages

SMS Program Terms:

By providing your phone number and opting in to SMS notifications, you consent to receive text messages from Lit via AWS End User Messaging SMS, including:

Message Types:

  • Order confirmations
  • "Out for delivery" notifications
  • "Next up" delivery alerts (when you're next in multi-delivery route)
  • Delivery arrival notifications
  • Important service updates

Message Frequency: Varies; you may receive multiple messages per order for status and delivery updates

Message & Data Rates: Standard SMS rates from your carrier may apply

Opt-Out: Reply STOP to any message to unsubscribe. You will receive one final confirmation message.

Help: Reply HELP for assistance or contact [email protected]

Carrier Support: Works with major US carriers (AT&T, T-Mobile, Verizon, Sprint, US Cellular, and others)

10DLC Compliance: Our SMS program is registered with carriers for trusted business messaging.

Privacy: SMS delivery status (delivered, failed) is tracked. Message content is stored with your order history.

Manage Preferences: You can opt in/out of SMS notifications in your account settings.

8.1.3 Push Notifications

Mobile app users receive push notifications via Amazon SNS (AWS) for:

For Customers:

  • Order status changes (accepted, out for delivery, completed)
  • Driver arrival notifications
  • Chat messages from driver
  • Promotional offers (if enabled)

For Drivers:

  • New order opportunities
  • Order assignments
  • Chat messages from customer
  • Earnings updates
  • Important announcements

Manage Preferences:

  • iOS: Settings > Notifications > Lit
  • Android: Settings > Apps > Lit > Notifications
  • In-app: Account settings > Notification preferences

Note: You may not be able to opt out of critical service notifications (order accepted, payment issues, account security alerts).

8.1.4 In-App Chat

Real-time messaging between customers and drivers during deliveries:

Purpose: Coordinate delivery details (gate codes, parking instructions, availability)

Storage: All messages stored indefinitely for quality assurance, safety, and dispute resolution

Monitoring: Messages may be reviewed for safety, prohibited content, and quality purposes

Do Not Share:

  • Phone numbers, email addresses
  • Personal financial information
  • Sensitive personal information
  • Information unrelated to the delivery

Prohibited:

  • Harassment, threats, abusive language
  • Spam or solicitations
  • Explicit or offensive content

Report: You can report inappropriate messages. Violations may result in account termination.

8.1.5 Voice Calls

We may contact you by phone for:

  • Order coordination
  • Delivery issues
  • Customer support inquiries
  • Account verification
  • Driver approval process

Calls may be recorded for quality assurance and training purposes. You will be notified at the beginning of recorded calls.

9. DATA SECURITY

9.1 Security Measures We Implement

We implement industry-standard security measures to protect your Personal Information:

Technical Safeguards:

  • Encryption in transit: All data transmitted via HTTPS/TLS 1.2+
  • Encryption at rest: Database encryption, encrypted file storage (AWS S3)
  • Password security: Passwords hashed and salted (bcrypt algorithm)
  • Token-based authentication: JWT (JSON Web Tokens) with refresh token rotation
  • Secure WebSocket connections: WSS (WebSocket Secure) for real-time data
  • API rate limiting: Prevents brute-force attacks
  • Input validation: Prevents SQL injection, XSS attacks
  • AWS S3 signed URLs: Access-controlled file downloads (expire after 7 days)

Administrative Safeguards:

  • Access controls: Role-based permissions (least privilege principle)
  • Employee training: Security awareness and privacy training
  • Background checks: For employees with data access
  • Vendor contracts: Data protection agreements with all service providers

Physical Safeguards:

  • Secure data centers: AWS and DigitalOcean facilities (SOC 2 compliant)
  • Redundant backups: Daily automated backups with 30-day retention
  • Disaster recovery plan: Documented recovery procedures

9.2 Limitations of Security

Important: No method of transmission over the internet or electronic storage is 100% secure. While we implement reasonable security measures, we cannot guarantee absolute security.

