Draft for operational use only. This page is not legal advice and has not been reviewed by counsel. Do not treat it as a finalized policy.
Privacy Policy
What this covers
This draft describes information collected through the public website and authenticated portal: contact form contents, account profile fields, authentication events, and operator-entered confirmed records.
What we do not collect here
This release does not collect bank account numbers, routing numbers, or card data through website forms.
Account data
Administrators create accounts. Profiles may include name, company, email, phone, and notification preferences. Passwords are stored as one-way hashes.
Contact submissions
Messages are stored in the application database and may be emailed to a support or sales address if an email provider is configured.
Cookies
An HTTP-only session cookie authenticates portal users. See the cookie policy for details.
Retention
Retention periods should be set with counsel. Until then, operators should not assume a published deletion schedule.
Contact
Privacy questions can be sent to the configured support email.