Privacy Policy

Two roles

For information about visitors and about the people who sign up to use TierMenu (account holders), TierMenu decides how it is used.

For the customer, location, equipment and proposal data that a company enters into TierMenu, the company decides what is collected and why. TierMenu processes that data on the company's behalf. Each company is responsible for its own homeowner data.

Information we collect and why

For account holders, we collect names, email addresses, password hashes, company details and account preferences to create accounts, provide the service and keep accounts secure.

Companies store customer and location details, equipment, price book items, proposals, signatures, agreements, invoices, team records and related email and activity logs. Companies decide why they collect homeowner data; we process it to provide their service.

When you sign up or sign in, we collect your IP address, approximate location (country, region and city), device type, browser, operating system and login history to secure accounts and understand how people find TierMenu. Signup attribution can include a landing page, referring site and campaign tags from browser storage.

For anonymous visits, we collect page paths, referring-site hosts, approximate country, device type and daily page counts to understand use of the public site. Campaign tags may be used to assign a broad channel, but raw campaign tags are not stored in visitor events. We briefly use the request IP address and browser details to create a daily salted visitor identifier; raw IP addresses and full browser details are not saved in visitor events.

We record marketing email choices, including the choice, time, source and IP address, so we can honor and document your preference.

Sign-up and sign-in records

Signup IP addresses are cleared after 90 days, and login-history records older than 90 days are deleted. Approximate signup location remains with the account. We send tips and offers only if you opt in; you can unsubscribe in account settings.

IP Geolocation by DB-IP

Google sign-in

If you choose Google sign-in, Google shares your name, email address and a unique account identifier with TierMenu. We use them to verify your identity, create or link your TierMenu account and secure sign-in. TierMenu does not receive your Google password.

Template email requests

If you request an emailed template copy, we save your email address as a lead so we can send the copy and respond. It is not a marketing signup. These lead records do not have an automatic deletion schedule.

Payment data and service providers

When you subscribe, Paddle.com receives your account email, the selected subscription and the payment details you provide at checkout. Paddle.com is the Merchant of Record for our orders and returns billing status and account references to TierMenu.

We use Replit for hosting, database and file storage; Resend for email; Cloudflare for DNS and email routing; and Google if you choose Google sign-in. We use the DB-IP geolocation database to estimate signup location.

Cookies and browser storage

The sign-in session uses a secure, HTTP-only cookie that lasts up to 30 days and is renewed while you use the account.

First-touch attribution uses browser storage and a cookie to remember the landing page, referring site and campaign tags. The cookie expires after one year; browser storage remains until you clear it. The analytics consent choice is saved in browser storage.

First-party daily visit counts do not use cookies. If Google Analytics is configured, it uses optional analytics cookies only after you accept. You can decline or disable analytics; you can also clear cookies and browser storage in your browser settings.

Retention and security

Company records remain until the owner deletes the company. Account records remain until the account is deleted; a cancelled subscription or expired trial does not automatically delete data. Owners can export company data or permanently delete the company and account in Settings. Daily database backups can retain deleted records for up to 14 days.

Signup and session IP addresses are cleared after 90 days. Login-history records older than 90 days are deleted. Session records, including browser and operating-system details, are not automatically deleted when they expire; they are deleted when the session is signed out or the account is deleted. Marketing-consent records, including their IP addresses, are kept with the account without a scheduled expiry. Visitor events are rolled into daily totals and then deleted; temporary visitor salts are deleted within 24 hours. Daily totals have no scheduled deletion. Template email leads also have no automatic deletion schedule.

We use access controls, hashed passwords and encrypted connections. No system is perfectly secure. See the Security page for more.

Your choices and rights

Contact support@tiermenu.com to request access to, correction of, or deletion of your personal information. Account owners can export company data or permanently delete the company and account in Settings.

If you are a homeowner whose information was entered by a company, contact that company about your data. You can withdraw marketing email consent in account settings and decline or disable optional analytics.

Changes

We may update this policy. Material changes will be posted on this page.