Privacy Policy

This Privacy Policy describes the privacy practices of Laravel Holdings Inc. and its affiliates ("Laravel", "we", "our" or "us") with respect to the personal information we collect through our websites, applications and any other sites or services that we own, operate or maintain that link to this Privacy Policy, including: https://forge.laravel.com; https://vapor.laravel.com; https://envoyer.io; https://cloud.laravel.com; https://nightwatch.laravel.com; https://spark.laravel.com; and https://nova.laravel.com (collectively, the “Service” or "Services").

We collect various types of information about users of our Services ("users", "you" or "your"). The types of information we collect and use depends on how you interact with and use the Services.

Please read this Privacy Policy carefully. Should you have any questions about this Privacy Policy or our data collection, use and disclosure practices, please contact us as set forth below.

Click here to review the personal information we collect from California residents.

Personal Information We Collect

Information you provide to us:

• Contact information, such as your first and last name, address, email address and phone number.
• Account information, such as the username and password you use to access our Services, and other information you provide in connection with the account registration process.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
• Payment information needed to complete your transactions with us, including your name, payment card information and billing information. This information is processed by our payment service provider, Stripe, which may handle your payment information in accordance with its own privacy policy. We do not have access to or store your payment card information.
• Usage information, such as information about how you use the Services and interact with us, including any information you provide when you use any interactive features of the Services.
• Your content and communications, including any information and content you upload to the Services or otherwise submit or share in connection with your use of the Services.
• Marketing information, such as your preferences for receiving communications about our Services, and details about how you engage with our communications.
• Other information that we may collect, which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.

Information we obtain from third parties:

• Social media. We may maintain pages on social media platforms, such as X, LinkedIn, Facebook, GitHub, Discord, YouTube and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
• Third-party login information. When you link, connect, or login to the Services with a third party service (e.g. Google), you direct the service to send us information (e.g., contact information) controlled by that service or as authorized by you via your privacy settings at that service.
• Other sources. We may obtain your personal information from other third parties, such as publicly-available sources, and data providers.

Information we collect Automatically:

We, our advertising partners, and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our website and the Services, our communications and other online services, such as:

• Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state, or geographic area.
• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the website, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them.

We use the following tools for automatic data collection:

• Cookies, which are text files that websites store on a visitor‘s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns. For additional information see our Cookie Policy.
• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
• Session replay technologies. We may use third-party services to record and store users’ interactions with the Services, including users’ clicks, mouse movements, scrolls, text entered, and time spent on our websites during those sessions. These replays help us diagnose usability issues and identify areas for improvement.

How we Use Personal Information

We use personal information about you for the following purposes:

To operate our Services:

It is in our legitimate business interests to use your personal information to:

• Provide, operate, maintain, secure, and improve our Services.
• Provide information about our Services.
• Communicate with you about our Services, including by sending you announcements, updates, security alerts, and support and administrative messages.
• Understand your needs and interests, and personalize your experience with our Services and our communications.
• Respond to your requests, questions, and feedback.

Research and development. As part of these activities, it is in our legitimate business interests to create aggregated, de-identified or other anonymous data from personal information we collect, and to use such anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services, and promote our business.

For marketing and advertising. We, our service providers, and our third-party advertising partners may collect and use personal information for the following marketing and advertising purposes:

• Direct marketing. It is in our legitimate business interests to use your personal information to send you direct marketing communications as permitted by law, including by email. You may opt-out of our marketing communications as described in the "Your rights and choices" section below.

Compliance and protection. We may use your personal information to comply with legal obligations, and it is in our legitimate business interests to use your personal information to defend us against legal claims or disputes, including to:

• Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
• Protect our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims).
• Audit our internal processes for compliance with legal and contractual requirements and internal policies.
• Enforce the terms and conditions that govern our website and Services.
• Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

Sharing of Personal Information

We may share your personal information with:

Service providers. Companies and individuals that provide services on our behalf or help us operate our Services or our business (such as hosting, information technology, customer support, email delivery, billing, fraud detection and website analytics services).

Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, Laravel (including, in connection with a bankruptcy or similar proceedings).

Advertising partners. Third party advertising companies, including for the interest-based advertising purposes described above, which may collect information on Services through cookies and other automated technologies.

Your Rights and Choices

Opt out of marketing communications. You may opt out of marketing-related communications by following the opt-out or unsubscribe instructions contained in the marketing communications we send you.

