Privacy Policy

This policy explains how ASL LLC, operating as Auto Secure Login, collects, uses, protects and discloses information through autosecurelogin.com, its subdomains, and the applications we operate. It was written from what the software actually does, product by product, and it replaces the policy dated August 18, 2026.

Where a product publishes its own privacy notice, that notice adds detail for that product. It can give you more protection than this policy; it cannot give you less. Section 16 lists the notices that exist today.

1. The short version

• We do not sell, rent or trade personal information, and we do not use it for targeted advertising.
• The public website sets no cookies and runs no analytics or advertising trackers.
• Many of our products keep your data on your own device and send us nothing. Section 6 says which.
• Where a product relies on an outside company — for payments, text messages, delivery to a correctional facility, or an AI model — this policy names the category and, wherever we can, the company.
• Products built for organizations (a therapy practice, a town, a law firm, a repossession company, a supervising agency) hold that organization's records on its behalf and under its instructions.
• You can ask us to access, correct, delete or export your information, and we do not treat you differently for asking.

2. Who we are and how to reach us

ASL LLC is a Colorado limited liability company doing business as Auto Secure Login. For privacy questions or requests, email contact@autosecurelogin.com, open a request at support.autosecurelogin.com, or use the contact form. Security concerns can also be reported through the security page.

3. Information we collect on the website

Visiting a page

Our web server keeps a standard request log for security and troubleshooting: the requesting IP address, the page requested, the time, the response, and the browser and device description your browser sends. Query strings and tokens are masked before they are written. These logs are kept for 14 days and then deleted. The public site sets no cookies, stores nothing in your browser, and includes no third-party analytics, advertising or social-media scripts.

The contact form

If you write to us through the contact form we receive what you type: your name, email address, organization, the audience and subject you choose, and your message. We also record the form version, the time, your language setting and basic connection information, so we can tell a real submission from an automated one.

The form is protected by a bot check run by Cloudflare; that check may set its own short-lived cookie, and Cloudflare's privacy policy governs it. Your message is delivered to our inbox through a transactional email service and kept as long as we need it to answer you and to keep a record of the conversation.

Where a form offers a mobile-number field, providing a number is optional. If you enter one and tick the separate, unchecked consent box beside it, we record that consent — the number, the program you consented to, the consent version, the evidence of consent and the time — because that record is what allows a message to be sent at all. Section 7 explains the messaging programs.

The help assistant

The website's help assistant answers questions from our published content using software we run ourselves; no outside AI company receives what you type. To understand what people ask and improve the answers, we keep the question text and whether you marked an answer helpful. These records are not linked to your identity and do not include your IP address, cookies or account information. Please do not enter passwords, financial details or other sensitive personal information into the assistant.

Support requests

A support request at support.autosecurelogin.com, or from the ASL Support app, becomes a tracked ticket. We receive the name and email address you give us, the product you select, a subject and your message. The subject and body are stored encrypted, and the body is not copied into logs, notification email or web addresses. No account is created. Tickets are kept while the issue is open and for a reasonable period afterwards so we can recognise a repeat problem.

4. Accounts, sign-in and payments

Accounts

Some products need an account. An account is your email address, which serves as your username; a password stored only as a one-way hash; and the security factors you enrol — an email code, a text-message code, an authenticator app, or a security key.

Text-message codes are delivered by our messaging provider. A few products let you sign in with a Google account instead; in that case Google tells us your verified email address and name and nothing else, and Google's privacy policy governs that sign-in.

Signed-in products set a session cookie so you stay signed in; it is essential to the service and is not used for tracking.

Payments and donations

We never see or store card numbers. Card payments, credit packs and donations across our products are processed by Stripe on a hosted checkout page; we receive the payer's name and email address, the amount, the payment status and a confirmation reference, and we keep those records for accounting, refunds, fraud review and disputes, typically for seven years.

Purchases made inside an app store or the Microsoft Store are handled by that store under its own terms, and the store tells us only that a purchase or subscription is active. Donations never unlock features and are not linked to any product account.

