Privacy Policy

Last updated

May 11, 2026

Overview

This Privacy Policy explains how [LEGAL ENTITY NAME] collects, uses, discloses, and protects information when you use Command Center, including the web application, related services, integrations, websites, and support channels.

Command Center is intended for business use. If you use it on behalf of an organization, that organization may control the data in its workspace and determine how information about users, employees, vendors, customers, inventory, orders, and accounting workflows is processed.

Information we collect

• Account and organization information, including names, emails, roles, organization names, store names, locations, invitations, permissions, and settings.
• Operational business data, including inventory, products, variants, purchase orders, vendors, receiving records, orders, refunds, store links, corrections, reports, notes, uploaded files, and related records.
• Workforce and employee data, including names, roles, contact details, compensation settings, schedules, shifts, time clock events, break records, payroll review data, manager notes, PIN hashes, and location assignments.
• Accounting and integration data, including authorization tokens, account identifiers, company identifiers, realm IDs, vendor IDs, store IDs, transaction IDs, bills, journal entries, account mappings, sync status, and error logs.
• Data chat and AI-assisted feature data, including prompts, uploaded or referenced content, screenshots, generated responses, tool calls, summaries, and operational data needed to answer or draft requested actions.
• Device, log, and usage information, including IP address, browser type, device information, pages visited, timestamps, request metadata, error logs, security logs, performance data, analytics events, cookies, and similar technical information.
• Support and communications information, including message contents, attachments, and related support history.

How we use information

• Provide, operate, maintain, secure, and improve Command Center.
• Authenticate users and manage access controls.
• Create, update, display, export, and sync operational business records.
• Connect with authorized third-party services such as Shopify and QuickBooks Online.
• Process inventory, purchasing, vendor, order, workforce, labor, reporting, and accounting workflows.
• Generate reports, dashboards, summaries, and AI-assisted responses.
• Detect, prevent, investigate, and respond to security incidents, fraud, abuse, and misuse.
• Debug errors, monitor performance, provide support, and comply with legal obligations.

How we share information

We may share information with your organization administrators and authorized users according to configured roles and permissions; service providers and subprocessors; third-party integrations you authorize; professional advisors; legal authorities when required; and parties involved in a merger, acquisition, financing, reorganization, or asset sale.

We do not sell personal information for money. We do not knowingly use Customer Data for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide legally required choices.

Third-party services

Third-party services connected to Command Center are governed by their own terms and privacy policies. When you authorize an integration, information may flow between Command Center and that service according to your settings and granted permissions.

For QuickBooks Online, Intuit may process data according to Intuit's own terms and policies. For Shopify, Shopify may process data according to Shopify's own terms and policies.

Cookies and similar technologies

We may use cookies, local storage, and similar technologies for authentication, session management, security, preferences, analytics, and performance. Some cookies are necessary for the Service to function.

Browser-level Do Not Track signals are not standardized, and Command Center does not currently respond to all such signals. Where required by law and technically feasible, we will honor legally recognized opt-out preference signals.

Data retention

We retain information for as long as reasonably necessary to provide Command Center, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, maintain backups, secure the Service, and support legitimate business purposes.

Retention periods vary by data type, configuration, legal requirements, backup schedules, and customer instructions. Some data may remain in backups for a limited period after deletion from active systems.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption where appropriate, tenant isolation, logging, secure development practices, and monitoring.

No method of transmission or storage is completely secure. You are responsible for maintaining secure credentials, using appropriate role assignments, disabling users who should no longer have access, and promptly reporting suspected unauthorized activity.

Your choices and rights

Depending on your location and relationship to Command Center, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent for certain personal information.

If your information is controlled by an organization using Command Center, we may direct your request to that organization. To make a privacy request, contact [PRIVACY CONTACT EMAIL]. We may need to verify your identity and authority before fulfilling a request.

California privacy notice

If California privacy laws apply, California residents may have rights to know, access, correct, delete, opt out of certain sharing or sales, limit use of sensitive personal information, and not be discriminated against for exercising privacy rights.

In the preceding 12 months, we may have collected the categories described in this Privacy Policy, including identifiers, commercial information, internet or network activity, approximate geolocation from IP address, professional or employment-related information, and sensitive personal information such as account login credentials or workforce-related records when provided through the Service.

We do not sell personal information for money. We do not knowingly sell or share personal information of individuals under 16.

International users and children

The Service may be hosted and processed in the United States and other locations where we or our service providers operate. If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in countries with different data protection laws.

Command Center is intended for business users and is not directed to children under 13, or the age required by applicable law. We do not knowingly collect personal information from children through the Service.

Customer responsibilities

• Provide legally required notices to users, employees, contractors, vendors, and customers.
• Obtain required consents or authorizations.
• Configure user permissions and integrations appropriately.
• Ensure labor, payroll, accounting, tax, and employee data is processed lawfully.
• Respond to privacy requests for data the customer controls.
• Review third-party service terms before connecting integrations.

Changes and contact

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service, email, or another appropriate method.

Contact: [LEGAL ENTITY NAME], [MAILING ADDRESS], [PRIVACY CONTACT EMAIL], [WEBSITE].