This Privacy Policy explains how Brilliance Digital Group LLC (“Escalated”, “we”, “us”) handles personal information when you visit escalated.dev, subscribe to our newsletter, contact us, or use the hosted Escalated Cloud service once it becomes generally available.

Escalated is an open-source support-ticket system. If you self-host Escalated (for example, by installing one of our framework packages into your own application), your installation runs entirely on your infrastructure, and this policy does not cover the data you collect through it — that is governed by your own privacy practices. This policy applies only to the Escalated marketing site and services we operate directly.

1. Information we collect

We keep data collection to a minimum. Depending on how you interact with us, we may collect:

Information you provide. If you subscribe to our newsletter, open a support request, or create an Escalated Cloud account, we collect your email address, name (if supplied), message content, and any other details you choose to share.
Usage and device information. When you visit escalated.dev we may receive standard server log data (IP address, user agent, referring page, timestamp) and, if you consent to analytics cookies, aggregated page-view metrics used to understand which content is useful.
Cookies and local storage. We use a small number of cookies and browser storage keys described in the “Cookies” section below.
Public GitHub data. Contributor pages display information fetched from the public GitHub API. We do not collect or store GitHub credentials.

2. How we use information

We use the information we collect only to:

operate and secure escalated.dev and, in the future, Escalated Cloud;
respond to inquiries and provide support;
send newsletters you have explicitly subscribed to, and let you unsubscribe at any time;
understand aggregated usage patterns so we can improve the product and documentation;
detect and prevent abuse, spam, and security incidents; and
comply with legal obligations.

We do not sell personal information, and we do not use it to build advertising profiles.

3. Legal bases (EEA and UK visitors)

Where the GDPR or UK GDPR applies, we process personal data on the basis of your consent (for optional cookies and newsletter subscriptions), our legitimate interests in operating and securing the site, performance of a contract (for paid Cloud services, when offered), and compliance with legal obligations.

4. Cookies

Escalated.dev uses three categories of cookies and similar storage:

Essential cookies and local-storage keys required for the site to work (for example, remembering your cookie preferences or language choice).
Analytics cookies that help us understand aggregated visitor behavior. These are only set if you accept analytics in the cookie banner.
Marketing cookies are not enabled by default and will only be set if you explicitly opt in through the preferences dialog.

You can change your choices at any time by clearing your browser’s storage for escalated.dev or by contacting us.

5. Sharing with third parties

We share personal information only with service providers that help us operate the site, such as hosting, email delivery, and analytics. These providers process data on our behalf under contract and are not permitted to use it for their own purposes. We may also disclose information where required by law, to protect our rights, or in connection with a business transfer.

6. Data retention

We keep personal data only as long as needed for the purposes above. Newsletter subscribers are retained until they unsubscribe. Support correspondence is kept for as long as needed to service the request and for a reasonable period afterwards. Server logs are rotated on a short schedule.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to the processing of your personal data, and to withdraw consent at any time. California residents have additional rights under the CCPA. To exercise any of these rights, contact us using the details below. We will respond within the time frames required by applicable law.

8. Children’s privacy

Escalated is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International transfers

Escalated is operated from the United States. If you are located elsewhere, your information may be transferred to, stored, and processed in countries that have different data-protection laws than your own. We rely on standard contractual clauses or other appropriate safeguards where required.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular review of our practices. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice (for example, through the cookie banner or our newsletter).

12. Contact us

Questions, requests, or concerns about this policy can be directed to matthew@matthewpg.com.