Data Handling & Requests Policy

1. Company responsibility and scope

This policy is adopted by 5Line Ventures LLC and applies to personal information the company handles through its websites, products, shared accounts, connected services, and support operations. The company owner is responsible for reviewing privacy requests and authorizing disclosures. Our corporate contact is support@5lineventures.com, regardless of which product a request concerns.

Each product’s privacy notice explains the information that product collects, its features, service providers, and available controls. This company policy supplements those notices; it does not expand collection or sharing, remove a more protective product commitment, or limit rights under applicable law. Independent app stores, payment providers, and AI services have their own responsibilities and policies for information they receive.

2. How we handle data

Depending on the product and features you choose, we may handle account identifiers and contact information, content you provide, product activity and preferences, transaction or subscription records, and limited operational and security information. A category listed here does not mean every product collects it. Product notices describe applicable location, photo, household, learning, financial, or other potentially sensitive information.

• Collect and use only information reasonably necessary for the stated product function, a user-authorized action, support, security, or a legal obligation.
• Limit staff and service-provider access to the data and purpose needed. Shared company infrastructure does not authorize unrestricted access between users, households, workspaces, or products.
• Protect accounts and systems with appropriate access controls and secure transmission. Keep credentials and unnecessary personal content out of routine troubleshooting records.
• Do not sell personal information or use private customer records for unrelated advertising. Do not reuse private records for AI model training without a separately disclosed, lawful basis and any required permission.
• Review a disclosure or export before delivery, confirm the recipient, and use an authenticated download or another appropriately protected transfer method. Ordinary unprotected email attachments are not the default for sensitive exports.

These are company handling requirements, not a claim of a particular security certification or a guarantee that every system is free of risk.

3. Request access, correction, or deletion

Email support@5lineventures.com. Include the product name, the email or identifier associated with the account, and what you want us to do. “Privacy request” in the subject helps routing but is not required. Use the account email where possible; if you cannot access it, tell us so we can consider another verification method.

You may ask about access to or a copy of your information, correction, deletion, and other applicable rights such as portability, restriction, objection, or withdrawal of consent. Available rights and exceptions depend on the information and applicable law. You may also use an available in-app control. Email remains an alternative if you cannot use that control.

Tell us whether your request concerns one product or your shared 5Line Account. Shared-account deletion may affect multiple products, so we clarify the intended scope before an irreversible action. We do not require you to create an account solely to make a request or use special legal language. We do not penalize you for exercising applicable privacy rights.

4. Identity and authority verification

Before releasing personal records or making a consequential account change, we verify identity and authority in a way proportionate to the risk. We prefer existing account controls or information already associated with the account. Knowing an email address alone is not sufficient proof of account ownership.

We request additional evidence only when reasonably necessary and explain what is needed. We do not routinely ask for government identity documents. Verification material is used for verification and related fraud prevention, access is restricted, and it is removed when no longer needed unless a legal requirement applies.

An authorized representative, parent, guardian, or other person acting for someone else may need to demonstrate authority. A shared household or workspace membership does not automatically permit access to another person’s private information. We redact or separate other people’s information where required. If we cannot verify a request, we explain the limitation and available next steps without exposing protected records.

5. Processing times and updates

Requests are reviewed manually. Processing may take time depending on the request’s scope and complexity, identity verification, the systems involved, and any applicable legal requirements. Sending an email does not immediately complete an export or deletion.

We respond within applicable legal deadlines. We record the receipt date, determine the applicable response deadline, and track any permitted extension. If additional time is legally permitted and needed, we notify you within the required period, explain why, and provide the expected response date. We do not treat staffing, workload, or verification as an automatic extension or pause of a legal deadline.

We may contact you to clarify the request or explain progress. Requests are ordinarily free; any lawful exception involving a fee or refusal will be explained before a charge or refusal. If we cannot fulfill some or all of a request, we explain the reason to the extent permitted and any applicable review, appeal, or regulator-complaint options.

6. Retention, deletion, and backups

We retain information for the period needed for its disclosed purpose, including maintaining an active account, providing requested services, addressing security or fraud, and meeting applicable legal obligations. Product-specific retention periods remain applicable. This policy does not impose a new blanket retention period on all products.

