Declunk, LLC (“Declunk,” “we,” “our,” or “us”) is a Wyoming limited liability company that operates a SaaS platform for capturing, routing, approving, and publishing website change requests, including a Webflow sync and an approval workflow (the “Platform”), together with our public-facing website at www.declunk.com (the “Site,” and together with the Platform, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect information in connection with the Services.
This Privacy Policy applies to:
- Business customers (“Customers”) who subscribe to and use the Platform including businesses participating in Declunk’s beta pilot testing program (“Beta Testers”);
- Authorized Users (employees or representatives of a Customer who access the Platform);
- Visitors to the Site who are not registered Customers or Authorized Users; and
- Data Subjects on a Connected Site or in a shared workspace — individuals such as a Customer's own website visitors, staff, or contacts whose data may incidentally appear in content a Customer syncs from a Connected Site, or whose information appears in notifications a Customer routes to a Slack or Google Chat workspace it controls.
Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.
Where this Privacy Policy refers to a specific provision of the “Subscription Agreement,” that reference means, with respect to a Beta Tester, the corresponding provision of the Beta Pilot Testing Agreement between Declunk and the Beta Tester (the “Beta Agreement”).
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Account Registration Data: When a Customer creates an account, we collect name, business email, role, hashed password credentials, and workspace and organization details.
Billing Data: billing contact, plan, invoice records, and payment status. Declunk does not currently process subscription payments; once a payment processor is integrated, card data will be collected and tokenized directly by that processor, and Declunk will not store full card numbers.
Connected Service Authorization: where a Customer connects a Connected Service, such as a Connected Site (for example, Webflow), a data or analytics provider (for example, Ahrefs), or a messaging or collaboration service (for example, Slack or Google Workspace), Customer authorizes Declunk to access, retrieve, process, store, and synchronize data with that Connected Service, and, only where separately approved by Customer or an Authorized User through the Platform’s review and approval workflow, to publish or take action within that Connected Service. This authorization is granted and governed by Section 2.3A of the Subscription Agreement, which Customer accepts as a binding contractual term. For a Connected Site such as Webflow, access is obtained through that provider’s OAuth flow; Customer may revoke Declunk’s access to any Connected Service at any time through that provider’s account settings or through the Platform.
Connected Site Data: content and metadata synced from a Connected Site (page copy, metadata, page structure), which may incidentally include Personal Data appearing on the Customer's own website if the Customer has chosen to put such data there.
Project and Task Content: request descriptions, comments, page content, attachments, review notes, approval records, and logged hours submitted by a Customer or its Authorized Users.
Slack Integration Data: where a Customer enables the Slack integration, requester names, request titles, and approval and publication activity are transmitted to the Slack workspace and channel the Customer selects. Declunk does not retain the content of notification messages after transmission; Declunk stores only the workspace name and ID, channel name and ID, and the identity of the connecting user, for as long as the integration remains connected.
Communications: if you contact our support team, we collect the contents of that communication and any attachments you provide.
1.2 Information Generated Through Platform Use
Usage Data: we automatically collect technical and operational data about use of the Platform, including IP address, browser type and version, device type, operating system, pages visited, features accessed, session duration, API call logs, error logs, and performance metrics.
1.3 Information from Third Parties
- Webflow API: Connected Site content and page metadata from the Customer's own connected Webflow account.
- Cloudflare, Inc.: our application hosting, CDN, and object-storage provider, which processes data on our behalf.
- Render Services, Inc.: our backend application and database hosting provider, which processes data on our behalf.
- Resend, Inc.: delivery of transactional email on our behalf.
- Slack Technologies, LLC: where a Customer enables the integration, delivery of notifications to that Customer's selected Slack workspace and channel.
- Payment processor: once integrated, transaction confirmation and billing-status information.
2. HOW WE USE YOUR INFORMATION
2.1 Providing and Operating the Platform
- Creating and managing Customer accounts
- Processing subscription payments (once a payment processor is integrated)
- Syncing and displaying Connected Site content
- Facilitating the Change Request, review, approval, and publishing workflow
- Delivering notifications to a Customer's selected Slack channel, where enabled
2.2 Platform Improvement and Analytics
- Analyzing aggregated, de-identified usage patterns to improve Platform features
- Monitoring Platform performance, uptime, and error rates
- Developing and testing new features
2.3 Communications
- Sending transactional emails (account verification, password reset, invitations, approval and publishing notifications, billing and renewal notices, and security notices) through Resend
- Sending service-related notifications and Platform updates
- Responding to support requests
- Declunk does not send SMS or text messages to Site visitors or Customers, and the Platform does not enable Customers to send SMS, WhatsApp, or Facebook Messenger messages to their own end users
2.4 Legal and Security Purposes
- Complying with applicable federal, state, and local laws
- Detecting, investigating, and preventing fraud, abuse, and security incidents
- Enforcing our Subscription Agreement and other policies
- Protecting the rights, property, and safety of Declunk, our Customers, and others
3. HOW WE SHARE YOUR INFORMATION
We do not sell your Personal Data. We share information only in the following circumstances.