You are responsible for:

  • Maintaining the confidentiality of your password
  • Using a strong, unique password
  • Not sharing your account credentials
  • Logging out of shared devices
  • Reporting unauthorized account access immediately

9.3 Data Breach Notification

In the event of a data breach that affects your Personal Information, we will:

  1. Notify affected users within timeframes required by applicable law (typically 72 hours)
  2. Describe the breach: What information was affected, when it occurred
  3. Provide guidance: Steps you can take to protect yourself
  4. Notify authorities: As required by law (state attorneys general, regulatory agencies)

Notification methods: Email (to address on file) and/or prominent notice in the app/website

10. DATA RETENTION

10.1 How Long We Keep Your Information

We retain your Personal Information for as long as necessary to:

  • Provide our Services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

Retention Periods:

  • Active account data: Indefinitely (while account is active) - Service delivery
  • Order records: 7 years - Tax compliance, legal obligations
  • Payment transaction data: 7 years - Tax compliance, fraud prevention
  • Chat messages: Indefinitely - Quality assurance, dispute resolution, safety
  • Location data (historical): 90 days - Service improvement, dispute resolution
  • Email communications: 3 years - Customer support, legal compliance
  • SMS logs: 1 year - Compliance, opt-out tracking
  • Photos (delivery confirmation): 2 years - Dispute resolution, quality assurance
  • Driver's license/ID photos: Duration of driver status + 3 years - Compliance, background check records
  • Analytics data (anonymized): 2 years - Service improvement
  • Security logs: 1 year - Security incident investigation

10.2 Account Deletion

When you request account deletion:

  1. Your account is deactivated immediately (cannot log in)
  2. Personal Information is deleted within 30 days, except:
    • Order records (retained for 7 years for tax/legal compliance)
    • Payment records (retained for 7 years)
    • Chat messages (retained indefinitely, but disassociated from your identity)
    • Data required for ongoing legal obligations

To request deletion: Email [email protected] with subject line "Account Deletion Request"

10.3 Inactive Accounts

Accounts with no activity for 2 years may be automatically deleted after notice.

11. YOUR PRIVACY RIGHTS

11.1 Right to Access

You have the right to request a copy of the Personal Information we hold about you.

How to exercise: Email [email protected] with subject "Data Access Request"

Response time: Within 30 days (may extend to 60 days if complex)

Format: PDF or CSV file, depending on data type

Verification: We may request verification of your identity before providing data

11.2 Right to Correction

You have the right to correct inaccurate Personal Information.

How to exercise:

  • In-app: Account Settings > Edit Profile
  • Email: [email protected] with subject "Data Correction Request"

11.3 Right to Deletion

You have the right to request deletion of your Personal Information, subject to legal retention requirements.

Exceptions: We may retain information required for:

  • Legal compliance (tax records, audit requirements)
  • Ongoing legal proceedings
  • Fraud prevention
  • Contract enforcement

How to exercise: Email [email protected] with subject "Account Deletion Request"

11.4 Right to Opt-Out

You have the right to opt out of:

  • Marketing emails: Click "Unsubscribe" in any marketing email
  • SMS notifications: Reply STOP to any SMS message
  • Push notifications: Disable in device settings or app preferences
  • Personalized advertising: See Section 11.6

Note: You cannot opt out of transactional communications (order confirmations, payment receipts, security alerts).

11.5 Right to Data Portability

You have the right to receive your data in a portable format (e.g., CSV, JSON) to transfer to another service.

How to exercise: Email [email protected] with subject "Data Portability Request"

11.6 Opt-Out of Personalized Advertising

Website (Browser-based):

  • Network Advertising Initiative: http://www.optout.networkadvertising.org
  • Digital Advertising Alliance: http://www.aboutads.info/choices/

Mobile App:

  • iOS: Settings > Privacy > Tracking > Disable "Allow Apps to Request to Track"
  • Android: Settings > Privacy > Ads > Opt out of Ads Personalization
  • Cross-device: http://youradchoices.com/appchoices

Note: You will still see ads, but they will be less relevant to your interests.

