Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use our services, you may provide:

• Account Information: Email address, name (optional), password (encrypted)
• Profile Information: Saved companies, job alerts, preferences
• Communications: Messages sent to our support team
• User-Generated Content: Comments, corrections, or data submissions (when feature is available)

1.2 Information We Collect Automatically

When you visit our website, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent, features used, search queries
• IP Address: For analytics, security, and rate limiting
• Cookies: Authentication tokens, preferences, analytics (see Cookie Policy below)
• Referrer Information: How you arrived at our site

1.3 Public Data We Aggregate

Our platform aggregates publicly available information from:

• Government Sources: WARN notices, SEC filings, labor statistics
• Public Company Data: Press releases, financial reports, stock prices
• News Sources: Headlines and summaries from public news articles
• Market Data: Stock prices, market capitalizations (publicly traded companies)

Important: We do NOT collect or publish personal information about individual employees (names, addresses, salaries, etc.). Our data is aggregated at the company level.

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Enable account access, saved searches, alerts
• Improve Platform: Analyze usage patterns, fix bugs, add features
• Security: Detect fraud, prevent abuse, enforce terms
• Communications: Send service updates, respond to inquiries
• Analytics: Understand how users interact with our platform
• Legal Compliance: Comply with laws, regulations, legal processes

We do NOT:

• Sell your personal information to third parties
• Use your data for targeted advertising (we may display contextual ads in the future)
• Share your email address with other users or companies without consent

3. How We Share Your Information

3.1 Service Providers

We share information with trusted third-party service providers who help us operate our platform:

• Supabase: Database, authentication, hosting (data stored in US)
• Vercel: Website hosting and CDN (data stored in US)
• Google Fonts: Typography (does not collect personal data)

These providers are contractually obligated to protect your data and use it only for providing services to us.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Subpoenas, court orders, or legal processes
• Government or law enforcement requests
• Protection of our rights, property, or safety
• Investigation of fraud, security issues, or terms violations

3.3 Business Transfers

If theNumbers.io is acquired, merged, or undergoes a business transfer, your information may be transferred to the new entity. We will notify you via email or site notice before your data is transferred and becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Authentication, security, site functionality (required)
• Preference Cookies: Dark mode, saved filters, language settings (optional)
• Analytics Cookies: Page views, usage patterns (optional, if implemented)

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features (like staying logged in).

5. Data Retention

We retain your information for as long as necessary to provide services or as required by law:

• Account Data: Retained while your account is active
• Usage Logs: 90 days (for security and debugging)
• Public Layoff Data: Retained indefinitely (historical records)
• Deleted Accounts: Anonymized within 30 days of deletion request

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 All Users

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a structured format
• Opt-Out: Unsubscribe from marketing emails (when applicable)

6.2 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to Object: Object to processing of your data
• Right to Restrict: Limit how we use your data
• Right to Lodge Complaint: File complaint with your data protection authority
• Withdrawal of Consent: Withdraw consent at any time (for consent-based processing)

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about data collected
• Right to Delete: Request deletion of your data
• Right to Opt-Out: We do NOT sell your personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

6.4 How to Exercise Your Rights

To exercise any of these rights, contact us:

We will respond to your request within 30 days (or as required by applicable law).

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: HTTPS for all data transmission, encrypted passwords
• Access Controls: Role-based access, admin-only sensitive operations
• Authentication: Secure session management via Supabase Auth
• Rate Limiting: Protection against brute force and denial-of-service attacks
• Regular Backups: Daily automated backups (Supabase)
• Monitoring: Security logs, error tracking, intrusion detection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Our services are hosted in the United States. If you are accessing our site from outside the US, your information will be transferred to, stored, and processed in the United States.

The United States may have data protection laws that are different from those in your country. By using our services, you consent to the transfer of your information to the United States.

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete it.

10. Third-Party Links

Our site contains links to external websites (news articles, company websites, government sources). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: