PRIVACY POLICY

1. Introduction

TrueNorth Systems LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our cloud-based business management platform ("Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect information necessary to provide and improve our Service. This includes:

2.1 Information You Provide

• Registration & Authentication Data: Personally identifiable information furnished by the data subject during the account provisioning process, encompassing, without limitation, electronic mail identifiers, cryptographic access credentials, and such additional contact particulars as may be requisite for the establishment, verification, and ongoing administration of the subscriber relationship
• Subscriber-Contributed Content: The totality of proprietary commercial data, financial instruments, transactional ledgers, workforce allocation records, contractual documentation, organizational correspondence, and any ancillary operational intelligence that the data subject elects, at their sole discretion, to transmit, deposit, or otherwise render accessible within the confines of the platform infrastructure
• Payment Authorization Particulars: Remittance and billing instrumentation data processed in strict accordance with Payment Card Industry Data Security Standard (PCI DSS) protocols through certified third-party payment facilitation entities — under no circumstances shall complete primary account numbers, card verification values, or analogous sensitive financial identifiers be persisted within our proprietary data repositories
• Digital Asset Transmissions: Electronic files, binary objects, multimedia content, scanned reproductions, and any supplementary digital artifacts uploaded, transmitted, or otherwise committed to platform-managed storage infrastructure by the data subject in connection with their utilization of the Service
• Interactive Correspondence & Telemetry: The substance and metadata of any communications, service inquiries, diagnostic submissions, or feedback transmissions initiated by the data subject through embedded support interfaces, integrated messaging subsystems, or any other interactive communication modalities provisioned within the Service architecture

2.2 Information Collected Automatically

• Usage Data: General information about how you interact with the Service
• Device Information: Browser type, operating system, and similar technical details
• Network Information: IP address, used for security purposes and to approximate your geographic region
• Session Data: Authentication tokens and other data necessary for the Service to function properly

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your subscription payments
• Send transactional emails (account confirmation, password reset, billing receipts)
• Provide customer support and respond to inquiries
• Generate AI-powered insights and recommendations within the platform
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send product updates and feature announcements (you can opt out at any time)

4. Data Storage & Security

Your data is stored securely using industry-standard practices:

• Database: Enterprise-grade cloud database with Row-Level Security (RLS) — your data is isolated and accessible only to you
• File Storage: Encrypted cloud storage with user-specific access policies
• Encryption: All data is transmitted over HTTPS (TLS 1.2+). Passwords are securely hashed
• Authentication: Token-based authentication with automatic session refresh and inactivity timeout
• Rate Limiting: API endpoints are protected against abuse with per-IP rate limiting

While we implement strong security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Sharing & Third Parties

We do NOT sell, rent, or trade your personal information. We share data only with:

• Infrastructure Providers: Cloud database, hosting, and authentication services necessary to operate the platform
• Payment Processor: PCI DSS-compliant payment processing for subscriptions — we never store your full card details
• AI Services: Our AI assistant sends only the minimal context necessary for your query — we do not transmit your full dataset
• Law Enforcement: Only when required by valid legal process (subpoena, court order)

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Export: Download your data using built-in CSV/PDF export features
• Opt-Out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit processing of your data

To exercise any of these rights, contact us at support@truenorthsystems.com.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Your business data is permanently deleted within 30 days
• Backup copies are purged within 90 days
• We may retain anonymized, aggregated data for analytics purposes
• Billing records may be retained as required by tax and financial regulations

8. Cookies, Tracking Technologies & Analytical Instrumentation

The Service employs cookies, pixel tags, and analogous tracking technologies to facilitate platform operations, enhance user experience, and inform business intelligence. The following categories of tracking mechanisms may be deployed:

8.1 Strictly Necessary Cookies

Essential for the fundamental operation of the Service, including session authentication, security token management, and cross-site request forgery (CSRF) protection. These cookies cannot be disabled without rendering the Service inoperative.

8.2 Analytical & Performance Cookies

We utilize third-party analytical services to aggregate anonymized usage telemetry, including but not limited to page navigation patterns, session duration metrics, feature engagement frequency, and user interaction heatmaps. This data is processed in aggregate form and is used exclusively to optimize platform performance and user experience. IP addresses collected through analytical services are anonymized.

8.3 Marketing & Advertising Technologies

The Service may deploy conversion tracking pixels and remarketing tags provided by third-party advertising platforms. These technologies enable us to measure the efficacy of promotional campaigns, attribute subscriber acquisition to specific marketing channels, and deliver targeted advertisements to prospective users across external platforms. Data collected through these mechanisms may be shared with the respective advertising platform operators in accordance with their published data processing agreements.

8.4 Functional & Preference Cookies

These cookies retain user-specified configuration preferences, including language selection, display customizations, and interface state. While not strictly necessary for Service operation, disabling these cookies may result in a degraded user experience.

You may manage cookie preferences through your browser settings. Please note that restricting certain cookie categories may limit the functionality and features available to you within the Service.

9. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your data may be processed and stored on servers located in the United States. By using the Service, you consent to the transfer of your data to the United States, where data protection laws may differ from your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last Updated" date at the top of this page indicates when this policy was last revised.

12. Contact Us

For privacy-related questions or requests, contact us at:

📧 support@truenorthsystems.com

TrueNorth Systems LLC
Florida, United States