Welcome to Project Sarah™ ("Sarah," "we," "us," or "our"), a software product developed, owned, and operated by Socrates Asset Management Ltd. ("Socrates"), a federal Canadian corporation. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our services.

We are committed to protecting your privacy and maintaining transparency about our data practices. Project Sarah™ is built with privacy-first design principles, meaning gameplay analysis and computer vision features run locally on your device, not on our servers.

This Privacy Policy applies to the following services provided by Socrates:

• Our website and online store: https://projectsarah.io
• Our software: all editions (Sarah Unlocked™, Sarah Live™, Sarah Unlimited™, Founder's Edition™)
• Our license service: https://license.projectsarah.io
• Our support and customer service channels

When you purchase or contact us through our Shopify storefront, we and Shopify (acting as our service provider) may process information such as:

• Contact information: email address and name (if provided)
• Order information: products purchased, order ID, timestamps, and refund/chargeback details
• Billing and shipping information: only if you provide it for digital product delivery
• Payment information: processed by Shopify and payment providers; we do not store full card numbers

To activate and protect your license, Project Sarah™ may communicate with our license service and we may process:

• Your License Key and license status
• Machine identifier ("machine_id"): a device-bound identifier used to lock your license to one device
• Activation and verification metadata: timestamps, product edition, and verification results

The "machine_id" is designed as a one-way, non-human-readable identifier derived from system signals and transformed (e.g., hashed) to enforce one-device licensing and prevent abuse.

If you contact us for support (e.g., activation issues, technical questions), we will receive the contents of your message and may request diagnostic details you choose to share. Please do not send sensitive information you do not want stored in a support ticket.

Like most websites and APIs, our servers and service providers may temporarily process basic technical data for security and reliability, such as:

• IP address and request metadata (time, endpoint requested)
• Device and browser headers (user agent, language preferences)
• Error and security logs (rate limiting, abuse prevention)

We do not use this data to build advertising profiles or track you across websites.

Project Sarah™ is designed to protect your privacy. We do NOT collect or upload the following from your gameplay sessions:

• Gameplay screenshots, video feeds, or camera/monitor captures for cloud processing
• Your in-software decisions, betting history, or gameplay analytics for marketing profiling
• Personal gaming data or strategy information

Note: Project Sarah™ may create local files on your device (e.g., logs or exports) depending on the edition and features you use. Those files remain on your device unless you choose to share them with us for support purposes.

Our storefront is built on Shopify. Shopify uses cookies and similar tracking technologies necessary for core functionality such as:

• Shopping cart and checkout functionality
• Session and security controls
• Fraud prevention and abuse detection

If we add optional analytics or advertising technologies in the future, we will update this policy and provide additional choices and controls where required by law.

We use the information we collect for the following purposes:

• Order fulfillment: deliver downloads, product keys, and purchase confirmations
• Licensing: activate, verify, and enforce one-device licensing
• Customer support: respond to requests and troubleshoot technical issues
• Security: prevent fraud, abuse, piracy, and attacks against our services
• Legal compliance: meet legal obligations and enforce our Terms of Use and EULA
• Service improvement: analyze usage patterns and improve user experience

Depending on your jurisdiction, our processing of your information may rely on the following legal bases:

• Contract: to provide the product you purchased and operate licensing services
• Legitimate interests: to secure our services, prevent abuse, and protect our intellectual property
• Legal obligations: to comply with tax, accounting, and regulatory requirements
• Consent: where required for optional cookies, marketing communications, or other processing

We share information only with service providers necessary to operate Project Sarah™ and our services, such as:

• Shopify: ecommerce platform and order processing
• Email delivery provider: to send purchase confirmations, license keys, and essential product notices
• Hosting and security providers: to run the storefront and license service

We do not sell, trade, or rent your personal information to third parties for marketing purposes. We may disclose information when required by law, court order, or government request.

Shopify and our service providers may process data in Canada, the United States, and other countries. Where required by law, we use appropriate safeguards for cross-border data transfers, including standard contractual clauses and adequacy decisions.

We retain your personal information for the following periods:

• Orders: retained as required for business records, tax compliance, and accounting purposes
• Licensing records: retained while your license is active and for a limited period afterward for security, dispute resolution, and enforcement
• Support tickets: retained as needed to resolve issues and maintain service quality

If a license is revoked or deactivated, we aim to delete or de-identify related licensing identifiers within a reasonable period unless we must retain them for legal or security purposes.

We use reasonable administrative, technical, and organizational safeguards to protect your information, including HTTPS encryption in transit and access controls. However, no system is 100% secure. You use our services at your own risk, and we encourage you to use strong passwords and protect your License Key.

Depending on your jurisdiction, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the General Data Protection Regulation (GDPR), you may have rights to:

• Access: request access to your personal information
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information (subject to legal exceptions)
• Opt-out: opt out of marketing communications
• Data portability: receive your information in a portable format
• Withdrawal of consent: withdraw consent for data processing

License note: if you request deletion of licensing identifiers required to verify your license, Project Sarah™ may no longer be able to authenticate your software and it may stop functioning.

Project Sarah™ and our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information and terminate the child's access to our services.

Socrates may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last Updated" date above. Your continued use of our services after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions about this Privacy Policy, concerns about your privacy, or wish to exercise your privacy rights, please contact us:

Socrates Asset Management Ltd.
Email: privacy@projectsarah.io

We will respond to your inquiry within thirty (30) days.