5. How we use information

We use information to provide the service you asked for, to answer you, to keep accounts and systems secure, to prevent abuse, to document consent, to bill and refund, to meet legal obligations, and to understand how our products are used so we can fix and improve them.

We do not sell or rent personal information. We do not use it for targeted advertising, and we do not build profiles of you for purposes unrelated to the product you are using. We do not use customer content, messages, recordings, documents or clinical records to train artificial-intelligence models, ours or anyone else's.

6. What each product collects

This is the heart of the policy. Products are grouped by how they handle data. Where a product has its own notice it is linked; that notice adds detail and cannot reduce what is promised here.

Products that keep your data on your device

These send us nothing about you unless the entry says otherwise. If you lose the device or clear its storage, the data is gone; export what you need to keep.

• StubSafe. Pay-statement data stays on your device, in an encrypted vault you unlock with a passphrase. There is no account and no upload. The full app may fetch a signed, read-only list of tax rules over a secure connection; that request carries no payroll data, identity or location. Optional donations go through our payment processor. Notices: full app, quick calculator.
• Kavanah Journal. Photos are sealed on your device under a key derived from a passphrase only you hold; we cannot recover a forgotten passphrase. The journal service does hold your account, journal text, milestones, appointments, family permissions and audit records, so it would not be true to say we hold nothing. Backup to your own cloud storage, where it is offered, uploads only encrypted containers with random file names. Notice: journal.autosecurelogin.com/privacy.
• ASL Recovery Center. Runs on your Windows computer with no account, no analytics and no upload, and the Android companion has no internet permission at all. Recovered files and reports never leave your machine. The purchase is handled by the Microsoft Store.
• ASL PC Steward. Diagnoses the computer it is installed on and uploads nothing automatically. If you choose to connect the optional fleet page to a server you name, that server receives your connection details and the viewer key you enter; nothing is saved to disk. Notice: steward.autosecurelogin.com/privacy.
• ASL Timestamp Anchor. Your file is read on your device and reduced to a fingerprint there. Only that fingerprint is sent, directly to an independent public timestamp authority we neither run nor fund. We do not receive the file, its name or its fingerprint.
• SignalLab. Authorizations, the audit trail and withdrawals live in your browser on your device. There is no account, no server-side copy and no telemetry. The site's contact form is delivered to our inbox by email. Notice: signallab.autosecurelogin.com/privacy.html.
• BandSight. Survey observations are stored on the device, and location tagging is switched off on the live site. The Android app is installed directly on request. Notice: bandsight.autosecurelogin.com/privacy.html.
• ASL Shredder. Does not hold your data and does not want a copy. It acts on an item where it already lives, receives only an opaque reference to it, and issues a signed receipt that claims only what was proven. The personal apps are not yet distributed.
• ASL Vault. The self-hosted server runs on a machine you control. The native Android app is a separate, offline-only local vault: no account, network access, telemetry, advertising SDK, push-notification registration, or synchronization with the server Vault is required or provided. Only entry values are sealed; names, categories, descriptions, timestamps, and local audit metadata remain readable while locked. Never put a secret in those fields. The passphrase is not stored or sent to ASL, and ASL cannot reset it or recover a lost passphrase. The app disables Android app/cloud backup and stores its vault in internal app storage. An encrypted export contains wrapped keys, sealed values, metadata, and the audit chain, not the passphrase. Export/import uses the Android system file picker only at your request; a destination provider may upload or retain your export under its own policy. Deleting a record or uninstalling does not remove previous exports or guarantee forensic erasure. The local audit chain is a consistency check, not a signed or tamper-proof record. At capacity the app warns when new audit events cannot be saved; existing reads and exports remain available. Website, support-message, or store-purchase processing described elsewhere in this policy does not mean that this offline app uploads your vault. Contact us separately for support without sending passwords, private keys, or vault contents.
• ASL Doctor Search. Searches public federal provider records with no account, and a search is not tied to your identity. To avoid asking the registry the same question repeatedly, an identical query may be answered from a short-lived working copy held only in memory. Optional donations go through our payment processor.
• HomelessHelper. Finding help needs no account. If you allow location access it is used to find listings near you and is not kept by us. The directory needs a connection; no offline copy is stored. Providers and volunteers who claim or submit listings sign in with an Auto Secure Login account, and their submissions, claims and review actions are recorded. Notice: homeless.autosecurelogin.com/privacy.
• Policy Lens. No account. Your question runs the search and is not kept: durable logs hold a one-way fingerprint and operational identifiers, never the wording. Your language choice is stored in your browser.
• Colorado Complaint Access — public search. The rule, standards, license and provider searches hold no personal, license or case information and ask you not to enter names, case numbers or complaint facts. Your questions are not kept as text. The telephone complaint service is described separately below.
• ASL Games. Playing offline sends nothing anywhere. Online play and friends need one Auto Secure Login account, which is your email address, and the matchmaking service records who is in which match. Nearby-device play uses your phone's short-range wireless to find players in the same room; where Android requires location permission for that discovery, it is used only for the discovery. The games are installed by direct download, are not moderated, and are not intended for children.
• ASL X-Ray Lite. Reads an app package on your phone and sends nothing to us.
• ASL Aegis companion. The SSH key and profile you import are encrypted on the device and sent only to the server you choose, as the SSH protocol requires. We collect nothing.

