Template for review: this text has not been reviewed by a lawyer. Bracketed items must be completed, and the whole document must be approved by qualified counsel before launch.
Who we are
[Company legal name] operates this website and the service. For information our customers put into the service about their own clients, the customer is the controller and we act as their processor under the Data Processing Addendum.
Information we collect
We collect only what we need to run the website and the service:
- Contact and sales forms: name, work email, phone, company, and your message.
- Accounts: name, email, password (stored as a salted hash), two-step sign-in methods, and organization details.
- Billing: subscription and invoice records; card details are collected and stored by Stripe, not by us.
- Usage and security logs: IP address, browser, and actions such as sign-ins and settings changes, kept for security and audit.
- Website analytics: page views and button clicks without cookies, identifiers, or query strings.
How we use information
To provide and secure the service, respond to inquiries, bill subscriptions, send service emails, prevent abuse, and improve the product. We do not sell personal information and do not use customer data to train AI models.
Sharing
We share information with the subprocessors listed on the Subprocessors page, only as needed to provide the service, and when required by law.
Cookies
This marketing website does not set cookies. The application uses a strictly necessary, HTTP-only cookie to keep you signed in.
Retention
Account data is kept while the account is active and for [90] days after cancellation. Sales inquiries are kept for [24 months]. Security logs are kept for [12 months].
Your choices and rights
You can access, correct, export, or delete your information, subject to legal limits. Depending on where you live you may have additional rights. Contact [privacy@factoryterminal.com]; we respond within [30] days.
Security
We protect information with encryption in transit, mandatory two-step sign-in for staff accounts, tenant isolation in the database, and audited support access. See the Security page for details.
Changes and contact
We will post changes here and update the effective date. Effective date: [date]. Contact: [Company legal name], [address], [privacy@factoryterminal.com].