Privacy Policy

1. Information We Collect

1.1 Information You Provide. We collect information you voluntarily provide when you register for an account, subscribe to the Service, submit support requests, or otherwise interact with us. This may include: name, email address, phone number, company name, job title, billing and payment information, and any other information you choose to provide.

1.2 Information Collected Through the Service. When you use the Service, we collect the data and content you input, upload, or store in the platform (“Client Data”), which may include inventory data, pricing information, customer records, order details, and business documents. When we process personal information contained in Client Data on behalf of a business customer, we do so as that customer’s service provider (processor), under our agreement with that customer and our Data Processing Addendum, which is available on request.

1.3 Information Collected Automatically. We automatically collect certain technical information when you access the Service, including: IP address, browser type and version, device information, operating system, referring URLs, pages viewed, time spent on pages, click patterns, and other usage data. We may use cookies, web beacons, and similar technologies to collect this information.

1.4 Information from Third Parties. We may receive information from public business directories and address-lookup services we use (for example, to build our sawmill directory and to map delivery addresses), from business partners, and from publicly available sources.

2. How We Use Your Information

We use the information we collect to: (a) provide, maintain, and improve the Service; (b) process transactions and send related communications; (c) respond to your requests, comments, and questions; (d) send you technical notices, updates, security alerts, and administrative messages; (e) monitor and analyze usage trends to improve user experience; (f) detect, prevent, and address fraud, security issues, and technical problems; (g) comply with legal obligations; (h) create aggregated and anonymized data for analytics and benchmarking; and (i) communicate with you about products, services, and events offered by LumberStax, where permitted by law.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers. We may share information with third-party vendors, contractors, and service providers who perform services on our behalf, such as hosting, database and file storage, email delivery, reading uploaded documents, address lookup, product analytics, error monitoring, and customer support. These service providers are contractually obligated to protect your information.

Current Service Providers. The service providers that currently handle customer data for us are: Supabase, Inc. (database, sign-in and file storage); Vercel, Inc. (hosting); Resend (Plus Five Five, Inc.) (email delivery); Anthropic, PBC (reading uploaded documents); PostHog, Inc. (product usage analytics); Sentry (Functional Software, Inc.) (error monitoring: error reports, the signed-in user’s identity, and session replays used to diagnose problems); and Geocodio (Dotsquare LLC) (converting addresses to map coordinates). All are located in the United States. We keep this list, and the list in our Data Processing Addendum, up to date as it changes.

Document Reading. When you upload a document such as a mill invoice or load paper, the Service sends it to Anthropic, PBC, a third-party artificial intelligence provider, which reads the document and returns its figures (such as line items, quantities and totals) for you to review. Anthropic processes the document only to provide this service to us. The original document and the extracted figures are stored in our own systems.

Legal Requirements. We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of LumberStax, our users, or others.

Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent. We may share information with your consent or at your direction.

Aggregated Data. We may share aggregated or anonymized information that does not identify you individually for analytics, industry benchmarking, and other lawful purposes.

4. Data Security

We implement commercially reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, use, alteration, and destruction. These measures include encryption in transit and at rest, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies. For business customers, Client Data remains available for export for thirty (30) days after a subscription ends and is then deleted as described in our Data Processing Addendum.

6. Your Rights and Choices

Access and Correction. You may access, update, or correct your account information at any time through the Service or by contacting us.

Data Export. You may request an export of your Client Data in a commonly used format.

Deletion. You may request deletion of your personal information, subject to certain exceptions required by law or legitimate business purposes.

Marketing Communications. You may opt out of marketing emails by clicking the “unsubscribe” link in any marketing email or by contacting us. You will continue to receive transactional and service-related communications.

Cookies. Most web browsers allow you to control cookies through browser settings. Disabling cookies may limit your ability to use certain features of the Service.

7. Children’s Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information.

8. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer.

9. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on our website or by sending you a notification. The “Last Updated” date at the top of this policy indicates when the most recent changes were made. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact LumberStax, LLC at privacy@lumberstax.com.