Cookies. For information about cookies we use and how to control them, see our Cookie Policy.

Personal information requests. We offer you choices that affect how we handle the personal information that we process. Depending on your location and the nature of your interactions with our Services, you may request the following in relation to personal information:

• Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
• Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we no longer need to provide the Services or for other lawful purposes.
• Object to the processing of your personal data.
• Opt out of sharing of your information for advertising purposes.
• Withdraw any consent you previously provided to us regarding the processing of your personal information at any time. We will apply your preferences going forward. This will not affect the lawfulness of the processing before you withdrew your consent.

To make a request, please email us or write to us as provided in the “Contact Us” section below. We may ask for specific information from you to help us confirm your identity. Depending on where you reside, you may be entitled to empower an authorized agent to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.

Depending on where you reside, such as if you reside in the European Economic Area or United Kingdom, you may have the right to complain to a data protection regulator where you live or work, or where you feel a violation has occurred. Click here to find your local supervisory authority in the European Economic Area. If you reside in the United Kingdom, click here. If you reside in Switzerland, click here.

Limits on your privacy rights and choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are not satisfied with how we address your request, you may submit a complaint by contacting us as provided in the “Contact Us” section below. Depending on where you reside, you may have the right to complain to a data protection regulator where you live or work, or where you feel a violation has occurred.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Links to Third Party Websites

This Privacy Policy does not apply to the privacy practices of third parties that we do not own or control, including but not limited to any third party websites, services, applications or online resources that you may access through the Services. We take no responsibility for the content or privacy practices of third party services and we do not imply that we endorse or have reviewed these third party services.

We maintain certain co-branded partnerships which link to third-party services, including Laravel Herd, Livewire, Flux, Laracasts, Laravel News, and Laravel Conferences outside of the United States. We encourage you to carefully review the privacy practices and policies of any third party services you access.

Retention

We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a business need to do so, or as required by law (e.g. for tax, legal, accounting, or other purposes), whichever is longer.

Some features of the Services may allow you to provide content to the Services that is not personal information. All such content submitted by you to the Services may be retained by us as long as necessary according to the applicable law, even after you terminate your account. We may continue to disclose such content to third parties in an anonymized manner that does not reveal personal information, as described in this Privacy Policy.

Data Security

We take reasonable steps (including physical, electronic and procedural measures) to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Please note however, that no Internet or email transmission or electronic storage of information is ever fully secure or error free and we cannot guarantee that such information may not be accessed, disclosed, altered or destroyed. You should take special care in deciding what information you send via the Services. Please keep this in mind when disclosing any personal information.

Children

We do not knowingly collect personal information from children under the age of 16. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal information on the Services without their permission. If you have reason to believe that a child under the age of 16 has provided personal information to us through the Services, please contact us and will delete such information.

Cross-Border Processing of Personal Information

If you provide us with your personal information when using the Services, then please note that we are headquartered in the United States. To provide and operate our Services, it is necessary for us to process personal information in the United States and other jurisdictions that may not provide the same protections as the data protection laws in your home country. We may transfer personal information from the European Economic Area, the United Kingdom, and Switzerland to countries that may not be recognized as having an adequate level of data protection. We rely on appropriate safeguards to transfer your personal information between countries lawfully, including using appropriate contractual protections for such transfers when legally required.

Information for California Residents

The chart below summarizes the personal information we collect by reference to the categories of personal information specified in the California Consumer Privacy Act (“CCPA”), and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.

Categories of Personal Information We Collect	Personal Information We Collect in this Category (See the “Personal information we collect” section above for description)
Identifiers (excluding online identifiers)	Contact details
California Customer Records (as defined in California Civil Code section 1798.80)	Contact details Profile data Communications Marketing data
Commercial Information	Profile data Payment & transactional data Communications Marketing data Online activity data
Financial Information	Payment & transactional data
Online Identifiers	Profile data Device data
Internet or Network Information	Marketing data Device data Online activity data
Inferences	May be derived from the information listed above

Changes to This Privacy Policy

Our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any personal information. Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of any revisions we make to this Privacy Policy.

Contact Us

Please feel free to contact us if you have any questions about this Privacy Policy or the information practices of the Services, or if you have a request to make pursuant to these terms. You may contact us by email at: [email protected] (preferred) or by mail at 60 Broad Street, 24th Floor, #1559, New York, NY 10004.

Last updated: February 25, 2025