3.1 Authorized Sub-processors
We share data with the following third-party service providers, who process data on our behalf to operate the Platform and are contractually bound to use it only as we direct and consistent with this Privacy Policy:
| Sub-processor | Purpose | Data Processed |
|---|---|---|
| Cloudflare, Inc. | Application hosting, CDN, and object storage for file attachments | All Platform data in transit; attachment content |
| Render Services, Inc. | Backend application and database hosting | All Platform data |
| Resend, Inc. | Delivery of transactional email | Names, email addresses, notification content |
| Slack Technologies, LLC | Delivery of notifications, where Customer enables the integration | Requester names, request titles, approval/publication activity |
| Payment processor (once integrated) | Payment processing | Billing and transaction confirmation data |
A current list of Sub-processors is available on request.
Webflow, or another content-management system a Customer connects as a Connected Site, is the Customer's own system and tool rather than a service Declunk engages, and is not a Declunk Sub-processor.
3.2 Legal Requirements
We may disclose information if required to do so by law, regulation, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Declunk, our Customers, or the public.
3.3 Business Transfers
In the event of a merger, acquisition, sale of assets, or similar transaction, your information may be transferred to the successor entity. We will provide notice before your information becomes subject to a materially different privacy policy.
3.4 With Your Consent
We may share information for other purposes with your prior written consent.
3.5 Aggregated and De-Identified Data
Consistent with Sections 3.3 and 3.4 of the Beta Pilot Testing Agreement (“Beta Agreement”), Declunk may use, and may commercialize, license, or publish, Usage Data, Aggregated Data, and Derived Data that has been aggregated or de-identified such that it cannot reasonably be used to identify any Customer or individual. Declunk will not sell or license raw Customer Content, and will not attempt to re-identify such data.
4. COOKIES AND TRACKING TECHNOLOGIES
Declunk's use of cookies and similar technologies, including browser local storage, is described in full in our Cookies Policy at www.declunk.com/legal/cookie-notice, which is incorporated into this Privacy Policy by reference and includes a complete inventory of the specific items in use and their retention periods. In summary: the Platform dashboard (app.declunk.com) sets no cookies and uses browser local storage only for strictly necessary functions, such as sign-in, and functional preferences, such as saved filters and layout. Our public marketing website uses Google Analytics, a third-party analytics tool delivered through Google Tag Manager, and self-hosts its own fonts rather than loading them from a third-party font service, so no font request discloses your IP address to a font provider. Analytics is not strictly necessary for the site to function and is off by default: it activates only once you accept the Analytics category in our cookie consent banner. Declunk may in the future also use PostHog, a third-party analytics and session-recording tool, on the Site.
We display a consent banner for these non-essential technologies. It offers options to accept, reject, or manage preferences, with rejecting exactly as easy as accepting, and it honors the Global Privacy Control signal: where your browser sends it and you have not already made a choice, we treat it as a binding opt-out and record it without showing the banner. Analytics is off until you accept it, so no analytics cookies are set beforehand, and you can change your choice at any time using the Cookie Preferences link in our website footer. These arrangements are described further in the Cookies Policy.
You can control cookies and local storage through your browser settings, though disabling certain storage may affect the functionality of the Services. Declunk does not currently respond to browser “Do Not Track” signals.
5. NOTIFICATIONS AND MESSAGING PRIVACY
Declunk's Services do not include SMS or text messaging to Site visitors or Customers, and the Platform does not enable a Customer to send SMS, WhatsApp, Facebook Messenger, or bulk marketing email to its own end customers.
5.1 Transactional Email from Declunk
By providing your email address, you consent to receive transactional and service-related emails from Declunk, including account verification, password reset, invitations, approval and publishing notifications, billing and renewal notices, and security notices, delivered through Resend. You may opt out of non-essential marketing communications at any time using the unsubscribe link included in the email; transactional and security communications necessary to operate your account are not subject to opt-out.
5.2 Slack and Google Chat Notifications
Where a Customer enables the Slack integration, notifications (the requester, the request, and approval and publication activity) are delivered to the Slack workspace and channel the Customer selects. Those notifications are visible to all members of that channel, which may include individuals who are not Authorized Users and do not hold a Declunk account. The Customer controls that exposure through its own channel selection and workspace membership, and Customer's use of Slack is subject to Slack Technologies, LLC's own terms of service and privacy practices, over which Declunk has no control. A Google Chat integration exists in Declunk's codebase but is hard-coded to Declunk's own internal Google Workspace; it is not available to, or used by, Customers today.
Message content sent to Slack is not retained by Declunk, and Declunk cannot read messages in your workspace. Declunk does store your Slack workspace name and ID, the name and ID of the channel you select for notifications, and which user connected the integration, for as long as the integration remains connected. Declunk retrieves the list of channels visible to the integration in order to present it for selection, but does not store that list.
6. DATA RETENTION
We retain Personal Data as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Profile Data | Subscription Term, plus up to sixty (60) days following termination to allow for the data export described in Section 12.5 of the Subscription Agreement; deleted or anonymized within forty-five (45) days of a verified deletion request or the end of that period. | Contract |
| Customer Content (Connected Site data, requests, comments, attachments, approval records) | Same as Account and Profile Data, above. | Contract |
| Notification Data (Slack) | Message content not retained by Declunk. Workspace name and ID, channel name and ID, and connecting-user identity retained for as long as the integration remains connected. Delivered notifications are subject to Slack's own retention in Customer's workspace. | Contract / Legitimate Interest |
| Billing and Payment Records | Seven (7) years from the transaction date. | Legal Obligation (tax / audit) |
| Usage Data (as defined in Section 1.2) | Two (2) years. This row covers only the technical Usage Data listed in Section 1.2 (IP address, browser and device, pages visited, session duration, API call logs, error logs, and performance metrics). It does not include the change-request audit trail (who requested and approved each change, and the history of published updates) described in Section 2.3 of the Beta Agreement, which is Customer Content retained for the Subscription Term, as set out above. | Legitimate Interest |
| Enrollment and Consent Records (checkbox state, IP address, timestamp at signup) | Minimum of three (3) years from the enrollment event, consistent with Section 5.6 of the Subscription Agreement. | Legal Obligation / Contract |
| Security Incident Records | Three (3) years from the date of the incident. | Legitimate Interest / Legal Obligation |
| Marketing Site Analytics (Google Analytics; PostHog if enabled) and Related Identifiers | Governed by the then-current default retention settings of Google Analytics, and of PostHog if and when Declunk enables it on the Site. Declunk has not customized either provider's default configuration; this table will be updated if it does. | Legitimate Interest |
Upon a Customer's verified deletion request, Declunk will delete or anonymize Personal Data within forty-five (45) days, subject to any legal hold obligations. Upon a Customer's request made within sixty (60) days following termination or expiration of the Subscription Agreement, Declunk will provide a one-time export of Customer Content then reasonably available, as described in Section 12.5 of the Subscription Agreement.
If there is any data we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of that data. In some cases, we may retain certain information, such as insights about Services use, in a depersonalized or aggregated form.
7. DATA SECURITY
Declunk maintains administrative, technical, and organizational measures designed to protect the confidentiality, integrity, and availability of Personal Data, appropriate to the nature of the Platform and the risk presented by the Personal Data processed, and reviews and adjusts those measures periodically as its systems, the Platform, and applicable law evolve. Declunk does not currently represent that it holds any particular third-party security certification, such as SOC 2 or ISO 27001. Declunk will notify Customers if and when it obtains such a certification, and will otherwise make available, on reasonable request and under confidentiality, a description of its then-current measures. No method of transmission over the internet or electronic storage is 100% secure, and while Declunk uses measures designed to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.
8. DATA BREACH NOTIFICATION
In the event of a data breach involving Personal Data that triggers notification obligations under applicable law, Declunk will:
- Notify affected Customers within seventy-two (72) hours of confirming the breach, or within the time required by applicable law if shorter;
- Provide notification to applicable regulatory authorities as required by Wyoming's data breach notification law (Wyo. Stat. Ann. §§ 40-12-501 to -502) and other applicable law; and
- Cooperate with affected parties to mitigate potential harm.
9. YOUR PRIVACY RIGHTS
9.1 Rights of Customers and Authorized Users
Depending on your location and applicable law, you may have the right to:
- Access: Request a copy of the Personal Data we hold about you.
- Correction: Request that we correct inaccurate or incomplete Personal Data.
- Deletion: Request that we delete your Personal Data, subject to legal retention obligations.
- Portability: Request your data in a commonly used, machine-readable format.
- Opt-Out of Marketing: Opt out of receiving non-essential marketing communications at any time by using the unsubscribe link in any marketing email.
