Privacy & Data Protection Notice

The Important Points

• We use information to review membership requests, provide accounts, and produce business-performance reports.
• Authorized comparison reports can show company names, performance figures, and performer names and rankings to other authorized members. These reports are not anonymous.
• We do not sell member information or disclose it to advertisers for targeted advertising. Hosting, authentication, storage, and email providers process information to operate the service.
• Passwords and integration credentials are not shown to other members. No online service can guarantee absolute security.

Information We Collect and Its Sources

From applicants and account users, we collect names, email addresses, phone numbers, company names, trades, application goals, account identifiers, roles, permissions, and communications. We retain application dates, repeat-request history, review decisions, and invitation and email-verification information.

Company representatives supply business KPIs, reporting months, performer names and departments, performer results, and related report information. We also store preferences, saved calculator settings, login/session activity, and records of changes and privacy-notice acknowledgments.

Our hosting and authentication providers may process IP addresses, browser/device information, request and security logs, cookies, and session identifiers. An IP address may be used to limit abusive applications. Public business information may be entered with its source. If an authorized integration is enabled, we receive information from the connected provider within its approved permissions.

How We Use Information

We use information to assess membership, contact applicants, invite and authenticate users, manage company access, provide reports and comparisons, remember settings, operate authorized integrations, deliver service emails, investigate problems, protect the service, and maintain business and audit records. A membership application does not automatically create an account or guarantee admission.

Who Can See Company and Performer Data

The site owner can administer applications, accounts, companies, permissions, and reports. Authorized users can access their company's permitted information. Only the site owner can authorize a person for cross-company comparisons; company owners' team invitations do not themselves grant access to other companies.

Where cross-company comparison access is enabled, permitted reports may identify companies and individual performers and display their results and rankings. Company representatives should ensure they have authority to provide this information and inform affected personnel of its intended use. Do not upload customer lists, payment-card information, medical information, Social Security numbers, or other unnecessary sensitive information.

Members can download or print permitted reports. Access controls cannot prevent a recipient from copying a report. Contact us if you believe information has been accessed or used improperly.

Service Providers and Other Disclosures

Cloudflare provides hosting and request delivery; Neon provides database and authentication services; Resend processes transactional email, including recipient addresses and message content. These providers process information needed for their functions and may retain operational records under their own practices. Their privacy information is available at Cloudflare, Neon, and Resend.

Google Business Profile and ServiceTitan connections are being developed. Connecting an account requires authorization and may involve provider identifiers, access tokens, and approved business information. A planned integration is not a statement that it is already active. Review the permissions presented when a connection is enabled.

We may disclose information when reasonably necessary to comply with applicable law or valid legal process, investigate abuse, or protect rights and security. Information may also be involved in a business transfer, subject to applicable law and appropriate notice. We do not make member reports publicly available as part of the service.

Passwords, Tokens, and Security

Account passwords are handled by the authentication service. The portal does not display raw passwords to administrators or other members. Invitation and reset links, session tokens, and any integration credentials are sensitive: do not forward them or submit them in application notes or ordinary email. Providers may receive authentication information necessary to perform their authorized functions.

We use HTTPS, authentication, role and company access controls, and database protections to reduce unauthorized access. These safeguards do not guarantee that a breach will never occur. Protect your account and tell us promptly about suspected compromise. Where legally required, we will provide notices of qualifying security incidents.

Cookies, Storage, and Tracking Choices

The service and its authentication provider use cookies or browser storage for authentication, security, and settings. Blocking them may prevent sign-in or affect service features. We do not operate third-party advertising or cross-site advertising tracking on the portal. The portal does not currently change its operation in response to a browser Do Not Track signal. Service providers may process technical information for delivery and security; external websites have their own practices.

Retention and Account Removal

We retain information for providing the service, report history, membership decisions, security, and business or legal needs. Applications and repeat-request history are retained for review. Disabling or deleting a portal account currently removes access while preserving report history and administrative records; it is not automatic erasure of all associated information.

Contact us to request deletion or a retention review. We assess what can be removed, what affects other company records, and what must be retained for legitimate or legal reasons. Provider backups and operational logs may remain for their normal retention cycles. We do not promise immediate deletion from every backup.

Your Requests and Choices

Email geno@profitsup.guru to request access to or correction of your personal information, deletion, an explanation of disclosures, or help revoking an integration. We may verify your identity and authority before acting. Your legal rights depend on applicable law; we will handle requests in accordance with that law. Do not send passwords or secret keys with a request.

Company representatives can request changes to company or performer information. Disconnecting an integration stops future authorized collection when the connection is revoked; previously imported records may remain subject to retention and deletion review. Necessary account and security messages may still be sent while you use the service.

Voluntary Existing-Team Inventory

This optional activity is for existing teams to discuss self-reported preferences. It must not be used for applicants, hiring, performance evaluation, job-role recommendations, or employment decisions. Participation or declining has no employment consequence. Each participant can see the workbook-based graph immediately after submission.

Anonymous participation is the default. For anonymous submissions, we retain combined answer counts grouped by submission date (UTC) and random retry codes, but no name or individual answer set or graph. Group charts appear after five submissions; totals and changes can still permit inferences. Individual anonymous responses cannot be located or withdrawn after aggregation.

Participants may separately opt in to named sharing. In that case we save the supplied name, individual answers, participation-notice version, and consent date. Their company owners / managers and the ProfitsUP site owner can access their individual graph. It is not automatically shared with the rest of the team or other companies. Public links and supplied names do not verify identity. We do not collect email addresses or send result emails for this activity. Hosting providers may still process normal connection and security information.

Named participants can request removal or correction of their identifiable record through geno@profitsup.guru. Company representatives can request deletion of activity data. Disabling a link stops new submissions but does not erase existing data; provider backups and logs may remain for normal retention cycles.

Portal Usage Measurement

To understand and improve the member portal, we record signed-in member page views and estimated active time, linked to the member account and aggregated by page and Pacific-calendar day. Active time is measured while a page is visible and focused and pauses after one minute without interaction. We retain sign-in history separately. Site-owner activity is excluded from member engagement reports.

Only the ProfitsUP site owner can view these usage reports. They are not shared with other members or company managers. Usage measurement does not record field contents, passwords, keystrokes, mouse coordinates, or session replay, and does not send analytics to an advertising service. Normal hosting and database providers process the records to operate the portal. Contact geno@profitsup.guru with questions or privacy requests.

Location, Intended Users, and Changes

This is a business service intended for adults, not children under 13. Information may be processed in the United States and other locations used by our providers; applicable protections and rights still apply.

We will update the effective date and version when this notice changes. Material changes will be communicated through the service or email as appropriate, and any consent required by law will be requested. Acknowledging this notice records that it was presented to you; it does not waive your privacy rights or authorize unrelated uses. Older published versions are retained for reference.