Products with accounts and hosted data

For these products we hold data on our systems so the product can work. Each entry says what, why, and for how long.

• Aya Scam & Privacy Lookup. A verified account is required, with a lawful-purpose acknowledgment. Your lookups, text checks, voicemail reviews and saved contacts belong to your account and are not sold or used to build a profile for anyone else. Your phone's contact list never leaves your device; the service sees only the single number you choose to check, which it sends to independent phone-data sources to obtain identity, carrier, line-type and risk evidence. Credits are bought through our payment processor or the app store.
• APMSG. Family accounts and the contact details, messages and voicemails exchanged with a person inside. Our policy is to keep voicemail recordings no longer than 30 days. Payment and transaction records may be kept up to seven years, and security, consent, delivery and abuse-prevention records up to two years. Account closure is by email request and is handled within 30 days; it does not yet cascade automatically to every stored record, so we complete it by hand. Live calling, messaging and payments are not switched on today.
• Outside Access. A sponsor account, credit purchases through our payment processor, the requests you or your person send, and the answers and up to five images delivered back. Requests are classified, researched and drafted with the help of an outside AI provider, which receives the request text and not your account details. Delivery runs through a third-party correctional messaging service using the service's own authorized account — you are never asked for your own messaging sign-in, and there is no field that would accept it. Auto Secure Login is not affiliated with or endorsed by that messaging provider, whose rules and monitoring apply to anything delivered. Notice: outsideaccess.autosecurelogin.com/privacy.
• ASL AI Hub. Your workspace, the provider accounts you connect (credentials are encrypted per workspace), and a tamper-evident receipt for each step that records which provider and model handled it and why. Your prompts are passed to the provider you approved and are not stored by AI Hub; they do not train the router. Checkout runs against a sandbox, and no live charges are taken today.
• ASL Tunnel. Your account, device and tunnel names, route settings, last-seen times and traffic counters. Traffic to a tunnel passes through our relay to reach your machine; we keep connection metadata and counters and do not store request or response content. Tunnel names are permanent by design and are never released, even after deletion.
• ASL Meet. A host account; guests give only a display name. Calls are encrypted in transit and prefer a direct connection; when a network blocks one, a relay we run carries the encrypted stream and cannot open, read or keep it. We do not create or store recordings, screenshots or chat. Room, session and security records — including any email address you send an invite to — are deleted with the meeting's administrative record after 30 days.
• ASL Files. Encrypted file storage behind other ASL products. The service holds the key that unlocks a file in order to serve it back, so it can read a file; it is not end-to-end encrypted and we will not tell you otherwise. File names, types and sizes are stored as ordinary text in the index, so a file name should never contain something confidential. Secure-send links expire on the schedule and open count you choose.
• ASL Messaging. Text conversations inside the ASL product your organization uses, protected in transit and kept on systems we run. They are not end-to-end encrypted: an administrator of the underlying system could read them, as with most business chat.
• ASL Tickets. Requests raised inside a carrying product. The queue is shared with everyone in your organization who can open it; a request is not private from colleagues. Files are attached by reference to ASL Files, never stored in Tickets. There is no delete route in the product today, so retention follows this policy and your organization's workflow. Tickets is not cleared for clinical or protected health information, and its form says so.
• ASL Help Engine. Cited product help. Its activity record keeps which collection was asked, which evidence was used, the verdict and the content version, plus a one-way fingerprint of the question — never the question text or the conversation. Ledgers are pruned after 90 days.
• Pillow Pair. Front and side photos are analysed on your own device and never uploaded; only the resulting measurements enter the recommendation. Guest mode keeps your profile on the device, but the browser version sends de-identified operational counters, and a check-in you complete as a guest is posted anonymously, including any free-text note. With an optional account we store the questionnaire, fit estimates, saved results and follow-ups — health-related information — and you can export or delete the account in the app. Notice: pillowpair.autosecurelogin.com/privacy.
