Privacy Policy

1. Zero-Trust In-Browser Data Processing

OpsReveal is engineered with a strict client-side architecture to protect your sensitive financial and operational documents:

• No Raw Data Storage: When you upload spreadsheets, invoices, receiving logs, or GRN files to the OpsReveal tool, all file parsing and audits execute entirely within your web browser. We cannot access, view, intercept, or store your raw files, row data, or confidential vendor pricing.
• Cloud Summary & Metadata Retention: While raw data remains in your local browser memory, high-level non-confidential audit summaries (e.g., total leakage amounts detected, lines processed, report timestamps, and file metadata) are saved to encrypted cloud storage (Firebase & Cloudflare R2) to power your account dashboard and historical audit history.
• Anonymized & Aggregated Use for Marketing: We may aggregate and anonymize these high-level summary metrics (e.g., "Over $1M in procurement leakage detected across retail audits") for industry benchmarking, case studies, and marketing materials. Your company name, individual identities, and confidential store details are never disclosed or associated with this data.

2. Account Information & Payment Processing

• Account Credentials: We collect your name, work email address, company profile, and identity authentication credentials via Google OAuth and Firebase Authentication.
• Payment & Billing Data: Subscriptions and transaction processing are handled by our Merchant of Record, Paddle.com. PreventLoss.org never collects, handles, or stores payment card details directly. Billing information is subject to Paddle’s privacy regulations.

3. Website Analytics & Behavioral Tracking

To analyze traffic, improve user experience, and optimize our web platform performance, our public website and home page utilize industry-standard analytics tools:

• Google Analytics: Collects web traffic metrics, browser technical specifications, device information, and acquisition channels.
• Bing Webmaster Tools: Helps monitor website indexing, search traffic patterns, and SEO performance.
• Microsoft Clarity: Analyzes user interaction behavior (such as session replays, click maps, and heatmaps) to identify usability bottlenecks and improve site navigational design.

These analytics services process pseudonymized website telemetry and do not collect or inspect any data uploaded into the OpsReveal tool environment.

4. How We Use Information

We use collected account and non-sensitive summary information strictly to:

• Provision, maintain, and secure your OpsReveal workspace and user accounts.
• Facilitate customer support, system updates, and account security notifications.
• Analyze aggregate usage patterns to enhance system performance and platform features.

5. Third-Party Service Providers

We do not sell personal or operational data. Necessary infrastructure data is shared only with verified enterprise providers under strict privacy compliance:

• Paddle.com: Payment processing & Merchant of Record.
• Firebase / Google Cloud Platform: Authentication & database infrastructure.
• Cloudflare: CDN Edge hosting, worker compute API, and encrypted cloud storage (R2).

6. Privacy Rights & Contact

If you have questions regarding this Privacy Policy, wish to request account deletion, or want to inquire about data rights, please contact us at:

• Support: info@preventloss.org
• Legal & Privacy Officer: legal@preventloss.org