Privacy Policy
Effective date: [Effective date]
This Privacy Policy describes how [Company legal name] (“PrepCntr”, “we”, “our”, or “us”) collects, uses, and shares information when you use the PrepCntr software platform (the “Service”).
Information we collect
- Account information — name, email, organization, and authentication credentials when you create an account or are invited to one.
- Workspace information — organization name, subdomain, custom domain, branding, and configuration you provide.
- Operational data — the inventory, orders, addresses, customer accounts, and related records that you and your users enter into PrepCntr in the course of running your prep center. This includes information about your own customers that you choose to store in the Service.
- Usage information — log data such as IP address, browser type, pages accessed, and timestamps, used for security and to improve the Service.
- Payment information — we do not store full payment card numbers or bank account details. Payments are processed by Stripe; see “Stripe” below.
How we use information
We use information to provide and operate the Service, authenticate users, communicate with you, maintain security, comply with legal obligations, and improve the Service. We do not sell personal information.
Stripe and payment processing
PrepCntr uses Stripe, Inc. as our payment partner. When you connect your Stripe account through Stripe Connect Standard, Stripe handles identity verification, bank account linking, and the processing of all payments from your customers on your Stripe account. Stripe's collection and use of information is governed by Stripe's Privacy Policy.
PrepCntr receives limited information from Stripe necessary to operate the Service, such as your connected account ID, account status, and high-level transaction metadata. We do not receive cardholder data.
Sub-processors
We use the following categories of sub-processors to operate the Service:
- Cloud hosting and database providers
- Authentication infrastructure
- Transactional email delivery
- File and image storage
- Product / UPC lookup providers (used to enrich product data)
- Error monitoring and analytics
Each sub-processor is bound by appropriate confidentiality and data-handling obligations. We update our sub-processor list as our stack evolves; email support@prepcntr.com for the current list.
Cookies
We use cookies and similar technologies for authentication (keeping you signed in), security, and basic analytics. You can configure your browser to block or delete cookies, though parts of the Service may not work without them.
Sharing
We share information with sub-processors as described above; with our customers as needed to operate their workspaces; with legal, professional, or financial advisors when needed; and where required by law or in response to valid legal process. We may share information in connection with a corporate transaction (e.g., merger or acquisition); successors will be bound by this Policy or an equivalent.
Data retention
We retain account and operational data for as long as your account is active and for a reasonable period afterward to meet legal, accounting, or operational requirements. You may request export or deletion as described under “Your rights” below.
Your rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise these rights, email support@prepcntr.com. If you are an end-customer of a PrepCntr merchant, the merchant is the controller of your information; we will refer your request to them.
Security
We use industry-standard technical and organizational safeguards to protect information, including encryption in transit, access controls, and regular review of our security posture. No service can guarantee absolute security.
International transfers
PrepCntr and our sub-processors may process information in countries other than the one where you reside. Where required by law, we use appropriate safeguards for international transfers.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.
Contact
Questions about this Policy? Email support@prepcntr.com or write to [Company legal name], [Business address]. For information on how payments work, see our How payments work page.