For a verified deletion request, we identify the covered records and systems, check lawful retention exceptions, delete or de-identify eligible data, and instruct relevant service providers where appropriate. Information retained for a legal obligation, a valid preservation requirement, or another lawful exception is limited to that purpose and access is restricted.

Backups may follow their normal protected rotation rather than being immediately editable. Data awaiting backup expiry is not used for ordinary product operations; if a backup is restored, applicable deletion instructions must be reapplied before normal use. We explain material limits instead of promising immediate erasure from every backup.

Deleting cloud data does not automatically remove copies on your devices, your exports, material legitimately held by another party, or subscriptions managed by an app store. Disconnecting an assistant stops future authorized access but does not itself delete existing records or copies held by that assistant provider. Product deletion instructions explain the available steps.

7. Providers, connected assistants, and international processing

We use service providers for functions such as hosting, account authentication, storage, subscription validation, communication, and security. Providers must be evaluated for their purpose, necessary access, security, retention, deletion, and applicable contractual requirements. We keep the scope tied to the service being provided.

Information may be stored or accessed outside your country, depending on the product, selected features, provider infrastructure, and support arrangements. A primary database region does not establish the location of every backup, log, service, or support activity. We do not represent that all data stays in one country unless that has been verified for the relevant service.

Where transfer laws apply, we assess the destination and access arrangements and establish the required lawful transfer mechanism and safeguards before relying on that transfer. Publishing this policy alone does not certify a transfer assessment, execute a provider agreement, or establish compliance with a particular international framework.

Optional connected assistants receive only information needed for the authorized task within the supported scope. Their processing is also governed by their own notices and your choices. We do not connect unrelated accounts or broaden the permitted purpose merely because a user enables a connector.

8. Government and third-party requests

Send requests to support@5lineventures.com, identifying the requesting organization, independently verifiable contact details, legal authority, relevant account or product, requested records, and applicable deadline. This contact route does not waive formal service requirements or confer legal authority.

The company owner reviews these requests. We independently verify the requester and assess jurisdiction, authority, validity, scope, and applicable restrictions. An official-looking email or a request from a business partner is not, by itself, a basis for disclosure. We obtain qualified legal advice when needed, including for uncertain, conflicting, or cross-border demands.

We seek clarification, narrowing, or appropriate review of requests that are unclear, excessive, or unsupported. We disclose only information that is legally required or otherwise lawfully authorized for the specific request, through an appropriately protected channel. We do not grant blanket access to systems or unrelated customer records.

We notify affected users before disclosure where legally permitted and appropriate. If notification is prohibited or must be delayed, we document that restriction and consider notice when it is lifted. Emergency requests are assessed under applicable law and verified circumstances; claiming urgency does not remove the need for review.

Valid preservation obligations are handled separately from disclosure. We preserve only the relevant records for the required period, restrict access, and document the basis. We record the request, verification, advice obtained, decision, disclosed categories, recipient, and any notice restrictions.

9. Security concerns and incidents

Report suspected unauthorized access or a data exposure to support@5lineventures.com with “Security concern” in the subject if possible. Describe the affected product and issue without sending passwords, access tokens, or unnecessary customer data. This inbox is not an emergency service.

The company owner assesses reports, limits ongoing exposure, preserves relevant evidence, involves affected providers or qualified assistance as needed, and determines required notices. Applicable legal and contractual notification deadlines take precedence over ordinary support processing. We do not promise an unstaffed round-the-clock response.

10. Records, review, and questions

We maintain a restricted record of requests and decisions: receipt date, product, request type, verification outcome, deadline, actions, exceptions, and completion. This record must contain only what is needed for accountability and applicable legal requirements, rather than unnecessary copies of customer exports or identity documents.

The owner reviews this procedure when products, providers, legal requirements, or processing practices materially change and after a significant incident or process failure. Material updates receive a new effective date and any notice required by law. This version establishes the company procedure from the effective date; it is not a claim that a formal procedure existed earlier.

Questions, concerns, and requests for review can be sent to support@5lineventures.com. You may also contact an applicable privacy regulator where you have that right.