11.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not be:

  • Denied service
  • Charged different prices
  • Provided a lower quality of service

12. CHILDREN'S PRIVACY

12.1 Age Requirement

Our Services are intended for individuals 18 years of age or older. We do not knowingly:

  • Collect Personal Information from individuals under 18
  • Allow individuals under 18 to register for accounts
  • Market to individuals under 18

12.2 Age Verification

We verify age at registration by:

  • Requiring date of birth
  • Validating age (must be 18+)
  • Rejecting registrations from individuals under 18

12.3 If We Learn of Child Data

If we learn that we have collected Personal Information from a child under 18 without parental consent:

  1. We will delete the information as quickly as possible
  2. We will deactivate the account
  3. We will notify the individual (if contact information is available)

Report suspected underage users: Email [email protected] with subject "Underage User Report"

13. STATE-SPECIFIC PRIVACY RIGHTS

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know:

  • Categories of Personal Information collected
  • Categories of sources
  • Business or commercial purpose for collection
  • Categories of third parties with whom we share information
  • Specific pieces of information collected about you

Right to Delete: Request deletion of Personal Information (subject to exceptions)

Right to Opt-Out: We do not sell Personal Information, but you can opt out of sharing for cross-context behavioral advertising

Right to Non-Discrimination: We will not discriminate for exercising CCPA rights

Right to Correct: Request correction of inaccurate information

Right to Limit Use of Sensitive Personal Information: Request limitation on use of sensitive data (precise geolocation, Social Security number, etc.)

Authorized Agent: You may designate an authorized agent to make requests on your behalf (requires verification)

How to exercise CCPA rights: Email [email protected] with subject "CCPA Request"

Verification: We will verify your identity before responding to requests

Response time: Within 45 days (may extend to 90 days if complex)

No Sale of Personal Information: We do not sell your Personal Information to third parties for monetary or other valuable consideration.

13.2 Idaho Residents

Idaho Code § 28-51-104 requires us to notify Idaho residents of security breaches. We will:

  • Conduct reasonable and prompt investigation
  • Notify affected residents as soon as possible
  • Provide details of the breach and recommended actions

Contact Idaho Attorney General: If you believe your information was compromised, you may also contact the Idaho Attorney General's Office.

13.3 Other State Rights

Residents of other states (Virginia, Colorado, Connecticut, Utah, etc.) may have additional rights under state privacy laws. Contact us at [email protected] to exercise your state-specific rights.

14. INTERNATIONAL DATA TRANSFERS

14.1 United States-Based Service

Lit is based in Eagle, Idaho, USA. Our servers and data processing occur primarily in the United States.

14.2 Cross-Border Transfers

If you are accessing our Services from outside the United States:

  • Your data will be transferred to, stored, and processed in the United States
  • The United States may not have the same data protection laws as your jurisdiction
  • By using our Services, you consent to transfer and processing in the United States

14.3 European Users (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland:

  • We rely on your consent or contractual necessity as the legal basis for processing
  • You have rights under GDPR, including rights to access, rectification, erasure, restriction, portability, and objection
  • You may lodge a complaint with your local data protection authority

14.4 Safeguards for International Transfers

We implement appropriate safeguards for cross-border data transfers, including:

  • Standard Contractual Clauses (SCCs) with service providers
  • Ensuring service providers provide adequate protection
  • Limiting data transfers to what is necessary

15. CHANGES TO THIS PRIVACY POLICY

15.1 Right to Modify

We reserve the right to modify this Privacy Policy at any time in our sole discretion.

15.2 Notification of Changes

We will notify you of material changes by:

  • Email notification to the address on file (for significant changes)
  • In-app notification upon next login
  • Prominent notice on our website and app

15.3 Effective Date

Changes become effective on the date specified in the updated Privacy Policy. Your continued use of our Services after the effective date constitutes acceptance of the changes.

15.4 Version History

We maintain a version history of this Privacy Policy with effective dates for transparency.

Current Version: 2.1

Previous Versions: Available upon request

16. CONTACT US

16.1 Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Email: [email protected] (Subject: Privacy Inquiry)

Mail:

Lit LLC

P.O. Box 2209

Eagle, Idaho 83616-9113

Customer Support Hours: Monday-Friday, 9am-5pm Mountain Time

16.2 Response Time

We aim to respond to privacy inquiries within:

  • Simple inquiries: 5 business days
  • Data access requests: 30 days (may extend to 60 days if complex)
  • Data deletion requests: 30 days
  • CCPA requests: 45 days (may extend to 90 days if complex)

16.3 Complaints

If you believe we have not complied with this Privacy Policy or applicable data protection laws, please contact us. We will investigate and respond promptly.

For California residents: You may also contact the California Attorney General's Office.