For an individual privacy request outside the context of a Customer's own account, Declunk will respond within forty-five (45) days of receiving a verifiable request. For a Customer's own account-level export, the sixty (60) day post-termination export process described in Section 6 above and in Section 12.5 of the Subscription Agreement (or, for a Beta Tester, Section 11.5 of the Beta Agreement) applies instead.
9.2 State Privacy Law Disclosures
Wyoming has not enacted a comprehensive consumer privacy statute. If you reside in a state with a comprehensive consumer privacy law (such as California, Colorado, Connecticut, Virginia, or Utah), you may have additional rights, including the rights described in Section 10 below. To exercise any applicable state-law privacy right, contact us using the information in Section 9.4.
9.3 California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), including the right to know, delete, and correct your personal information, and to opt out of the sale or sharing of personal information. Declunk does not sell or share personal information as defined under California law. To exercise your rights, contact us at the address below.
9.4 How to Submit a Privacy Request
To exercise any of your privacy rights, please contact us at legal@declunk.com or by mail at: Declunk, LLC, 30 N. Gould St #66379, Sheridan, WY 82801.
10. CALIFORNIA PRIVACY DISCLOSURES (CCPA/CPRA)
California residents have the right to:
- Know what personal information is collected and how it is used
- Request deletion of personal information
- Correct inaccurate information
- Opt out of the sale or sharing of personal information
We do not sell or share personal information as defined under California law.
11. CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)
Categories of Information Collected
| Category | Examples |
|---|---|
| Identifiers | Name, business email address |
| Commercial information | Subscription plan, billing history |
| Internet or other electronic network activity | Usage Data described in Section 1.2 |
| Professional or employment-related information | Job title or role within the Customer organization |
| Other data appearing in Connected Site content | Any Personal Data a Customer has chosen to place on its own website, which may be synced to the Platform incidentally |
Purposes
- Service delivery
- Analytics
- Security
- Legal compliance
Declunk does not sell or share personal information. If you have questions about our California privacy practices, please email legal@declunk.com.
12. CHILDREN'S PRIVACY
The Services are a B2B platform intended for business use and are not directed to children. Declunk requires that all users be at least 18 years of age and does not knowingly collect Personal Data from children under 18. If we become aware that we have inadvertently received Personal Data from a child, we will delete such information promptly. If you believe we have collected information from a child, please contact us immediately.
13. THIRD-PARTY LINKS AND SERVICES
The Services may contain links to third-party websites, services, or resources, including the providers below. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you access through the Services, including:
- Webflow: https://webflow.com/legal/privacy
- Cloudflare: https://www.cloudflare.com/privacypolicy/
- Render: https://render.com/privacy
- Resend: https://resend.com/legal/privacy-policy
- Slack: https://slack.com/trust/privacy/privacy-policy
14. CUSTOMER OBLIGATIONS AS DATA CONTROLLERS
When a Customer uses the Platform to process Personal Data it submits or syncs, including through a Connected Site or a Slack integration, the Customer acts as a data Controller and Declunk acts as a Processor, consistent with Section 11.1 of the Subscription Agreement. In this capacity:
- Customers are solely responsible for having a lawful basis to collect and submit Personal Data to the Platform, including any Personal Data appearing on a Connected Site.
- Customers must not submit special or sensitive categories of Personal Data through the Platform unless expressly agreed with Declunk in writing and subject to additional safeguards.
- Customers are responsible for selecting an appropriate Slack channel or Google Chat space and for managing the membership and visibility of that channel or space, since notifications delivered there are visible to all of its members.
- Customers must comply with all applicable privacy and data-protection laws in connection with their own use of the Platform.
- Declunk is not responsible for a Customer's failure to comply with applicable privacy laws in connection with the Customer's use of the Platform.
15. CHANGES TO THIS PRIVACY POLICY
Declunk reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify you by email or through a prominent notice on the Platform at least thirty (30) days before the changes take effect. The “Last Updated” date at the top of this policy reflects the most recent revision. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
16. DISPUTE RESOLUTION
Any disputes arising under this Privacy Policy shall be resolved in accordance with the dispute resolution and arbitration provisions outlined in Section 15 of the Declunk, LLC Subscription Agreement, which is incorporated herein by reference. This Privacy Policy is governed by the laws of the State of Wyoming, without regard to its conflict of laws principles. Any disputes not subject to arbitration shall be resolved in the state or federal courts located in Laramie County, Wyoming.
17. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Declunk, LLC
Attn: Privacy
30 N. Gould St #66379, Sheridan, WY 82801
Email: legal@declunk.com
Website: www.declunk.com
This Privacy Policy is incorporated by reference into the Declunk, LLC Subscription Agreement and forms part of the agreement between Declunk and its Customers.