Legal

Privacy Policy

Last updated: [EFFECTIVE DATE]

Draft — not yet legal advice. This is a template starting point. Bracketed placeholders (legal entity, jurisdiction, effective date) must be filled in and the whole document reviewed by a licensed attorney before it is relied upon.

This Privacy Policy explains how [LEGAL ENTITY NAME] ("we", "us") collects, uses, and shares information when you use RemnantFlow (the "Service"). It applies to shop operators and staff who use the Service and, where noted, to visitors of the public storefronts we host.

1. Information we collect

Account information: name, email, role, and the shop you belong to.
Inventory content: remnant and slab records, photos, dimensions, pricing, rack locations, and storefront branding you upload.
Customer selections: contact details and choices that customers submit through a storefront or share link.
Usage and device data: log data such as IP address, browser type, pages viewed, and timestamps, used to operate and secure the Service.
Payment data: handled by our payment processor; we do not store full card numbers.

2. How we use information

We use information to provide, maintain, secure, and improve the Service; to authenticate users and enforce plan limits; to display your storefront and (where you opt in) network inventory; to communicate about your account; to process payments; and to comply with legal obligations.

3. How information is shared

Within your shop: your team members see your shop's data according to their role.
Public storefronts: inventory you publish is visible to anyone with the link.
Inventory network: if you opt in, a limited, reciprocal view of your inventory is shown to other participating shops. Contact details exposed to the network are limited (for example, phone and email — not rack locations or street address).
Service providers: cloud hosting, database, email, and payment processors that process data on our behalf under contract.
Legal and safety: where required by law or to protect rights, safety, and the integrity of the Service.

We do not sell personal information.

4. Storage and security

Data is stored with our cloud and database providers. We apply administrative and technical safeguards — including tenant scoping so a shop's data is not exposed to other tenants, hashed secrets for API keys, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data retention

We keep information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. After account closure we delete or de-identify data after a reasonable period, subject to backups and legal requirements.

6. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Shop managers can manage most account and inventory data directly in the app. For other requests, contact us using the details below. We will respond as required by applicable law.

7. Cookies and similar technologies

We use strictly necessary cookies and similar technologies to keep you signed in and to operate the Service. Where required, we will provide additional controls or notices for non-essential cookies.

8. Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

9. International users

We may process and store information in countries other than yours. Where we transfer personal information across borders, we take steps to protect it as required by applicable law.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. The "last updated" date at the top reflects the latest revision.

11. Contact

Questions or requests about this policy? Contact us at hugo@remnantflow.com.