Privacy Policy

1. Information We Collect

• Information you give us: your name, work email, company, role, phone number, and anything you write when you use our contact, waitlist, survey, webinar, grant, or Color Studio forms.
• Account information: the details you provide when you sign up for or apply to the platform.
• For suppliers: company profile details and, for each SKU listed, Technical Data Sheets, Certificates of Analysis, Regulatory Data Sheets, and Product Specification Sheets.
• For customers: formulation search inputs (dye, application, processing conditions) used to return matches.
• Billing information: processed directly by Stripe. We never receive or store your full card number.
• Technical information: when you visit, our hosting provider automatically receives standard request data such as your IP address, browser type, the page requested, and the time of the request. We do not use analytics or advertising cookies. See our Cookie Policy.

2. How We Use Information

• Provide, operate, secure, and improve the Services.
• Return formulation matches and power supplier listings.
• Respond to your requests and questions.
• Send account notices and, if you opted in, newsletters, event details, and educational materials.
• Bill for paid subscriptions and meet our legal, tax, and accounting obligations.

3. Who We Share Information With

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share it only with the service providers that help us run the Services, and only as much as each one needs:

• Netlify: website hosting, form processing, and form storage.
• Airtable: storage of some form submissions, such as contact and webinar requests.
• Resend and Microsoft 365: sending and receiving email.
• Supabase: the platform database and sign-in.
• Stripe: payment processing.
• Google Fonts: delivers the typefaces on our pages. Your browser requests them from Google's servers, which receive your IP address.
• Search Atlas: a search optimization script that loads on our pages and receives standard request data such as IP address, browser type, and page address.

We may also disclose information when the law requires it, to protect the rights and safety of our users or of DyeConverter, or as part of a merger, acquisition, financing, or sale of assets, in which case this Policy continues to apply to the information transferred.

For suppliers specifically: your uploaded documents, company data, and SKU-level information are never sold, shared, or made visible to other suppliers or competitors. Your data is never used to train third-party AI models.

4. How We Protect Information

Platform data is held in a PostgreSQL database with row-level security enforced by the database itself, not only hidden in the app's interface. A supplier's account can only ever read its own company's rows, and we verify that with an automated, repeatable test suite run against the live system. Data is encrypted in transit (HTTPS/TLS) and at rest. Payment details are handled entirely by Stripe, a PCI-compliant payment processor. No system is perfectly secure, and we treat strengthening ours as ongoing work.

5. Email

If you opt in, we send updates and promotional materials. Every marketing email includes an unsubscribe link, and you can opt out at any time. Account and service notices continue while you have an account.

6. Retention

We keep account and SKU data for as long as your account is active, and form submissions for as long as they are useful for the purpose you sent them. We keep some records longer when the law requires it, for example for tax and accounting.

7. Your Choices and Rights

You can ask us to show you, correct, or delete the personal information we hold about you, or to stop sending you marketing email. Contact us using the details below. We respond as soon as we can, and within 45 days. We will not treat you differently for exercising any of these rights.

8. Do Not Track

Some browsers send a "Do Not Track" signal. We do not track visitors across other websites and do not use advertising or analytics cookies, so the Services work the same way whether or not the signal is on. We do not knowingly allow third parties to use the Services to collect information about your activity across other websites over time.

9. Children

The Services are designed for business professionals and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

10. Visitors from the EU, EEA, and UK

We are based in the United States and process information there. If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Contract: to provide the Services you ask for, such as answering an inquiry or running your account.
• Legitimate interests: to operate, secure, and improve the Services and to communicate with business contacts, balanced against your rights.
• Consent: where we ask for it, such as for marketing email. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose information.

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, to receive a portable copy of it, and to complain to your local data protection authority. When your data moves to the United States, we rely on the safeguards our service providers offer, such as the European Commission's Standard Contractual Clauses.

11. Changes

We will post any update to this Policy on this page with a new effective date. If a change is material, we will also tell account holders by email before it takes effect.

12. Contact

DyeConverter Inc
131 Continental Drive, Suite 301
Newark, DE 19713-4323
info@dyeconverter.com