1. Controller and contact
ProfitTriage AI operates the ProfitTriage service at profittriage.com. Privacy, access, deletion and other data-protection requests can be submitted through our contact form by selecting “Privacy”.
2. Data we process
We may process account information such as email address and authentication identifiers; business inputs entered into the diagnostic; monthly profit snapshots you explicitly save; Stripe customer, subscription and subscription-status identifiers; support requests; and limited first-party product-usage events such as page views, scan completion, upgrade clicks and referral/UTM information.
Passwords are handled by Supabase Auth and are not stored by ProfitTriage in readable form. Payment-card details are handled by Stripe and are not stored by ProfitTriage.
3. Free Scan and saved data
The Free Profit Scan is calculated in the browser. ProfitTriage stores monthly business snapshots only when a signed-in Pro user chooses “Save Current Month”. Saved tracking records are associated with that user's account and protected by row-level security.
4. Why we process data
We process data to provide the service and subscription features, secure accounts, process and maintain paid access, respond to support and privacy requests, prevent abuse, diagnose technical issues, and understand product usage so we can improve the service.
5. Service providers
ProfitTriage uses infrastructure and service providers including Vercel for hosting/delivery, Supabase for authentication/database/functions, and Stripe for subscription payments. These providers may process data under their own terms and data-protection commitments.
6. Analytics
ProfitTriage records limited first-party funnel events needed to understand whether visitors reach the Free Scan, diagnosis, checkout and Pro activation. The analytics record uses a session identifier stored in session storage and may include page path, referrer and campaign parameters. It is not designed as cross-site advertising tracking.
7. Retention
We keep information only for as long as reasonably necessary to provide the service, maintain legitimate business and security records, comply with legal obligations, resolve disputes and improve the product. You may request deletion of personal data, subject to legal retention requirements.
8. International processing
Our service providers may process information in countries other than your own. Where required, transfers are handled under the providers' applicable contractual and legal transfer mechanisms.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, and complain to a data-protection authority. Submit a request through the contact form.
10. Security
ProfitTriage uses Supabase authentication, row-level database security for user records, HTTPS, and leaked-password protection. No online service can guarantee absolute security.
11. Changes
We may update this policy as the service changes. The date at the top identifies the current version.