• PlateScan (early-access app). No account. The app sends a photo only after you accept the PlateScan Terms of Service, under which training the reader on what you send is part of the service: it re-encodes the photo on your phone, which drops location and camera metadata, and sends it with your country, state and vehicle answers over an encrypted connection, through our own relay, to our own reader in Colorado. The reader returns each plate it can read with a crop of the part it read, and you say whether each read is right. The working copy is deleted when the result is ready and the result record after 24 hours; the photo, its plate crops and your answers are kept as training data until you delete them from the result screen, from About with the submission id, or by emailing us that id. The app holds one random token, stored by us only as a hash, so only your phone sees your results. Other plates in the photo are kept with it, so send only photos you have the right to share. No outside company receives any of it. Notice: autosecurelogin.com/privacy/platescan.
• WIC Companion. Your email address and any dollar amount you enter are stored encrypted, your password only as a one-way hash, and a reminder's category and date in readable form so it can be scheduled. Store lookups send the retailer your categories and a postal code, never your identity. The optional state-agency sharing box records a preference, and nothing is sent anywhere. You can permanently delete the account in the app. Notice: WIC Companion privacy notice.
• ASL X-Ray Pro. The app package you upload, and everything recovered from it, are deleted as soon as the job reaches a final state. The report is kept for 24 hours by default and then expires. Job records hold a pseudonymous owner reference, never your email or name. Accounts with an administrator role can see every job. Notice: apk.autosecurelogin.com/privacy.html.
• ASL Verifier. Compares a live face to the face on the person's own identity document, one to one, and never searches a database. The image is held in working memory for the length of one request, compared, and cleared; there is no upload folder and no retention path. What survives is a record of the decision with a keyed one-way subject digest. A face result never authorizes a sign-in on its own.
• ASL Voice Lab. In the hosted workspace, enrolment recordings, transcription audio and anything sent to the analysis room travel to speech engines we run — not to any outside AI company. A voice recording is encrypted the moment it is stored and decrypted only to reach those engines; it is not pooled, shared, sold or used to train anything for anyone else, and revoking a voice removes the reference. Mixing and editing happen in your browser. A voice profile is a creative asset, not proof of identity.
• Viavitna (hosted plan). With an owned licence nothing leaves your building. On the hosted plan your approved content sits with us, and the content-gap record stores keyed fingerprints, counts and languages of visitor questions — never their wording. Notice: viavitna.com/privacy.html.
• Network Sentinel. Your device inventory lives in your deployment and is reachable only with a credential we issue. Manufacturer matching runs against a public registry held locally; nothing is sent to a third-party device-lookup service. Phone alerts travel through Google's push service, as all Android notifications do. Notice: sentinel.autosecurelogin.com/privacy.html.
• ASL Scan. Evidence keeps counts and yes/no facts — is the firewall on, is disk encryption active — and not the underlying content: no passwords, tokens, file contents or network addresses. Retention is defined per engagement. Analysts see normalized results first, and raw evidence access is exceptional and logged.
• ShopFit. The free audit needs only a web address. If a merchant connects a store, ShopFit receives the access the merchant grants through the storefront platform; store credentials are encrypted at rest, and no generated change reaches a live store without the merchant's approval. Drafting uses an outside AI provider on the catalog content the merchant supplies.
• SiteFit. Reads only what a visitor's browser could already request from your public pages. We keep the report and can re-send it, and scheduled digests are emailed after every run. It collects no analytics events from anyone's website.
• ASL Supervision. Court-authorized device monitoring operated by a supervising agency, which decides scope. Every category is off unless the agency's authorization turns it on, and the supervised person's device reports only within that scope. The agency is responsible for lawful basis, notice and records schedules; we hold the records for the agency.

Products where an organization is the controller

These products hold an organization's records — its clients, residents, callers, employees or customers — on that organization's behalf and under its written agreement with us. We act on its instructions. If you are a client, resident or employee of one of these organizations, your privacy rights run first through that organization, and we will route a request you send us to it.

• ASL Therapy. A practice's scheduling, notes, billing, client portal and reporting. Protected health information is encrypted at rest, every access is recorded in a hash-chained audit trail, sign-in requires a second factor, and who may see each client is checked on every request. A practice that is a HIPAA covered entity must have a business associate agreement with us before it stores protected health information in the product, and a practice is switched on for real clinical records only after a written activation review. A signed clinical note cannot be deleted through the product. Software provides HIPAA-ready safeguards; compliance is the practice's program. Notice: therapy.autosecurelogin.com/privacy.
• ASL Municipal Utilities. A town's resident accounts, service addresses, meter readings, bills, payments and work orders. Staff location sharing exists only as explicit, opt-in sharing sessions; there is no covert tracking. Online card payment and text messaging are built but stay off until the utility connects its own accounts. Map tiles are requested through our server so that no map key reaches your browser. Notice for the town running it today: sugarcityco.com/privacy.
• ASL Intake. A firm's callers, matters, time, billing and trust ledger. Telephone intake is transcribed, not recorded, and the caller is told so; speech recognition is performed by a speech provider. A caller who consents receives a text-message link to an encrypted form whose contents go straight to storage the firm owns, under a key we do not hold — we cannot open those submissions, and neither can anyone if the firm loses its key. Names, contact details, dates and legal facts entered into the workspace are held for the firm. Notice: intake.autosecurelogin.com/privacy.
• Repo Runner. A repossession company's cases, vehicles, evidence, messages, employee location points and payment references. There is no background location permission and no hidden collection. Eligible location points, messages and evidence files are deleted after 30 days, encrypted backups after 30 days, and legal holds are reviewed every 90 days and never release automatically. Every signed-in user can export their own data.
• Colorado Complaint Access — telephone complaint service. A caller's contact details, the transcript, the complaint narrative, supporting evidence and the generated documents, each encrypted under a per-case key. Automated systems transcribe, organize facts and draft documents; a complaint is an allegation, and the receiving agency decides. Detailed records are deleted about 72 hours after filing confirmation or document delivery; a minimal ledger without the caller's identity, and non-identifying statistics, are kept longer. The $5 telephone fee is collected inside the telephone payment system and processed by our payment processor; we never receive card details.
• ASL Command Center. Our own internal operations console. It carries the health status each product reports about itself, counts and work items; it does not carry client records, clinical content, message bodies or card details.

Research programs

FaceScan, FaceOff, the PlateScan reading engine and ASL Product Vision are research programs, not products offered to the public. They process only generated data, licensed public data, or material explicitly supplied and authorized by the people who own it. No face-matching engine in them has been trained on a real person's photograph; consent is recorded at every step of the character pipeline; plate work runs from recorded material with a person confirming any retained record; and product photographs never leave the machine they are analysed on.

The PlateScan app is a separate early-access service, described under PlateScan above. If you are ever invited to take part, you will receive a specific notice first.

7. Text messages and voice calls

Every messaging program is opt-in. A mobile number by itself is not consent: a message can be sent only after you tick a separate, unchecked box for a named program, and that consent is recorded with the number, the program, the consent version and the time.

Reply STOP to any message to opt out and HELP for help; we may send one final confirmation. Message frequency varies and message and data rates may apply. Consent is not a condition of purchase, account creation or access to a core feature. We do not sell your personal information.

No mobile information or SMS opt-in and consent data is shared with third parties or affiliates for their own marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

Every program has a public consent page in the messaging consent directory and program terms in the messaging terms. Messages and two-factor codes are delivered by our messaging provider, which receives the number and the message content in order to deliver them.

Telephone services — ASL Intake and the Colorado complaint line — tell you at the start of the call whether the call is transcribed and obtain any separate consent that recording would require. Recording is not enabled in the current configuration of either service.

8. Service providers and other recipients

We share information with outside companies only so they can do a specific job for us, under contract, and they may not use it for their own purposes. Naming them is part of being accountable:

• Hosting and backups. Our services run with a United States cloud infrastructure provider in the New York region. Encrypted backups are stored in that provider's object storage in the same region and, for some products, on equipment we control in Colorado. Source code — never customer data — is mirrored to a code-hosting service and a cloud drive.
• Twilio delivers text messages, two-factor codes, telephone calls and transactional email, and provides the phone-number lookup behind Aya.
• Stripe processes card payments, credit packs and donations on its hosted checkout; we never hold card numbers.
• Cloudflare runs the bot check on our forms.
• Google provides app distribution and in-app billing where an app is listed, optional Google sign-in for some products, push delivery for Android alerts, the on-device barcode scanner in WIC Companion and, for Kavanah Journal users who choose it, the drive that receives encrypted backup containers.
• Microsoft distributes ASL Recovery Center through the Microsoft Store.
• AI providers. Some products send content to an outside AI model to classify, research, draft or transcribe. Across the platform those providers are OpenAI, Anthropic and Google; AI Hub additionally connects to whichever providers a customer approves, on the customer's own accounts. We minimise what is sent, do not send account details with it, and use the providers' no-training and retention controls where they are offered. Products that use no outside AI at all: the website help assistant, Viavitna on an owned licence, ASL Voice Lab, Policy Lens, ASL Help Engine, ASL Support and ASL Command Center.
• A speech-recognition provider transcribes telephone intake and complaint calls.
• A correctional messaging service delivers Outside Access answers to the person inside. We are not affiliated with it, and its rules, monitoring and delivery decisions apply.
• Retail and map providers. WIC Companion sends a retailer your categories and postal code for stock and aisle information, never your identity. Municipal Utilities requests map tiles from a map provider through our server.
• A public timestamp authority receives a file fingerprint directly from ASL Timestamp Anchor; we are not in that path.
• Public data sources such as the federal provider registry, federal and state resource datasets and Colorado's published rules and license records are read by our products; we send them nothing about you.
• Your storefront platform, for ShopFit, when you as a merchant grant access.

We may also disclose information when the law requires it — a valid subpoena, court order or legal reporting duty — or when reasonably necessary to protect someone from imminent serious harm, to investigate fraud or misuse, or to protect legal rights. If ASL LLC or a product is sold or reorganized, information transfers only under this policy or protections at least as strong, and content scheduled for deletion is not retained to increase a sale price.

9. Sensitive information

We collect these only for the purpose the product exists for, we do not use them for anything else, and Section 8 lists who else touches them.

10. Security

Every service is reached only over encrypted connections. Products that hold sensitive records encrypt them at rest with authenticated encryption, in several products under keys derived per case, per workspace or per user. Sign-in to our platform requires a second factor. Application services are not reachable from the internet directly; a single public gateway forwards only the paths that must be public.

Access to records is checked on every request, and the products built for regulated work keep tamper-evident audit trails. Backups are encrypted, and we test that they restore. Our review and testing are our own work, run in-house and documented; we do not describe them as an independent audit.

No system can guarantee absolute security, and we say so plainly.

