TimberNotch: Privacy Policy

Operated by: Grizzly Mining Company LLC ("GMC", "we", "us", "our"), a Montana limited liability company.

App / service: TimberNotch, available at timbernotch.com.

Effective date: September 9, 2026

Last updated: September 9, 2026

⚠️ DRAFT. NOT YET LEGAL ADVICE. Filled-in TimberNotch version of the GMC-family template. Have a licensed attorney review before publishing, especially the CCPA/CPRA (California) and state-privacy sections. Confirm GMC's registered Montana mailing address (§13).

1. Scope

This Privacy Policy explains how we collect, use, share, and protect personal information when you use TimberNotch (the "Service"). It does not cover third-party services we link to or integrate with, which have their own policies.

2. Information we collect

a. Information you provide:

Account data: name, email address, password (stored hashed), and organization or business name.
Billing data: if and when paid plans are introduced, billing is handled by our payment processor, Stripe, Inc. We would receive limited details such as last four digits, card brand, billing country, and subscription status, but do not store full payment-card numbers.
Your Content: the project, phase, schedule, task, budget, expense, estimate, permit, inspection, and calendar records you enter; contractor and vendor contact details you add; and the progress photos, site plans, and documents you upload.
Support communications: messages you send us.

b. Information collected automatically:

Usage and device data: IP address, browser and device type, pages viewed, timestamps, and similar log data, used to operate and secure the Service.
Cookies and local storage: session cookies needed to keep you logged in, and local storage for per-device preferences such as your theme choice and last-viewed tab. We use privacy-friendly, cookieless analytics and do not use advertising trackers.

Note that photos you upload may carry embedded metadata, including capture time and GPS location. We store uploaded files as you provide them.

We do not intentionally collect special-category sensitive data beyond what you choose to enter as Your Content.

3. How we use information

We use personal information to:

provide, maintain, and secure the Service and your account;
process subscriptions and payments, if and when paid plans are introduced;
store, organize, schedule, and generate reports and exports from Your Content at your direction;
respond to support requests;
send service and transactional messages, and, only with consent where required, product updates you can opt out of;
detect, prevent, and address fraud, abuse, and security issues;
comply with legal obligations.

We do not sell your personal information, and we do not use Your Content to train AI models or for advertising.

4. Legal bases (for EEA/UK users, if applicable)

Where GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract (providing the Service), legitimate interests (securing and improving the Service), consent (where required, such as optional marketing), and legal obligation.

5. How we share information

We share personal information only with:

Service providers and sub-processors who help us run the Service under contract, including Stripe, Inc. (payment processing, if paid plans are introduced), GMC self-hosted infrastructure (hosting; no third-party cloud host at this time), and our transactional email provider;
Other GMC-family applications you explicitly choose to connect to your account;
Legal and safety: when required by law, subpoena, or to protect rights, safety, and property;
Business transfers: in connection with a merger, acquisition, or asset sale, with notice as required.

We are not in the business of selling or renting your data to third parties.

6. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, then for any period required to comply with legal, tax, accounting, or dispute-resolution obligations. You may request deletion (see Section 8); some data may be retained where law requires.

7. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to opt out of certain processing. To exercise these, contact contact@timbernotch.com. We will not discriminate against you for exercising your rights.

California (CCPA/CPRA): you may request to know, delete, and correct personal information, and to opt out of "sale" or "sharing" (we do neither). You may use an authorized agent.
Other US states, EEA, and UK: equivalent rights may apply under your local law.
Marketing opt-out: use the unsubscribe link in any marketing email or contact us.

9. Data location

The Service is operated from the United States. If you access it from outside the US, you understand your information will be processed in the US.

10. Children's privacy

The Service is not directed to children under 13, or the applicable age in your jurisdiction, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

11. Third-party links and integrations

Links to and integrations with third-party services are governed by those parties' privacy policies; we are not responsible for their practices.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted at timbernotch.com with an updated "Last updated" date and, where required, notified to you.

13. Contact

Privacy questions or requests: contact@timbernotch.com. Grizzly Mining Company LLC, [GMC Montana registered mailing address; confirm before publishing].