Privacy Policy

1. Introduction

XStream Customs LLC, doing business as Laser Job Manager ("we," "us," or "our"), operates the Laser Job Manager desktop application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name (first and last), email address, and password when you create an account.
• Organization information: Shop/business name associated with your account.
• Job data: Job titles, descriptions, statuses, material settings, and laser parameters that you create within the Service.
• Customer records: Names, email addresses, phone numbers, and addresses of your customers that you enter into the Service.
• Machine/device information: Laser machine names, types, specifications, and settings you configure.
• Material settings: Material types, thicknesses, and laser cut/engrave parameters you save.
• Uploaded files: Images, SVG files, DXF files, and LightBurn configuration files (.clb, .lbdev, .lbrn2) that you upload to the Service.

2.2 Information Collected Automatically

• Authentication data: Login timestamps, session tokens, and email confirmation status.
• Usage data: We may collect basic usage information such as pages visited and features used within the Service to improve our product.
• Device information: Browser type, operating system, and screen resolution used to access the Service.

2.3 Payment Information

All payment processing is handled by Stripe, Inc. We do not collect, store, or have access to your full credit card number, CVV, or other payment card details. Stripe may collect your billing name, billing address, and payment method information directly. Please refer to Stripe's Privacy Policy for more information on how they handle your payment data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your license payments and manage your account.
• Send transactional emails (account confirmation, password resets, payment receipts, license and account updates).
• Send onboarding emails to help you get started with the Service.
• Respond to your support requests and inquiries.
• Improve and develop new features for the Service.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only with the following categories of service providers who assist us in operating the Service:

We may also disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Cookies and Tracking Technologies

The Service uses essential cookies and local storage for authentication and session management. These are strictly necessary for the Service to function and cannot be disabled.

• Authentication tokens: Stored in your browser's local storage to keep you logged in.
• Stripe cookies: Stripe.js may set cookies for fraud prevention and payment processing. These are necessary for payment functionality.

We may add analytics or performance monitoring tools in the future. If we do, this Privacy Policy will be updated to reflect the additional cookies or tracking technologies used, and we will provide appropriate notice and consent mechanisms where required by law.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• Encryption in transit (HTTPS/TLS) for all data transmitted between your browser and our servers.
• Encryption at rest for stored data.
• Row-level security policies ensuring your data is accessible only to your account.
• Secure authentication with hashed passwords (we never store plaintext passwords).
• Time-limited signed URLs for file access (files are not publicly accessible).

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as your account exists. If your license expires or is deactivated, you retain access to view your data but cannot create or edit. Your data is not automatically deleted.

If you wish to have your data deleted, you may request account deletion by contacting us. Upon request, we will delete your personal information and associated data within 30 days, except where we are required to retain certain information for legal, accounting, or fraud prevention purposes.

Transactional email records (delivery status, not content) are retained by our email provider for up to 45 days and then automatically purged.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information and account.
• Data portability: Request a copy of your data in a machine-readable format.
• Opt-out of emails: You may unsubscribe from onboarding and promotional emails. Transactional emails related to your account and billing cannot be opted out of while your account is active.

To exercise any of these rights, contact us at support@laserjobmanager.com. We will respond to your request within 30 days.

9. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) may provide you with additional rights regarding your personal information. While we may not meet the thresholds that require full CCPA compliance, we are committed to respecting your privacy. California residents may:

• Request disclosure of the categories and specific pieces of personal information we have collected.
• Request deletion of personal information.
• Not be discriminated against for exercising privacy rights.

We do not sell personal information to third parties. We do not use or share personal information for cross-context behavioral advertising.

10. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@laserjobmanager.com.

11. Third-Party Links

The Service may contain links to third-party websites or services (e.g., Stripe's payment portal). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice in the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: