This Privacy Policy describes how Conduix (“we”, “us”) handles information in connection with the Conduix platform (the “Service”). The Service is business software operated for our business customers (each a “Customer”); we process most information on the Customer’s behalf to run their deployment.
1. Information we collect
- Account information — name, work email address, phone, job title, and an optional profile photo and email signature, provided when a Customer administrator invites you.
- Business records — the operational data users enter: jobs, quotes, companies, contacts, vendors, shipments, uploaded documents and photos. This data belongs to the Customer.
- Usage and session data — activity logs, an append-only audit trail of data changes, and session recordings (screen-interaction snapshots) used for support and quality. The sign-in screen discloses recording; recordings auto-purge after a configured retention window.
- Technical data — authentication events and server-side error logs necessary to operate and secure the Service.
- Enquiries from our public website — when you ask about Conduix on conduix.app we collect the work email, company, business type, and note you enter, plus the ad campaign that brought you there (for example the campaign name and the ad platform’s click identifier) and your browser’s user agent. We use this to reply to you and to learn which campaigns work.
2. How we use information
- To provide, support, and secure the Customer’s deployment.
- To send transactional email the Customer’s users initiate or that the Service requires (sign-in links, invitations, quotes, shipment notices).
- To diagnose problems and improve reliability.
We do not sell personal information. Information in a Customer deployment is never used for advertising and is not shared with third parties except the service providers below. Our public website (conduix.app’s landing pages, not the application) uses advertising tools only to measure whether an ad led to an enquiry — see sections 3 and 4.
3. Service providers (subprocessors)
- Vercel — application hosting (United States).
- Supabase (on AWS) — database, file storage, and authentication (United States).
- Resend — transactional email delivery.
- Intuit (QuickBooks Online) — only when the Customer connects its own QuickBooks company; the Service exchanges the Customer’s accounting records with the Customer’s own QuickBooks account.
- 17TRACK — carrier tracking status; receives only shipment tracking numbers.
On our public marketing website only (not in the application or any Customer deployment):
- Google Ads, LinkedIn (Insight Tag), and Meta (Pixel) — advertising measurement: whether a visitor who clicked one of our ads went on to send an enquiry.
- Vercel Web Analytics — cookieless, aggregate page-view counts.
- YouTube (privacy-enhanced mode) — plays our product video; the player loads only after you click play.
4. Cookies
The application. The Service uses essential cookies only — session cookies that keep you signed in. There are no advertising or cross-site tracking cookies in the application or in any Customer deployment.
Our public website. The conduix.app landing pages may set advertising cookies from Google Ads, LinkedIn, and Meta. We use them only to measure whether an ad led to an enquiry. Page views are counted with Vercel Web Analytics, which sets no cookies. The ad campaign you arrived from is remembered for your visit in your browser’s session storage (cleared when you close the tab) so it can be attached to an enquiry you send. The product video is embedded in YouTube’s privacy-enhanced mode: until you click play, only its preview image is shown; the YouTube player, and any cookies it sets, load only after you click play.
How to opt out. You can block or delete cookies in your browser settings, or browse in a private window. You can also turn off ad personalization in your Google ad settings, your LinkedIn advertising preferences, and your Meta ad preferences, or use the industry opt-out at optout.aboutads.info.
5. Security
Data is encrypted in transit (TLS) and at rest. Each Customer runs on a dedicated database with row-level security and role-based access control. Administrative changes are recorded in an append-only audit log. Access to production systems is limited to the operator.
6. Retention
Business records are retained for the life of the Customer’s account and handled per the Customer’s written agreement at termination. Session recordings purge automatically after the configured retention window. Audit log entries are retained as part of the Customer’s controlled records.
7. Your choices
Access requests, corrections, or deletion of personal information in a Customer deployment are handled through that Customer’s administrator, since the Customer controls its business records. You can update your own profile details in Settings at any time.
8. Changes
We may update this policy; the effective date above reflects the current version. Material changes will be communicated to Customer administrators.