← Back to Home

Privacy Policy

Last updated: February 2026

1. Information We Collect

Account information: Email address and password (hashed) when you create an account.

Company information: Company name, website URL, NAICS code, employee count, and state — provided during the discovery process.

Usage data: Compliance status selections, notes, due dates, and uploaded documents that you choose to store in the Service.

2. How We Use Your Information

We use your information to:

  • Identify relevant product recalls from FDA and CPSC databases
  • Provide recall tracking and response management features
  • Store your recall response data (notes, documents, status) for your ongoing use
  • Improve the accuracy of our AI analysis

3. AI Processing

Company information is sent to AI models (Anthropic Claude) to analyze recall relevance to your supply chain. This data is used solely for generating your recall analysis results and is not used to train AI models.

4. Data Storage

Your data is stored on AWS infrastructure (RDS PostgreSQL, S3) in the US West (Oregon) region. Uploaded documents are stored in encrypted S3 buckets. Database connections use SSL encryption.

5. Data Sharing

We do not sell your data. We do not share your data with third parties except as required to operate the Service (cloud infrastructure providers) or as required by law.

6. Data Retention

Your data is retained as long as your account is active. You may request deletion of your account and associated data by contacting us.

7. Security

We use industry-standard security measures including encrypted passwords (bcrypt), SSL database connections, presigned URLs for document access, and server-side API key storage.

8. Your Rights

You may access, update, or delete your data at any time through the Service or by contacting us.

9. Changes

We may update this policy from time to time. We will notify registered users of material changes via email.

10. Contact

Privacy questions may be directed to our support team.