Collection Suites Privacy Policy

PRIVACY POLICY

Collection Suites

Effective Date: May 11, 2025

Developed by Galileax LLC

1. Introduction

Galileax LLC (“we,” “us,” or “our”) operates the Collection Suites mobile application (“App”) available on the Apple App Store and Google Play Store. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use the App.

By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Data We Collect

We collect only the information necessary to provide the App’s features and services.

2.1 Account Information

When you create an account, we collect:

Full name
Email address
Password (stored in hashed/encrypted form — we never store plain-text passwords)

2.2 Payment Information

When you reserve or rent the clubhouse through the App, we collect:

Credit or debit card information (card number, expiration date, CVV, billing address)

Payment card data is transmitted securely over TLS/SSL encryption. Card details are processed and stored by our payment processor and are not stored on Galileax LLC’s servers beyond what is necessary to complete the transaction.

2.3 Booking & Transaction Records

Clubhouse rental bookings and associated transaction data are recorded and managed through our third-party service partners: Zoho Desk (support and ticketing) and Zoho Calendar (scheduling). This includes:

Booking dates, times, and duration
Rental confirmation records
Associated account information linked to the booking

2.4 Smart Home Device Interactions

The App enables you to control smart home devices in your suite, including lights, sound systems, televisions, and garage doors. Device command interactions (e.g., on/off, volume level, door status) may be logged to support functionality, troubleshoot errors, and ensure device security. We do not sell or share device interaction data with third parties for advertising purposes.

2.5 Data We Do Not Collect

We do not collect the following unless explicitly stated otherwise:

Precise GPS or background location data
Camera or microphone access
Health or biometric data
Contacts or calendar data from your device
Advertising identifiers or cross-app tracking data

3. How We Collect Data

We collect information through the following means:

Registration forms — when you create an account and provide your name and email. Directly from you:
Checkout forms — when you enter payment details to book the clubhouse. Directly from you:
Device command logs generated when you interact with smart home features within the App. Automatically:
Booking and transaction data synchronized with Zoho Desk and Zoho Calendar when a reservation is made or modified. Via third-party services:

4. How We Use Your Data

We use the information we collect solely for the following purposes:

To create, maintain, and authenticate your user account. Account Management:
To allow you to control your suite’s smart home devices (lights, sound, TV, garage doors). Service Delivery:
To process bookings, manage scheduling, send confirmation notices, and handle payment transactions. Clubhouse Reservations:
To respond to inquiries, troubleshoot issues, and manage support tickets via Zoho Desk. Customer Support:
To detect and prevent unauthorized access, fraudulent transactions, or misuse of the App. Security & Fraud Prevention:
To comply with applicable laws, regulations, and legal obligations. Legal Compliance:

We do not use your personal data for targeted advertising, profiling, or sale to third parties.

5. Third-Party Data Sharing and Protection

We share limited user data only with the third-party service providers listed below, solely to operate the App’s core features. We do not sell your personal information.

5.1 Third-Party Service Providers

Zoho Desk — Used to manage clubhouse booking support tickets and customer service inquiries. Receives booking-related account information (name, email, reservation details).
Zoho Calendar — Used to schedule and manage clubhouse rental reservations. Receives booking dates, times, and account information associated with reservations.
Payment Processor — Your payment card details are transmitted to our PCI-DSS compliant payment processor. Galileax LLC does not store raw card data on its own servers.

5.2 Third-Party Protection Standards

We require all third parties with whom we share user data to provide the same level of data protection described in this Privacy Policy. Specifically, all third-party partners must:

Process personal data only as instructed by Galileax LLC and only for the specified purpose;
Implement appropriate technical and organizational security measures to protect personal data;
Not sell, rent, or share personal data with additional parties without our explicit consent;
Comply with all applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA) and, where applicable, the General Data Protection Regulation (GDPR);
Promptly notify Galileax LLC of any data breach or security incident involving user data.

We conduct due diligence on third-party providers before sharing data with them and periodically review their data protection practices.

5.3 Other Disclosures

We may also disclose your information:

To comply with a legal obligation, court order, or government request;
To protect the rights, property, or safety of Galileax LLC, our users, or the public;
In connection with a merger, acquisition, or sale of assets, in which case users will be notified.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this Policy or as required by law.

Retained for the duration of your active account, plus up to 90 days after account deletion to allow for reactivation requests or dispute resolution. Account Information (name, email):
Retained for a minimum of 7 years in accordance with financial recordkeeping requirements under applicable law. Payment & Transaction Records:
Retained for 2 years from the date of the booking, after which records are deleted or anonymized. Booking Records (Zoho Desk / Zoho Calendar):
Retained for up to 12 months on a rolling basis for troubleshooting and security purposes. Device Interaction Logs:

Once the applicable retention period expires, your data is securely deleted or anonymized so it can no longer be linked to you.

7. Your Rights: Consent, Deletion, and Data Requests

7.1 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Request a copy of the personal data we hold about you. Right to Access:
Request that inaccurate or incomplete data be corrected. Right to Correction:
Request that we delete your personal data (“right to be forgotten”), subject to legal retention requirements. Right to Deletion:
Request your data in a structured, machine-readable format. Right to Portability:
Revoke your consent to data processing at any time, where processing is based on consent. Right to Withdraw Consent:
We do not sell your personal data. However, you may contact us to confirm this at any time. Right to Opt-Out of Sale:

7.2 How to Exercise Your Rights

To exercise any of the rights above — including revoking consent, requesting data access, or requesting deletion of your account and data — please contact us by:

Email: it@collection-suites.com
Subject line: “Privacy Request — Collection Suites”

Please include your full name and the email address associated with your account. We will respond to your request within 30 days. In some cases we may need to verify your identity before processing the request.

7.3 Account & Data Deletion

You may request full deletion of your account and all associated personal data at any time. Upon receiving a verified deletion request, we will:

Delete or anonymize your account information within 30 days;
Remove your data from Zoho Desk and Zoho Calendar records, subject to any legal retention obligations;
Confirm completion of the deletion to you via email.

Please note: certain data (such as financial transaction records) may need to be retained for legal or regulatory compliance even after account deletion. We will inform you if this applies to your request.

7.4 Revoking Consent

Where our processing of your data is based on your consent (e.g., storing your account information), you may revoke that consent at any time by submitting a deletion or opt-out request as described in Section 7.2. Revoking consent will not affect the lawfulness of processing that occurred before revocation, but will result in the discontinuation of your ability to use the App’s account-dependent features.

8. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data, including:

TLS/SSL encryption for all data transmitted between your device and our servers;
Hashed and salted storage of passwords — we never store plain-text passwords;
Access controls limiting employee access to personal data on a need-to-know basis;
Regular security assessments of our systems and third-party providers.

No method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

9. Children’s Privacy

The App is not directed to children under the age of 13 (or under 16 where required by applicable law). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at it@collection-suites.com and we will delete the information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the Effective Date at the top of this document and, where the changes are material, notify you via in-app notification or email. Your continued use of the App after any changes constitutes your acceptance of the updated Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Galileax LLC

Privacy Inquiries — Collection Suites

Email: it@collection-suites.com