Privacy Policy

1. Information we collect

We keep collection to what the Service actually needs:

• Account information. Your email address, and optionally your name and company name, when you create an account.
• Authentication data. A cryptographic hash of your password. We never store your password in a readable form and cannot recover it.
• Session data. A randomly generated session identifier stored in a cookie so you stay signed in.
• Technical logs. Standard server logs such as IP address, browser type, and pages requested, used for security and reliability.

Content you enter into the Navigator to find comparable projects — including scope descriptions and uploaded documents — is processed in your browser and is not transmitted to or stored on our servers.

2. How we use information

We use personal information to:

• create and maintain your account and keep you signed in;
• send transactional email such as email confirmation and password resets;
• operate, secure, debug, and improve the Service;
• respond to your enquiries; and
• comply with legal obligations.

We do not use your information for automated decision-making that produces legal effects about you.

3. Marketing email

By default we send only transactional messages required to operate your account. If we later offer product updates or newsletters, they will be opt-in, and every marketing message will include an unsubscribe link.

4. Cookies

We use a single strictly necessary cookie to keep you signed in. It contains an opaque random identifier, not your personal details, and is set with the HttpOnly and SameSite flags. We do not use advertising or cross-site tracking cookies. Clearing the cookie signs you out.

5. How we share information

We do not sell your personal information, and we do not rent or trade it. We share it only with service providers who help us operate the Service — such as our hosting provider, database provider, and transactional email provider — and only to the extent needed to perform those functions on our behalf.

We may also disclose information if required by law, valid legal process, or to protect the rights, safety, or property of Adaptive Coordination Technologies, our users, or the public. If we are involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction, and we will provide notice.

6. Data retention

We keep account information for as long as your account is active. Expired sessions and used or expired verification tokens are removed automatically. When you request deletion, we delete your account information within 30 days, except where we must retain records to comply with legal obligations or resolve disputes.

7. Security

We protect accounts with industry-standard measures: passwords are hashed with a salted, computationally expensive algorithm; session tokens are stored only as hashes so a database leak cannot be replayed as a login; and traffic is encrypted in transit. No system is perfectly secure, however, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and to delete, and the right not to receive discriminatory treatment for exercising them. Note that we do not sell or share personal information as those terms are defined under the CCPA.

To exercise any right, email team@integrateact.com. We will respond within the period required by applicable law and may need to verify your identity first.

9. International users

The Service is operated from the United States, and your information will be processed there. Privacy laws in the United States may differ from those in your country. By using the Service you understand your information will be transferred to and processed in the United States.

10. Children's privacy

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above, and where required by law we will provide additional notice.

12. Contact

Questions or privacy requests can be sent to team@integrateact.com. See also our Terms of Service.