If we discover a security incident affecting your personal information, we will investigate, contain and document it and give the notices Colorado law and any other applicable law require, without unreasonable delay.

11. Retention

We keep information only as long as its purpose needs it, and then delete it. Where a product has a specific schedule it is stated in Section 6: 14 days for web server logs; 24 hours for an X-Ray report and for a PlateScan result record; 30 days for a Meet meeting record and for Repo Runner location points, messages and evidence; about 72 hours for detailed complaint-line records; 90 days for Help Engine activity ledgers; and, for APMSG, up to two years for security and consent records and up to seven years for payment records.

Payment and accounting records across products are kept for the period tax and accounting rules require. Deletion may be delayed by a legal hold, a valid preservation demand, an active security investigation or a documented dispute, and access stays restricted while it is delayed. Where an organization is the controller, its retention schedule and our agreement with it govern.

12. Your rights and choices

Whoever you are and wherever you live, you can ask us to confirm whether we hold personal information about you, to give you access to it, to correct it, to delete it, to give you a portable copy, to withdraw a consent for future processing, or to stop a communication.

Colorado residents have these rights under the Colorado Privacy Act, together with the right to opt out of the sale of personal data, targeted advertising and profiling — none of which we do — and the right to appeal a decision on a request. We will not treat you differently for exercising a right.

Many products let you act directly: WIC Companion and Pillow Pair delete an account in the app; PlateScan deletes a submission by its id; X-Ray jobs expire on their own; Repo Runner exports your data from the audit page; SMS consent ends with STOP.

Send any other request to contact@autosecurelogin.com. We will verify that the request comes from you, respond within 45 days, and tell you if we need longer. If we hold your information for an organization, we will forward the request to it and help it respond.

Because several products delete detailed records quickly, we may no longer hold what you ask about.

13. Children

Our websites and services are not directed to children under 13, and we do not knowingly collect personal information from them. Kavanah Journal is used by parents and caregivers to record information about their own children; the parent is our user. ASL Games portray adult institutional conflict, have no age verification, and are not intended for children. If you believe a child has given us personal information, contact us and we will delete it.

14. Where information is processed

We are a Colorado company and our services are hosted in the United States. If you use them from elsewhere, your information is processed in the United States under United States and Colorado law.

15. Changes

When this policy changes we post the new version with a new effective date. If a change would use previously collected sensitive information for a materially different purpose, we will ask for your consent first where the law requires it. The date at the top tells you which version you are reading.

16. Product notices

Every product has its own notice on this site. Each one adds detail to this policy for that product and links to any further notice the product publishes inside itself; a product notice can add protection, never remove it.

• APMSG
• ASL AI Hub
• ASL Doctor Search
• ASL Files
• ASL Games
• ASL Help Engine
• ASL Intake — also publishes its own notice
• ASL Meet
• ASL Messaging
• ASL Municipal Utilities — also publishes its own notice
• ASL PC Steward — also publishes its own notice
• ASL Recovery Center
• ASL Scan
• ASL Shredder
• ASL Supervision
• ASL Therapy — also publishes its own notice
• ASL Tickets
• ASL Timestamp Anchor
• ASL Tunnel
• ASL Verifier
• ASL Voice Lab
• ASL X-Ray — also publishes its own notice
• Auto Secure Login Platform
• Aya Scam & Privacy Lookup
• BandSight — also publishes its own notice
• Colorado Complaint Access
• HomelessHelper — also publishes its own notice
• Kavanah Journal — also publishes its own notice
• Network Sentinel — also publishes its own notice
• Outside Access — also publishes its own notice
• Pillow Pair — also publishes its own notice
• PlateScan
• Playwright Selector Toolkit
• Policy Lens
• Repo Runner
• ShopFit
• SignalLab — also publishes its own notice
• SiteFit
• StubSafe — also publishes its own notice
• Viavitna — also publishes its own notice
• WIC Companion

The privacy directory keeps this list current.

17. Contact

ASL LLC, operating as Auto Secure Login, Colorado, United States. Email contact@autosecurelogin.com, open a support request at support.autosecurelogin.com, or use the contact form.