Privacy Policy

Certus Ops LLC ("Certus Ops," "we," "our," or "us") respects your privacy and is committed to protecting information collected through our software platform and related services (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard information when you access or use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

• Contact Information: name, email address.
• Account Information: organization name, user credentials (authenticated via WorkOS).
• Business Data: customer-uploaded files, including CSVs and other structured supply chain or operational datasets.
• Communications: inquiries, support requests, and feedback.

1.2 Automatically Collected Information

We may automatically collect limited technical information, such as:

• IP address.
• Device and browser type.
• Log and usage data related to Service access.

2. How We Use Information

We use information to:

• Provide, operate, and improve the Service.
• Authenticate users and manage access.
• Process payments and subscriptions.
• Provide customer support and communications.
• Monitor performance, security, and usage trends.
• Comply with legal obligations and enforce our Terms of Service.

3. Service Providers and Infrastructure

Certus Ops uses trusted third-party providers to operate the Service, including: Stripe for payment processing, WorkOS for authentication and identity management, and cloud infrastructure providers such as Amazon Web Services (AWS) and Vercel. These providers maintain industry-recognized security certifications, including SOC 2 Type II and ISO 27001. Data is encrypted in transit and at rest using commercially reasonable safeguards.

4. Data Ownership and Customer Content

You retain ownership of all business data you upload to the Service. You grant Certus Ops a limited, non-exclusive license to host, process, analyze, and display your data solely to provide the Service to you. Certus Ops does not sell customer data and does not share customer business data with other customers.

5. Data Location and Processing

Customer data is primarily processed and stored in the United States, though limited processing may occur in other regions depending on infrastructure performance and reliability requirements.

6. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect information. However, no system can be guaranteed 100% secure.

7. Data Retention

We retain information for as long as your account remains active or as necessary to provide the Service and comply with legal obligations. Upon termination, data will be deleted or anonymized within a reasonable period unless legally required to retain it.

8. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the Service constitutes acceptance of any updated version.