Privacy & Your Data
This page summarizes how TimberCloud handles personal data and how you exercise your data rights. The authoritative document is the Privacy Policy.
What we collect
- Account information — name, email, company, role, and optionally phone number.
- Operational data — products, orders, customers, contacts, addresses, quotes, invoices, reviews, notes, and uploads you author in TimberCloud.
- Payment information — processed by Stripe; we never store full card numbers.
- Usage and device data — collected via cookies only after you opt in (see Cookies & Consent).
Your rights
Depending on where you live (GDPR Arts. 15–22 in the EU/UK; CCPA/CPRA in California), you can:
| Right | What it means |
|---|---|
| Access | Get a copy of the personal data we hold about you. |
| Export / portability | Receive your data in a portable format. |
| Rectification | Correct inaccurate data. |
| Erasure | Have your data deleted ("right to be forgotten"), except records we must keep for legal/tax reasons, which we anonymize instead. |
| Restrict / object | Limit or object to certain processing, including marketing. |
| Withdraw consent | Turn off analytics/marketing at any time. |
How to export or delete your data
- By email (the current path): email privacy@timbercloud.com to request a copy of your data or to have it deleted. This works for account holders and for end-customers of a merchant's white-label storefront alike. We respond within the timeframes required by law.
Note: A self-serve "export" and "delete" button inside the dashboard is planned but not yet available. Until it ships, email is the way to make these requests. Tell us in your message whether you want an export (a copy of your data) or erasure (deletion), and which email or account it relates to.
Note on erasure: Some records (for example invoices) must be retained for accounting and tax purposes. Where the law doesn't permit deletion, we anonymize the personal data rather than keep it identifiable.
Marketing email
Marketing email is opt-in. At signup there is a separate, unticked checkbox to receive product updates and tips. You can unsubscribe from any marketing message at any time, and it never affects transactional email (receipts, password resets, billing notices).
International transfers
Most of our service providers are US-hosted, so providing the service involves transferring data internationally. We use Standard Contractual Clauses and other safeguards for these transfers. See the Privacy Policy and Sub-processors.
Retention
We keep personal data only as long as needed, then delete or anonymize it. Lead/contact-form, beta, and storefront submissions (including any stored IP) are purged by automated retention jobs. Specific windows are stated in the Privacy Policy.
Next Steps
- Cookies & Consent — the four cookie categories and how to change your choices
- Sub-processors — the third-party services that process data on our behalf
- Privacy & Legal overview — quick answers and links to the binding policies
Contact
Privacy questions and data-subject requests: privacy@timbercloud.com.