1. Information We Collect

1.1 Information You Provide

• Account & Registration: Name, company name, email address, phone number, billing address, and password when you create an account.
• Billing Information: Payment card details (processed and stored by Stripe — we do not store raw card numbers).
• Business Data: All content you enter into the Service — customer records, job details, quotes, invoices, inventory, equipment records, photos, and any other business information.
• Communications: Messages you send to our support team, survey responses, and feedback.

1.2 Information We Collect Automatically

• Log Data: IP address, browser type, operating system, pages visited, time and date of access, and referring URLs.
• Usage Data: Features used, actions taken, and session duration.
• Device Information: Device type, screen resolution, and browser version.
• Cookies: Session and authentication cookies necessary to operate the Service. See Section 7 for details.

1.3 Information from Third Parties

• Payment Processors: Stripe may share transaction status, billing address, and payment method details with us.
• Email & SMS Providers: Delivery status information from SendGrid and Twilio.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process payments and manage your subscription;
• Send transactional emails (account confirmation, invoices, password resets, subscription notifications);
• Respond to support requests and communicate with you about the Service;
• Send product updates, release notes, and announcements (you may opt out of non-essential communications);
• Monitor and analyze usage to improve and develop the Service;
• Detect, investigate, and prevent fraudulent activity and security incidents;
• Comply with legal obligations.

We do not sell your personal information or your Customer Data to third parties. We do not use your Customer Data to train AI models beyond what is necessary to deliver features you explicitly use within the Service.

3. How We Share Your Information

We share your information only in the following circumstances:

• Service Providers: We share data with trusted vendors who help us operate the Service (Stripe, SendGrid, Twilio, Microsoft Azure, Anthropic). These providers are contractually obligated to use your information only to provide services to us and in compliance with applicable law.
• Legal Requirements: We may disclose information if required by law, regulation, court order, or government request, or if we believe disclosure is necessary to protect our rights or the safety of any person.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice within the Service before such a transfer.
• With Your Consent: We may share information for any other purpose with your explicit consent.

4. Data Retention

We retain your account information and Customer Data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days to allow you to export it, after which it may be permanently deleted.

We may retain certain information for longer periods where required by law, to resolve disputes, or to enforce our agreements.

5. Security

We implement industry-standard technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS);
• Encrypted storage of sensitive credentials;
• Role-based access controls;
• Regular security audits and monitoring.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. In the event of a data breach that affects your information, we will notify you as required by applicable law.

6. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Portability: Request a machine-readable export of your data.
• Opt-Out: Opt out of non-essential marketing communications at any time via the unsubscribe link in our emails or by contacting us.

To exercise any of these rights, contact us at privacy@powdercoatinglogix.com. We will respond within 30 days. We may need to verify your identity before processing your request.

7. Cookies & Tracking

We use cookies and similar technologies to operate and improve the Service. The cookies we use include:

• Essential/Session Cookies: Required to keep you logged in and for security (anti-CSRF). These cannot be disabled without breaking the Service.
• Preference Cookies: Remember your settings such as sidebar state and filter preferences.
• Analytics: We may use aggregated, anonymized usage data to understand how users interact with the Service.

We do not use third-party advertising cookies or sell cookie data to advertisers.

8. Third-Party Services

The Service relies on the following key third-party providers, each with their own privacy policies:

• Stripe — Payment processing: stripe.com/privacy
• SendGrid (Twilio) — Email delivery: twilio.com/legal/privacy
• Microsoft Azure — Cloud infrastructure: privacy.microsoft.com
• Anthropic — AI features: anthropic.com/legal/privacy

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. By using the Service, you consent to the transfer of your information to the United States.

11. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information.

We Do Not Sell Your Personal Information

Powder Coating Logix does not sell your personal information to third parties, and has not done so in the preceding 12 months. You do not need to opt out of a sale because no sale occurs.

Your CCPA Rights

California residents have the right to:

• Know what personal information we collect, use, and disclose about you;
• Delete personal information we have collected from you (subject to certain exceptions);
• Correct inaccurate personal information we hold about you;
• Opt out of the sale or sharing of personal information (not applicable — we do not sell);
• Non-discrimination for exercising any of your CCPA rights.

How to Submit a Request

To exercise your CCPA rights, contact us at privacy@powdercoatinglogix.com with the subject line "California Privacy Request." We will respond within 45 days. We may need to verify your identity before processing your request.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We will require written authorization from you and may verify your identity directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice in the Service at least 14 days before the changes take effect. The updated policy will display a new "Last Updated" date at the top.

Your continued use of the Service after the effective date of any updated policy constitutes your acceptance of the changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: