Privacy Policy
Last updated: 2026-04-22
1. What we collect
- Account details you provide: company name, manager name, phone, email, address.
- Operational data you enter: orders, customers, carpet types, employees, payments.
- Session data: a signed session cookie so you stay logged in.
- Basic server logs (IP, timestamp, request path) for debugging and abuse prevention.
2. How we use it
We use this data only to operate the service, communicate with you about your account, and meet legal obligations. We do not sell it. We do not use it to train third-party models.
3. Cookies
We use one strictly-necessary session cookie so you can stay signed in. We do not use advertising or cross-site tracking cookies.
4. Sharing
We share data only with service providers strictly necessary to run the platform (e.g. an email provider for account setup links) and when required by law.
5. Retention
We retain your data while your account is active. On account closure we delete operational data within 90 days, except where law requires longer retention.
6. Your rights
You can request a copy of your data, correct inaccuracies, or ask us to delete your account by contacting support.
7. Security
Passwords are stored hashed with bcrypt. Sessions use httpOnly, SameSite cookies. We restrict access to production data to a small number of operators.
8. Contact
Privacy questions or data requests? Contact us.