TreadAlign Privacy Policy

What we collect

Account data (name, work email, password hash), organization data (dealership name, locations), operational data you enter or generate (searches, quotes, orders, inventory, financial records), and technical data (IP address, session and audit logs) needed for security and support.

How we use it

To provide and secure the service, maintain accounting-grade audit trails, provide support, and improve the product. Aggregated, anonymized market analytics (e.g., regional demand trends) are produced only under minimum-cohort thresholds and, where required, your explicit consent settings. We never sell your identifiable data, and we never disclose an individual dealer's prices, purchasing behavior, or Dealer Intelligence Score without authorization.

Sharing

Service providers under contract (hosting, database, email delivery), when you direct us to (e.g., routing an order request to a distributor), and when required by law. No third-party advertising or cross-context behavioral advertising.

Security

Encryption in transit and at rest, multi-factor authentication, role-based access control, tenant isolation verified by automated tests, rate limiting, and append-only audit logging. No system is perfectly secure; we maintain incident-response procedures and will notify you of breaches as required by law.

Retention and deletion

Operational data is retained while your account is active. After termination, you have 30 days to export; identifiable data is then deleted on a scheduled basis, except records we must keep for legal, tax, or security purposes. You may request export or deletion at any time.

California rights (CCPA/CPRA)

TreadAlign processes business-contact data; where CCPA/CPRA applies, you (and your personnel) may request access, correction, deletion, and portability, without discrimination. We do not sell or share personal information as those terms are defined by the CPRA. Submit requests to the contact below; we verify and respond within the statutory window.

Contact

Privacy requests: the contact email listed on your account settings page (pilot). A dedicated privacy contact will be published at launch.