Privacy Policy: Manufacturers

1. OVERVIEW AND SCOPE

This Privacy Policy describes how Parts Portal, Inc. (“Parts Portal,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with our web-based quoting and order management platform (the “Service”).

This Policy applies to our manufacturer subscribers (“Subscribers,” “you,” or “your”) and your authorized employees. Note that technical specifications, CAD files, and proprietary pricing logic, while protected under the confidentiality provisions of your SaaS Service Agreement, are also handled according to the data security standards outlined herein.

2. INFORMATION WE COLLECT

We collect several categories of information to provide a secure and functional quoting environment:

• A. Information You Provide to Us:
• Account Registration: Name, business email, job title, company name, and password.
• Financial & Billing: Credit card or banking information processed via our third-party payment processor.
• Proprietary Operational Data: Setup, labor and machine rates, material information, and other data used to power your custom quotes.
• B. Information Collected via Technology:
• Log Data: IP addresses, browser type, referring/exit pages, and time stamps.
• Cookies and Tracking: We use cookies to maintain your session and remember your preferences. We may use third-party analytics to understand how users navigate the platform to improve UI/UX.
• C. Client Data: Information about your clients (names, emails, part drawings) that you input to facilitate the quoting process.

3. HOW WE USE YOUR INFORMATION

We use your information to:

• Execute the "Standard Formula": Calculate quotes accurately based on your proprietary inputs.
• Service Communications: Send system alerts, order updates, and security notices.
• Internal Improvements: Perform research and analysis to improve platform speed and feature sets.
• Anonymized Benchmarking: We may create "Aggregate Data" (e.g., "Average shop rate in the Midwest"). This data is strictly anonymized and contains no "Personally Identifiable Information" (PII) or company-specific trade secrets.

4. DISCLOSURE OF INFORMATION

We do not sell your data. We disclose information only in the following limited circumstances:

• Third-Party Service Providers: We share data with vendors who provide hosting (AWS), payment processing (QuickBooks & Stripe), and customer support tools (Intercom). These vendors are contractually bound to protect your data.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.
• Legal Requirements: We may disclose information if required by law, such as to comply with a subpoena, or when we believe in good faith that disclosure is necessary to protect our rights or the safety of our users.

5. DATA SECURITY

Parts Portal follows commercially accepted industry standards to protect your proprietary information.

• Encryption: All data is encrypted at rest and in transit using AES-256 bit encryption.
• Infrastructure: Our production database is hosted on AWS RDS in the US East (Ohio) region, featuring daily automated backups and point-in-time recovery.
• MFA: Multi-Factor Authentication is mandatory for all administrative access to our backend systems.

6. ITAR AND EXPORT CONTROL

Parts Portal is NOT currently an ITAR-compliant platform. Subscribers and their End Users are strictly prohibited from uploading any "Technical Data" as defined by the International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR). Parts Portal does not proactively screen files for export control markings. Responsibility for ensuring that no regulated defense data is uploaded rests solely with the Subscriber.

7. YOUR RIGHTS AND CHOICES

• Access and Correction: You may update your account information at any time via the User Profile settings.
• Marketing Opt-Out: You may opt out of promotional emails by following the "Unsubscribe" link, though you will still receive transaction-related emails.
• California Privacy Rights (CCPA): If you are a California resident, you have the right to request a disclosure of the categories of personal information we collect and the right to request deletion. Please contact admin@custompartportal.com to exercise these rights.

8. INTERNATIONAL DATA TRANSFERS

Parts Portal is based in the United States. If you are accessing the Service from outside the U.S., please be aware that your information will be transferred to and stored in the United States. By using our Service, you consent to this transfer and processing.

9. CHANGES TO THIS POLICY

We may update this Policy to reflect changes in our practices. If we make material changes, we will notify you via email or a prominent notice on the platform at least 30 days before the change takes effect.

10. CONTACT US

If you have questions regarding this policy or your data privacy, please contact us via email at: admin@custompartsportal.com.