PRIVACY POLICY

1. Scope & Applicability

This Privacy Policy applies to:

• Business customers and authorized users of the Service
• Website visitors
• Prospective customers and partners

The Service is intended for commercial use only and not for personal, household, or consumer purposes.

2. Information We Collect

2.1 Customer Data

"Customer Data" means data uploaded, entered, or generated by customers or their authorized users within the Service, including but not limited to:

• Customer and vendor records
• Job, project, and production data
• Inventory and operational data
• Financial and billing information

Customer Data is processed solely on behalf of the customer and remains their property.

2.2 Account & Business Information

We may collect:

• Company name, address, and contact details
• User names, email addresses, and roles
• Billing and payment information

2.3 Usage & Technical Information

We may collect technical and usage data such as:

• IP address and device information
• Log files, timestamps, and feature usage
• Performance and diagnostic data

This information is used for security, analytics, and service improvement.

2.4 Communications

If you contact us, we may retain records of communications, including emails and support requests.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process payments and manage subscriptions
• Provide customer support
• Improve performance, functionality, and security
• Comply with legal and regulatory obligations

We do not sell Customer Data.

4. Data Retention

We retain data in accordance with the following policy:

4.1 Operational & Analytics Data

• Retained for up to 90 days after termination or cancellation
• Used for support, analytics, security, and data export
• Deleted or anonymized thereafter

4.2 Financial Records

• Retained for 7+ years
• Required to comply with tax, accounting, and regulatory obligations (including SOX where applicable)

After applicable retention periods expire, data is securely deleted or anonymized unless required by law.

5. Data Sharing & Disclosure

We may share information:

• With service providers who support hosting, billing, analytics, and customer support
• To comply with legal obligations, subpoenas, or lawful requests
• To protect the rights, property, or safety of Woodsystems Software Inc., customers, or others

Service providers are contractually bound to protect data and use it only for authorized purposes.

6. Data Processing Addendum (DPA)

Where applicable, Customer Data is processed under our Data Processing Addendum (DPA), which governs:

• Processing roles and responsibilities
• Data protection obligations
• Cross-border data considerations

The DPA is incorporated by reference into this Privacy Policy and the Terms of Service.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect Customer Data against unauthorized access, disclosure, alteration, or destruction.

However, no system is 100% secure, and we cannot guarantee absolute security.

8. User Rights & Choices

Depending on applicable law, users may have the right to:

• Access or correct their information
• Request deletion of data (subject to retention obligations)
• Restrict or object to certain processing

Requests should be directed to the contact information below. We may require verification before fulfilling requests.

9. CCPA Notice (California Residents)

Where applicable, California residents may have rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt out of the sale of personal information

We do not sell personal information as defined under CCPA.

10. GDPR Considerations

To the extent GDPR applies:

• Customers act as data controllers
• Woodsystems Software Inc. acts as a data processor
• Processing is governed by the DPA

11. Cookies & Tracking Technologies

We may use cookies or similar technologies for:

• Authentication and session management
• Security
• Analytics and performance monitoring

You may control cookies through browser settings.

12. Third-Party Services

The Service may integrate with third-party tools. We are not responsible for the privacy practices of third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated with reasonable notice. Continued use of the Service constitutes acceptance of the updated policy.

14. Contact Information