Privacy Policy

We collect the following categories of information:

• Account information: name, work email, company name, and authentication details you provide when registering.
• Customer Data: invoices, bills of materials, supplier records, batch and cost data, and other content you upload or generate in the Service.
• Usage and device information: log data, IP address, browser type, and interactions with the Service, collected automatically.
• Cookies and similar technologies: session and preference identifiers and, where you allow them, analytics and advertising identifiers, including advertising click identifiers that ad platforms append to links pointing at our site. See Section 5.

We use information to:

• provide, maintain, secure, and improve the Service;
• process invoices and compute cost of goods sold, including AI-assisted extraction and analysis;
• authenticate users and manage organizations and permissions;
• communicate with you about your account and the Service; and
• comply with legal obligations and enforce our terms.

To extract line items from invoices and assist with cost analysis, we process relevant Customer Data using AI models, including models operated by third-party providers. We do not sell your Customer Data, and we do not permit our AI providers to use it to train their general models other than as needed to provide their service to us. AI outputs may contain errors and should be reviewed before you rely on them.

We do not sell your personal information. We share information with service providers ("subprocessors") who process it on our behalf under contract, including providers of cloud hosting and database services, AI processing, email delivery, payment processing, and banking-data connectivity. We may also share information to comply with law, protect rights and safety, or in connection with a merger or acquisition.

Where you allow advertising cookies, we also disclose limited information about your interaction with our websites to advertising and analytics partners, so that we can measure whether our advertising works. No money changes hands and we do not sell personal information, but California and several other state privacy laws treat this kind of disclosure as "sharing" for cross-context behavioral advertising. You can switch it off at any time; see Sections 5 and 8.

We group cookies and similar technologies into three categories:

• Strictly necessary: keep you signed in, remember settings such as language and theme, and secure the Service. These are always active and cannot be switched off, because the Service does not function without them.
• Analytics: help us understand which pages are used and where people run into difficulty, so we can improve the site.
• Advertising: let us measure the performance of our advertising and reach relevant audiences. This category includes advertising click identifiers passed to us by ad platforms.

How the analytics and advertising categories behave depends on where you are. In the EEA, the United Kingdom, and Switzerland they remain off until you opt in. Elsewhere, including the United States, they are enabled by default and you may switch them off at any time.

You can review or change your choice whenever you like using the Your Privacy Choices link in the footer of every page. We also honour the Global Privacy Control (GPC) browser signal: where we receive one, advertising cookies stay off automatically.

Your Privacy Choices

You can also control cookies through your browser settings, though disabling strictly necessary cookies may prevent the Service from functioning.

We retain Customer Data for as long as your account is active and as needed to provide the Service. After account termination, we retain and then delete or anonymize data within a reasonable period, unless a longer retention period is required by law or for legitimate business purposes such as security, audit, and dispute resolution.

We use technical and organizational measures designed to protect information, including encryption in transit and at rest, role-based access controls, and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent.

EEA/UK (GDPR). We process personal data on the legal bases of contract performance, legitimate interests, consent, and legal obligation. You may lodge a complaint with your local data protection authority.

California (CCPA/CPRA) and comparable state laws. Residents of California, and of other states with comprehensive privacy laws, have the right to know, delete, and correct personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money. However, when advertising cookies are enabled we disclose limited information to advertising partners for cross-context behavioral advertising, which these laws treat as "sharing". You can opt out at any time through the Your Privacy Choices link in the footer, or by sending a Global Privacy Control signal from your browser, which we honour automatically. We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at privacy@factoryplus.ai.

We are based in the United States and may process information in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal data.

The Service is intended for business use and is not directed to children under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated policy with a new "Last updated" date and, where appropriate, provide additional notice.

Questions about this Privacy Policy or your data? Contact us at privacy@factoryplus.ai.