Skip to main content

Privacy Policy

Effective as of October 2024

Introduction

SpecToSheet (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Account Information

When you create an account, we collect: name, email address, organization name, and authentication credentials. We use this information to provide and manage your access to SpecToSheet.

Catalog Data

You may upload PDF catalogs and related compliance documents to our platform. We process this data to extract and structure compliance information according to your requirements. Your uploaded files are stored securely and used only for processing within your account.

Usage Information

We automatically collect information about your interaction with SpecToSheet, including: IP address, browser type, pages visited, time spent, and actions taken. This helps us understand how you use the service and improve our offering.

2. How We Use Your Information

  • Provide, maintain, and improve the SpecToSheet service
  • Process your uploaded catalogs and generate compliance reports
  • Send service-related announcements and technical updates
  • Respond to your support requests and inquiries
  • Monitor and analyze platform usage patterns
  • Comply with legal obligations and enforce our Terms of Service

3. Data Security

We implement comprehensive security measures to protect your data:

  • HTTPS encryption for all data in transit
  • AES-256 encryption for data at rest
  • Private VPC networking and access controls
  • Regular security audits and penetration testing
  • Strict access controls and authentication requirements

4. Sharing Your Information

We do not sell, trade, or rent your personal information. We only share your data in these limited circumstances:

  • Service providers: AWS infrastructure partners (encrypted, under strict agreements)
  • Legal compliance: When required by law or government request
  • Business transfer: In case of acquisition or merger

5. Your Privacy Rights

Depending on your location, you may have rights including:

  • Access to your personal information
  • Correction of inaccurate data
  • Deletion of your account and associated data
  • Data portability (export your data in machine-readable format)
  • Opt-out of non-essential communications

6. Data Retention

We retain your data as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time. Some information may be retained for legal compliance purposes for a limited period after deletion.

7. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the “Effective Date” and providing notice via email or prominent website notification.

8. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: