Privacy Policy

RevOps Ledger is a revenue operations analytics platform owned and operated by TBK Enterprise Consulting LLC, an Alabama limited liability company ("TBK," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use RevOps Ledger (the "Service").

1. Information we collect

We may collect the following categories of information:

• Account and organization information: Name, work email address, company name, role, workspace membership, account settings, and authentication information.
• Workspace data: Sales workbooks and other data you upload or enter, including pipeline, deal, account, roster, quota, commission, KPI, fiscal-period, and configuration data.
• Usage, device, and audit information: Sign-in events, uploads, refreshes, exports, administrative actions, IP address, browser and device information, session information, timestamps, error logs, and other records used to operate, secure, and audit the Service.
• Access requests: Information submitted when requesting access, accepting an invitation, or provisioning a workspace.
• Billing information: Subscription status, billing contact information, transaction details, and limited payment information received from our payment processor. We do not intend to receive or store full payment-card numbers.
• Communications: Support requests, emails, feedback, and other communications you send to us.

2. How we use information

We use information to:

• provide, maintain, support, and improve the Service;
• process workbooks and deliver analytics, data-hygiene, forecasting, quota, and commission features;
• authenticate users and enforce workspace roles, permissions, and security controls;
• review access requests and provision or administer workspaces;
• process payments and manage subscriptions;
• communicate about accounts, support, security, billing, and product updates;
• monitor performance, prevent fraud or abuse, troubleshoot problems, and protect the Service and its users;
• comply with legal obligations and enforce our agreements; and
• create aggregated or de-identified information that does not reasonably identify a Customer or individual.

We do not sell personal information or Customer workspace data. We do not use Customer workspace data to train artificial intelligence or machine-learning models.

3. Workspace data and customer responsibility

The organization that controls a workspace is responsible for determining what Customer Data is submitted to the Service and for providing required notices or obtaining required permissions. If you use the Service through an organization, that organization may control your workspace account, access, permissions, and Customer Data. Questions about your organization's use of your information should first be directed to the workspace owner or administrator.

4. Storage and security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect information, including:

• database-level row-level security ("RLS") policies designed to logically isolate Customer Data by workspace and prevent authenticated users from accessing another workspace's data;
• role-based access controls tied to workspace membership and authorized roles;
• private storage for uploaded workbooks and validation before parsing;
• multi-factor authentication requirements for privileged administrative accounts; and
• time-limited, read-only support access where implemented, with access recorded in the applicable workspace audit log.

No security program can guarantee complete protection. Customers are responsible for selecting appropriate users and roles, protecting credentials, reviewing workspace access, and maintaining any copies of data needed for business continuity.

5. How we disclose information

We may disclose information in the following circumstances:

• Service providers: To vendors that help provide hosting, database, storage, authentication, email, analytics, customer support, and payment-processing services. These providers may process information only to perform services for us, subject to applicable contractual obligations.
• At Customer direction: To users, integrations, or other parties as directed or authorized by the Customer or workspace administrator.
• Legal and safety purposes: When we reasonably believe disclosure is required by law, legal process, or government request, or is necessary to protect rights, safety, security, or the integrity of the Service.
• Business transactions: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.
• Professional advisers: To legal, accounting, insurance, and other professional advisers who need the information to provide services to us.

We do not otherwise disclose Customer Data except as described in this policy, at Customer direction, or with authorization.

6. Retention and deletion

We retain workspace data while the workspace is active and as reasonably necessary to provide the Service. A workspace owner may request export or deletion of workspace data. Following verification and confirmed deletion, we will delete Customer Data from active systems within a commercially reasonable period, subject to backup cycles and information we retain as required or permitted for legal, security, fraud-prevention, dispute-resolution, billing, accounting, or compliance purposes.

Account, audit, support, and transaction records may be retained for legitimate business and legal purposes after a subscription ends. Canceling a subscription does not automatically delete a workspace or its data.

7. Cookies and similar technologies

We may use cookies, local storage, and similar technologies that are necessary for authentication, security, session management, preferences, and operation of the Service. We may also use limited analytics technologies to understand performance and product usage. Browser controls may allow you to block some technologies, but doing so may prevent parts of the Service from functioning correctly.

8. Your choices and rights

Depending on your relationship with the Customer and applicable law, you may be able to:

• update account details and security settings;
• manage multi-factor authentication and active sessions;
• request access to, correction of, export of, or deletion of certain information;
• control workspace membership, roles, and invitations if you are a workspace owner or administrator; and
• opt out of non-essential marketing communications while continuing to receive transactional or service messages.

To exercise a privacy right concerning Customer Data, contact the workspace owner or administrator first. You may also contact us using the details below. We may need to verify your identity and authority, and we may direct the request to the Customer that controls the workspace.

9. Children's privacy

The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

10. United States processing

TBK is based in Alabama, United States. Information may be processed and stored in the United States and other locations where our service providers operate, subject to applicable law and contractual protections.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy and update the effective date. If changes are material, we will provide reasonable notice through the Service or by email when practicable.

12. Contact

Questions, requests, or concerns about this Privacy Policy or your information may be directed to your workspace owner or administrator or emailed to support@revopsledger.com.

TBK Enterprise Consulting LLC
Huntsville, Alabama, United States