Privacy Policy

1. Information We Collect

Account Information

• Email address (for login and notifications)
• Password (encrypted, never stored in plain text)
• Subscription tier and billing information
• Account creation date and usage history

Business Data You Provide

• Company name, address, and tax identification numbers
• Product component descriptions and specifications
• HS codes and tariff classifications
• Origin countries and manufacturing locations
• Trade volumes and supplier information
• Regional Value Content (RVC) calculations

Automatically Collected Data

• Browser type and version
• IP address (for security and fraud prevention)
• Pages visited and features used
• Session duration and timestamps
• Error logs for debugging purposes

2. How We Use Your Information

• USMCA Analysis: Processing your component data to calculate qualification status and tariff savings
• Certificate Generation: Populating USMCA Form D certificates with your business information
• Policy Alerts: Matching your products to relevant Section 301/232 tariff policy changes
• Account Management: Tracking subscription usage, billing, and authentication
• Platform Improvement: Analyzing aggregate usage patterns to improve features
• Security: Detecting and preventing fraudulent or unauthorized access
• Legal Compliance: Meeting regulatory requirements and responding to legal requests

3. What We DO NOT Do

• We DO NOT sell your data to third parties
• We DO NOT share your component specifications with competitors
• We DO NOT use your business data to train public AI models
• We DO NOT provide your information to marketing companies
• We DO NOT disclose your supplier relationships to anyone

4. Data Retention

• Workflow Sessions: Retained until you delete them or close your account
• Completed Certificates: Retained for 5 years to comply with CBP audit requirements
• Account Information: Retained as long as your account is active
• Usage Analytics: Retained in aggregated, anonymized form indefinitely
• Billing Records: Retained as required by tax and financial regulations

Why 5-Year Retention? U.S. Customs and Border Protection (CBP) requires USMCA certificates to be kept for 5 years from the date of importation for audit purposes. We retain your certificates to help you meet this compliance requirement.

5. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted via HTTPS/TLS encryption
• Password Security: Passwords are hashed using bcrypt (never stored in plain text)
• Database Security: Supabase PostgreSQL with row-level security policies
• Authentication: Secure JWT tokens with httpOnly cookies
• Access Controls: Role-based permissions and audit logging
• Infrastructure: Hosted on Vercel with enterprise-grade security

6. Third-Party Services

We use the following third-party services:

• Supabase: Database hosting (your data is stored here securely)
• Vercel: Application hosting and deployment
• Stripe: Payment processing (we never see your full credit card number)
• OpenRouter/Anthropic: AI services for HS code classification (data processed but not stored by them)

Each service has its own privacy policy and security certifications. We only share the minimum data necessary for them to provide their services.

7. Your Rights

You have the right to:

• Access: Request a copy of all data we have about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to 5-year certificate retention requirement)
• Portability: Export your workflow data in standard formats
• Opt-Out: Unsubscribe from marketing emails (transactional emails required for service)

To exercise these rights, contact us at privacy@triangle-trade-intel.site

8. Cookies and Tracking

We use cookies for:

• Essential Cookies: Session management and authentication (required for platform to work)
• Functional Cookies: Remembering your preferences and workflow progress
• Analytics Cookies: Understanding how users interact with the platform (aggregated data only)

We do NOT use third-party advertising cookies or tracking pixels.

9. Legal Disclosures

We may disclose your information if required by law, such as:

• Response to valid subpoenas, court orders, or legal processes
• Cooperation with law enforcement investigations
• Protection of our rights, property, or safety
• Compliance with U.S. customs and trade regulations

10. International Users

This platform is designed for USMCA trade (United States, Mexico, Canada). If you access the platform from outside these countries, your data will be transferred to and processed in the United States. By using the platform, you consent to this transfer.

11. Children's Privacy

This platform is intended for business use by adults. We do not knowingly collect information from children under 18. If you believe a child has provided us with personal information, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your data rights:
Email: privacy@triangle-trade-intel.site
Subject Line: Privacy Request - [Your Request Type]