Privacy Policy

Effective date: [Month Day, Year]

1. Who we are and what this covers

Kerf is business software for cabinet, millwork and panel shops, run by [Amis Enterprises, LLC] at [street address, city, state, ZIP] ("Kerf," "we," "us"). This policy explains what information we collect when you visit our website or use Kerf, how we use it, and the choices you have. It applies to our website and to the Kerf app. It is written to go with our Terms of Service.

2. Information we collect

• Demo requests. When you ask for a demo on our website, we collect your name, shop name, phone or WhatsApp number, email if you give it, team size, preferred language and any message you write.
• Account information. Your name or company name, work email, password (stored in protected form, never as plain text), role in your company, and your billing contact.
• Workspace data. What your team enters into Kerf: items and prices, stock counts, purchase orders, receipts, jobs, customer names you type into jobs, settings, and your company logo. We call this Customer Data.
• Billing information. Handled by our payment processor. We receive things like your plan, payment status and the last four digits of a card. We don't store full card numbers.
• Usage and device information. Basic technical data such as browser type, device, IP address, and sign-in times, used to keep Kerf running and secure.
• Communications. Messages you send us for support, sales or onboarding, and your choices about emails from us.

Kerf is built for businesses. Please don't enter sensitive personal information such as Social Security numbers, government ID numbers or financial account numbers.

3. How we use information

We use information to:

• contact you about the demo you asked for;
• run Kerf and keep your workspace working, including saving your data and showing your logo on your reports;
• create and manage accounts, invitations and team roles;
• provide onboarding and support, and answer your questions;
• bill you and prevent fraud or abuse;
• keep Kerf secure, fix bugs and improve the product; and
• send service messages, such as sign-in, password reset and billing notices. We'll send marketing emails only if you've asked for them, and every one has an unsubscribe link.

We don't sell your information, and we don't use Customer Data to advertise to you or anyone else.

4. Who we share it with

We share information only in these cases:

• Service providers. Companies that help us run Kerf: hosting, database, sign-in and file storage ([Supabase]), website hosting ([Netlify]), demo-request form handling ([Netlify Forms]), website fonts ([Google Fonts], which receives your IP address when the page loads its fonts), email delivery ([email provider]) and payment processing ([payment processor, once billing is on]). They may use the information only to provide their services to us.
• Legal and safety. When the law requires it, or to protect the rights, safety or security of Kerf, our customers or others.
• Business changes. If Kerf is sold or reorganized, your information may transfer to the new owner, who must honor this policy.
• With your direction. For example, when a workspace owner invites a teammate, that person can see the workspace.

We don't sell or rent personal information.

5. Your company's data and who can see it

Each company's workspace is private to that company. Inside a company, access depends on role:

• Owners and admins can see all workspace data, invite and remove team members, change roles, and manage the logo.
• Staff can log jobs, stock and orders, and see the team list, but can't invite people, change roles or manage the logo.

Our own access to workspace data is limited to what's needed to run and support Kerf, and to fix problems you ask us to look at. Customer names and other details you type into jobs are your business records. You're responsible for having the right to enter them.

6. How long we keep data

We keep Customer Data while your subscription is active. After it ends, we keep your workspace for [30] days so you can export it, then delete it. Copies in backups are removed within [90] days after that. You can download a full backup from Settings at any time. Demo requests from people who don't become customers are deleted within [12 months]. We keep account, billing and tax records for as long as the law or a legitimate business need requires, such as resolving a dispute.

7. Security

We use reasonable safeguards to protect your information. Data travels over encrypted connections (HTTPS). Each company's data is separated from other companies' data, and access inside a company is controlled by role. Passwords are stored in protected form. No system is perfectly secure, so we can't promise absolute security. If we learn of a breach that affects your information, we'll tell you as the law requires. You can help by using a strong, unique password and removing people who leave your team.

8. Cookies and browser storage

Our website remembers your language choice (English or Spanish) in your browser. The Kerf app stores a sign-in session in your browser so you stay logged in, and a temporary note if you open an invitation link before creating your account. These are needed for the site and app to work. We don't use advertising cookies or sell data to advertisers. You can clear this storage in your browser settings, which will sign you out.

9. Your choices and rights

You can ask us to give you a copy of your personal information, correct it, or delete it, and you can ask us to stop sending marketing emails. Most of this you can do yourself: workspace owners can export data and manage team members in Settings. For anything else, email [support email]. We'll reply within [30] days. If you're a team member rather than the account owner, we may need to send your request to your company, since your company controls its workspace. Depending on where you live, you may have additional rights under local privacy law, and we'll honor them where they apply.

10. Children

Kerf is for businesses and is not meant for anyone under 18. We don't knowingly collect information from children. If you think a child has given us information, email us and we'll delete it.

11. Where data is stored

Kerf is operated from the United States, and workspace data is stored on servers in [the United States]. If you use Kerf from another country, your information will be sent to and stored in the United States.

12. Changes to this policy

We may update this policy. For material changes we'll give at least [30] days' notice by email or in the app, and we'll change the effective date at the top. Using Kerf after a change takes effect means you accept it.

13. Contact

[Amis Enterprises, LLC], doing business as Kerf
[Street address, Miami, FL ZIP]
[Support email] · [Phone]