Privacy Policy

1. Information we collect

• Account information — your name, email address, password (stored only as a secure hash), and the organizations you create or join.
• Content you provide — the ventures, work, decisions, documents, financial records, and other data you enter into the Service (“Your Content”).
• Billing information — when you subscribe to a paid plan, your billing name, email, and address, plus subscription status. Card payments are processed by Stripe, Inc.; we do not collect or store your full card number — Stripe handles it under its own privacy and security terms.
• Usage & device data — log and telemetry data such as pages used, feature interactions, approximate performance, IP address, and browser/device type, collected to operate, secure, and improve the Service (via Azure Application Insights).

2. How we use information

• provide, maintain, and improve the Service;
• authenticate you and keep your account and data secure;
• process subscriptions and payments and send related billing notices;
• send transactional email (for example, email verification, invitations, and password resets);
• respond to support requests; and
• detect, prevent, and address fraud, abuse, or technical issues, and comply with law.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How we share information

We share information only as needed to run the Service:

• Stripe — to process payments and manage subscriptions.
• Microsoft (Azure) — for cloud hosting, application monitoring (Application Insights), and transactional email delivery (Microsoft Graph).
• Legal & safety — when required by law or to protect rights, safety, and the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Our service providers are permitted to use your information only to provide services to us.

4. Cookies & browser storage

We use your browser’s local and session storage to keep you signed in (your authentication tokens) and to remember preferences such as theme and density. We use only the cookies and storage necessary to run the Service and basic, first-party analytics to understand usage — no third-party advertising or cross-site tracking cookies.

5. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. If you close your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with legal, tax, accounting, or security obligations.

6. Security

We use industry-standard safeguards — including encryption in transit (HTTPS), hashed passwords, and scoped access controls — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please use a strong, unique password and keep your credentials confidential.

7. Your rights & choices

You can access and update most of your information from within the Service, and you can close your account at any time. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing — for example under the California Consumer Privacy Act (CCPA/CPRA) or the EU/UK General Data Protection Regulation (GDPR). We do not sell personal information. To exercise a right, contact us at the address below; we will respond as required by applicable law and will not discriminate against you for exercising a right.

8. International users

CentralHq is operated from the United States, and your information is processed and stored in the United States and other locations where our service providers operate. By using the Service, you understand that your information will be transferred to and processed in the United States, which may have different data -protection laws than your country.

9. Children’s privacy

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

11. Contact

Questions or privacy requests? Contact Alpha Business Partners, LLC at centralhq-support@centralhq.io.