Haystack Midwest, Inc. and/or its affiliates ("Haystack Midwest," "Haystack," "we," "our," or "us") are committed to protecting the privacy of our customers and end users. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our software applications, integrations, websites, and related services (collectively, the "Services").

By accessing or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

1. Information We Collect

a. Information You Provide

We may collect information that you voluntarily provide to us, including:

Account Information: Name, email address, phone number, company name, and billing information when you create an account or subscribe to our Services.
Business Data: Financial records, transaction data, customer lists, invoices, and other business information you submit, upload, or make accessible through our Software, including data accessed via third-party platform integrations (such as QuickBooks or other accounting platforms).
Communications: Information you provide when you contact us for support, submit feedback, or otherwise communicate with us.

b. Information Collected Automatically

When you use our Services, we may automatically collect certain information, including:

Usage Data: Features accessed, actions taken within the Software, frequency and duration of use, and error logs.
Device Information: Device type, operating system, browser type, and unique device identifiers.
Log Data: IP address, access times, pages viewed, and referring URLs.
Cookies and Similar Technologies: We use cookies, pixels, and similar tracking technologies to enhance your experience and collect analytics. See Section 7 for details.

c. Information from Third-Party Platforms

When you connect our Software to a third-party platform (such as Intuit QuickBooks), we may receive data from that platform in accordance with the permissions you grant. This may include financial data, account information, and business records. We access only the data necessary to provide the functionality of our Software and in accordance with the third-party platform's API terms and policies.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services and Software;
Process transactions and send related information;
Generate reports, analytics, or insights as part of the Software's functionality;
Send you technical notices, updates, security alerts, and administrative messages;
Respond to your comments, questions, and support requests;
Monitor and analyze usage trends to improve user experience;
Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities;
Comply with legal obligations and enforce our Terms of Use.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With trusted third-party vendors who assist us in providing the Services (e.g., hosting, analytics, payment processing), bound by confidentiality obligations.
Third-Party Platform Providers: When you use our Software in connection with a third-party platform, data may be exchanged with that platform as necessary for the Software to function.
Legal Requirements: When required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

4. Data Retention

We retain your personal information and business data only for as long as necessary to fulfill the purposes for which it was collected, including to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we will securely delete or anonymize it.

If you disconnect our Software from a third-party platform or terminate your account, we will delete or anonymize the data obtained from that platform within a reasonable timeframe, unless retention is required by law.

5. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct inaccurate or incomplete personal information.
Deletion: Request that we delete your personal information, subject to legal and contractual obligations.
Data Portability: Request a copy of your data in a structured, machine-readable format.
Opt-Out: Opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.
Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at hey@haystack.works. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to collect usage data, remember your preferences, and improve our Services. You can manage your cookie preferences through your browser settings. Disabling cookies may limit your ability to use certain features of our Services.

We may use third-party analytics services (such as Google Analytics) that use cookies and similar technologies to collect and analyze usage information. These third parties have their own privacy policies governing their use of such information.

8. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at hey@haystack.works.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction. By using our Services, you consent to the transfer of your information to the United States and other jurisdictions as necessary to provide the Services.

10. Third-Party Links and Services

Our Services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last Updated" date above. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Haystack Midwest, Inc.
403 NE 100th St
Kansas City, Missouri 64156
hey@haystack.works
www.haystack.works