privacy-policy.md

1. Introduction

AdamEtherzLab ("Company," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our products and services, including ComplianceOS, CorrosionIQ, DispatchIQ, BookingBlitz, ReviewShield, BidForge, RetentionLoop, and CashFlowGuard (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, phone number, and billing address when you register for an account.
  • Payment Information: Credit card numbers, billing details, and payment history processed through our third-party payment processor (Stripe). We do not store full credit card numbers.
  • Business Data: Equipment records, inspection data, compliance documents, customer lists, and other operational data you upload to our Services.
  • Communications: Emails, support tickets, and messages you send to us.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent, click patterns, and interaction data.
  • Device Information: Browser type, operating system, device type, screen resolution, and IP address.
  • Cookies: Session cookies, preference cookies, and analytics cookies (see Section 5).
  • Log Data: Server logs including access times, error logs, and referring URLs.

3. How We Use Your Information

  • Provide, maintain, and improve our Services
  • Process transactions and send related information (invoices, receipts, confirmations)
  • Send technical notices, updates, security alerts, and administrative messages
  • Respond to your comments, questions, and support requests
  • Monitor and analyze usage trends to improve user experience
  • Detect, investigate, and prevent fraudulent or unauthorized activity
  • Comply with legal obligations and enforce our Terms of Service
  • Train and improve our AI models using aggregated, anonymized data only -- never your raw business data

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

  • Service Providers: Third-party vendors who assist in operating our Services (hosting, payment processing, email delivery, analytics).
  • Legal Requirements: When required by law, subpoena, court order, or government regulation.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • With Your Consent: When you explicitly authorize us to share your data.

5. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

  • Essential Cookies: Required for basic site functionality (authentication, security).
  • Analytics Cookies: Help us understand how visitors interact with our site (Plausible Analytics -- privacy-focused, no personal data collected).
  • Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

6. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and vulnerability assessments
  • Role-based access controls and least-privilege principles
  • Automated backup and disaster recovery procedures
  • SOC 2 aligned security practices

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide Services. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records for tax compliance).

8. Your Rights

8.1 All Users

  • Access, update, or delete your account information at any time
  • Export your data in standard formats (CSV, JSON)
  • Opt out of marketing communications
  • Request deletion of your account and associated data

8.2 California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information (we do not sell personal information)
  • Non-discrimination for exercising your privacy rights

8.3 EU/EEA Residents (GDPR)

If you are located in the EU/EEA, you have additional rights including:

  • Right to rectification of inaccurate data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

9. Third-Party Services

Our Services may integrate with or contain links to third-party services. We use:

  • Stripe: Payment processing
  • Supabase: Database and authentication
  • Plausible Analytics: Privacy-focused website analytics
  • Google Calendar: Demo booking and scheduling
  • GitHub: Code hosting and version control

These services have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the U.S., your data will be transferred to and processed in the United States. We take appropriate safeguards to ensure your data is protected in accordance with this policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: