1. Introduction

C6 Labs LLC, formerly CarbonApps LLC ("Company," "we," "us," or "our") operates AwardClaw (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Information you provide directly:

Account information: name, email address, and password (or OAuth credentials via Google)
Mobile phone number: collected only if you choose to enable SMS alerts, together with the timestamp of your verification and opt-in
Profile and preferences: tracked cities, notification settings, and plan selections
Communications: messages you send to us via contact forms or email
Payment information: billing details processed through our third-party payment processor (we do not store full payment card numbers)

Information collected automatically:

Device and browser information: IP address, browser type, operating system, and device identifiers
Usage data: pages visited, features used, timestamps, referring URLs, and interaction patterns
Cookies and similar technologies: session cookies, authentication tokens, and analytics identifiers

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Authenticate your identity and manage your account
Send you award flight alerts, briefings, and service notifications
Process payments and manage subscriptions
Respond to your inquiries and provide customer support
Analyze usage patterns to improve functionality and user experience
Detect, prevent, and address fraud, abuse, and security issues
Comply with legal obligations

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data under these legal bases:

Contract performance: to provide and manage your account and subscriptions
Legitimate interests: to improve the Service, prevent fraud, and ensure security
Consent: for marketing communications and optional analytics (which you may withdraw at any time)
Legal obligation: to comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

Service providers: third-party vendors who assist with hosting, analytics, payment processing, and email delivery, bound by data processing agreements
Legal requirements: when required by law, subpoena, or court order, or to protect our rights, safety, or property
Business transfers: in connection with a merger, acquisition, or sale of assets, where your information may be transferred as a business asset

Mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Your mobile phone number is disclosed only to the telecommunications provider that delivers the message on our behalf, solely for the purpose of transmitting the messages you requested, and to no one else.

6. SMS and Text Message Alerts

SMS alerts are strictly optional and off by default. We text you only after you have entered your own mobile number in your account settings, confirmed it with a one-time verification code we send to that number, and switched the alert toggle on. We never add a number to the program on your behalf, and consent to receive texts is never a condition of creating an account or of buying a subscription.

Messages contain award-fare alerts for the flight routes you have chosen to track, at a frequency of roughly 1–3 messages per day when matching availability appears. Message and data rates may apply. You may opt out at any time by replying STOP to any message, or by switching the toggle off in your settings; replying HELP, or emailing [email protected], will reach us for assistance. We record your opt-in and opt-out events so that our records of your consent stay accurate.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, preferences, and analytics. Essential cookies are required for the Service to function. Analytics cookies help us understand usage patterns. You can control cookie preferences through your browser settings. Disabling essential cookies may impair Service functionality.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for up to 90 days for backup and fraud prevention purposes, after which it is permanently deleted. Anonymized and aggregated data may be retained indefinitely for analytics purposes.

9. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), encryption at rest, secure authentication protocols, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: request a copy of the personal data we hold about you
Correction: request correction of inaccurate or incomplete data
Deletion: request deletion of your personal data
Portability: receive your data in a structured, machine-readable format
Objection: object to processing based on legitimate interests
Restriction: request restriction of processing in certain circumstances
Withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale or sharing of your personal information. We do not sell or share personal information as defined by the CCPA/CPRA.

12. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. When we transfer data outside your jurisdiction, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure adequate protection of your personal information.

13. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

14. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we may also notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

16. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

C6 Labs LLC
Email: [email protected]