Privacy Policy

1. Overview

GreenTag (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our compliance management platform at greentaghq.com.

2. Information We Collect

Information you provide directly:

• Account registration information (name, email, organization name)
• Business profile data (business type, location addresses, employee count)
• Compliance data (permit details, expiration dates, inspection records)
• Employee information you enter (names, certifications, hire dates)
• Documents and files you upload
• Payment information (processed by Stripe — we do not store card numbers)
• Communications you send to us

Information collected automatically:

• Log data (IP address, browser type, pages visited, time and date)
• Usage data (features used, actions taken within the platform)
• Device information (device type, operating system)
• Cookies and similar tracking technologies

3. How We Use Your Information

• To provide and operate the Service
• To send compliance alerts, reminders, and notifications you configure
• To process payments and manage subscriptions
• To power AI-assisted features (your data is used to provide context to AI responses)
• To improve and develop new features
• To respond to your support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. AI and Data Processing

GreenTag uses AI services (including Anthropic’s Claude) to power the Compliance Advisor and document extraction features. When you use these features, relevant portions of your compliance data and uploaded documents are transmitted to these AI services to generate responses. We do not use your data to train AI models.

All AI processing is subject to data processing agreements with our service providers. Your data is processed in accordance with their applicable privacy and security standards.

5. Information Sharing

We do not sell your personal information. We share your information only in these circumstances:

• Service providers: Third-party vendors who help us operate the Service (e.g., Clerk for authentication, Supabase for database hosting, Stripe for payments, Resend for email, Anthropic for AI)
• Legal requirements: When required by law, court order, or government authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you
• With your consent: When you explicitly authorize sharing

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Row-level security on all database tables
• SOC 2 compliant authentication provider (Clerk)
• Regular security reviews and vulnerability assessments
• Access controls limiting employee access to customer data

No system is completely secure. If you become aware of a security issue, please notify us at contact@greentaghq.com.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we retain data for 30 days before deletion, unless a longer retention period is required by law. You may request deletion of your data at any time.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (right to be forgotten)
• Portability: Export your data in a machine-readable format (CSV export available in the dashboard)
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at contact@greentaghq.com.

9. Cookies

We use essential cookies necessary for the Service to function (authentication, session management). We do not use advertising or tracking cookies for third-party advertising purposes. You can configure your browser to refuse cookies, though this may affect your ability to use the Service.

10. Children’s Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately.

11. International Users

The Service is operated in the United States. If you access the Service from outside the U.S., your data may be transferred to and processed in the U.S. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA), our processing is based on contract performance, legitimate interests, and your consent where applicable.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice in the Service. Continued use after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at: contact@greentaghq.com