Privacy Policy

Introduction

Welcome to InPaceline LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, protect, and share your personal information when you visit www.inpaceline.com (the "Site"), use InPaceline OS and our other services (together, the "Services"), connect other accounts to InPaceline (such as Stripe, QuickBooks, Shopify, Google, or Slack), or interact with us.

By using our Site or Services, you agree to the terms outlined in this policy. If you do not agree, please do not use our Services.

Contact Information

For any questions regarding this policy or to exercise your privacy rights, you can contact us at:

Email: clay@inpaceline.com
Address: InPaceline LLC, 1205 Eliot Road, Franklin, TN 37064, United States

Personal Information We Collect

When you visit or interact with our Site and Services, we collect different types of information, including:

1. Device Information

Purpose: To improve website functionality and user experience.

Collected Automatically: Using cookies, log files, web beacons, and tracking technologies.

Examples: Web browser version, IP address, time zone, referring website, pages visited, and interaction details.

2. Account and Billing Information

Purpose: To create your account, process your subscription, provide customer support, and communicate about your account.

Collected From You: When you sign up, subscribe, or update your account.

Examples: Name, email address, phone number, and billing details. Card payments are processed by Stripe; we do not receive or store your full card number.

3. Customer Support Information

Purpose: To respond to inquiries, troubleshoot issues, and enhance service quality.

Collected From You: When you contact us via email or website forms.

Examples: Name, email, phone number, and any messages exchanged.

4. Information You Add to InPaceline

Purpose: To provide the Services you use.

Examples: Your company profile, financial figures you enter, plans and tasks, investor CRM records, investor readiness answers, pitch decks you upload for analysis, and links to data room documents.

5. Information From Accounts You Connect

You can choose to connect other accounts so your numbers stay current without typing. Each connection is optional, uses read-only access, and can be disconnected at any time in Settings → Integrations. For each one, we read only what the feature needs and store aggregate figures rather than raw records:

• Stripe (read-only): subscriptions, customers, charges, coupons and invoices, used to calculate your recurring revenue (MRR), revenue by month, and new and churned customer counts. We store those totals and counts, not your customers' details or payment information.
• QuickBooks Online (read-only): your Profit and Loss report by month and the current balances of your bank accounts, used to fill your P&L, cash, burn and runway. We store monthly totals by account and your total cash balance.
• Shopify (read-only orders): the date, total, and tax of your store's orders, reduced to monthly sales and order counts. We do not store your customers' names, contact details, or addresses.
• Google Analytics (read-only): aggregate website traffic (sessions, visitors, key events, traffic by channel, and top pages) for the property you choose.
• Google Search Console (read-only): aggregate search performance (clicks, impressions, top search queries) and sitemap indexing status for the site you choose.
• Google Drive: only the specific files and folder you choose with Google's file picker for your data room. We store each file's name and link; we do not read file contents or access other files in your Drive.
• Google Calendar: events from the calendars you select, so you can see and manage your schedule in InPaceline, and events you create or edit in InPaceline. If you turn it on (off by default), your open tasks are added to your calendar as all-day entries.
• Slack: your workspace and chosen channel, so you can share updates to Slack and add tasks with the /task command.

Every figure that comes from a connected account is labelled in InPaceline with its source and when it was last updated.

Minors

Our Site is not intended for children under 13 years of age, and we do not knowingly collect their personal information. If you believe your child has provided personal data, please contact us for deletion.

How We Use Your Personal Information

We use the collected information for:

• Providing the Services, including your dashboard, financial tools, plans, investor tools, and calendar
• Keeping your numbers current from the accounts you connect
• Processing payments and managing your subscription
• Enhancing website performance and customer experience
• Sending account and product emails, and promotional emails with your consent
• Preventing fraud and ensuring security

AI Features and Data Processing

InPaceline's AI features (such as the AI advisors, pitch deck analysis, and drafting) use Google Gemini through Google Cloud Vertex AI. When you use them:

• We send the AI service the company information needed to answer you: your company profile, plans and tasks, investor pipeline, the pitch deck you choose, and your financial figures, including totals synced from Stripe, QuickBooks, or Shopify.
• Data from Google APIs (Google Calendar, Google Analytics, Google Search Console, and Google Drive) is not sent to AI models.
• Your data is not used to train or improve AI models.
• AI suggestions (such as tasks or plan items) are shown to you to accept; the AI does not change your records on its own.

Data Protection and Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

Encryption

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Data stored in our systems is encrypted at rest (AES-256).
• Access tokens and keys for the accounts you connect are additionally encrypted with Google Cloud Key Management Service, kept only on our servers, and never sent to your browser.

Connected Accounts

• We request read-only access wherever the provider offers it, and only the permissions each feature needs. We refuse keys that could change your accounts (for example, Stripe secret keys).
• Connections use each provider's standard authorization (OAuth). We never see or store your passwords for those services.
• Connecting or disconnecting an account requires you to have signed in recently, and every change is recorded in an audit log.

Access Controls

• Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• We use role-based access controls and require multi-factor authentication for systems containing sensitive data.

Data Minimization

• We collect and keep the minimum data needed to provide the Services. From connected accounts we keep aggregate figures, not raw records, wherever the feature allows.

Incident Response

• We maintain an incident response plan to promptly detect, investigate, and respond to any data breach or security incident.
• In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

Regular Security Reviews

• We conduct periodic security assessments and reviews of our data protection practices to ensure ongoing compliance with industry standards.

Sharing Personal Information

We do not sell your personal data. We share it only with:

• Service Providers that run the Services on our behalf: Google Cloud and Firebase (hosting, database, sign-in, and AI through Vertex AI), Stripe (payments), Klaviyo and Resend (email), PostHog (product analytics), and Slack (only if you connect it).
• The services you connect, only to the extent needed to read the data you authorized.
• Legal Obligations: To comply with subpoenas, court orders, or government requests.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

SMS and Text Messaging

If you provide your mobile number and give your consent, InPaceline LLC may send you text messages about your account, your subscription, appointments and calls you have scheduled with us, and replies to questions you send us.

What we collect. Your mobile phone number, the record of your consent (including the date and time and the page or form on which you gave it), your messaging preferences, and the content and delivery status of messages exchanged with us.

How we use it. Only to send and receive the messages described above, and to keep a record of your consent and your opt-out choices as required by law and by mobile carriers.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.

Your mobile information will not be sold or shared with third parties or affiliates for promotional or marketing purposes.

Opting out and getting help. Reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message to stop receiving texts. We will send one confirmation message and nothing further. Reply START to re-subscribe. Reply HELP or INFO for help, or contact us at support@inpaceline.com or (423) 567-1065.

Consent to receive text messages is not a condition of purchase. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Third-Party Services and Tracking Technologies

We use third-party services, such as:

• Google Analytics (user behavior tracking on our Site) – Opt-out here
• Facebook and Google Ads (advertising personalization) – Manage preferences through your ad settings on those platforms.
• PostHog (product analytics) – to understand how the Services are used.

Google API Services User Data Policy

InPaceline's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This applies to data from Google Calendar, Google Analytics, Google Search Console, and Google Drive. Specifically:

• We use Google user data only to provide and improve the user-facing features described in this policy: your calendar, your website traffic and search figures, and your data room.
• We do not transfer Google user data to third parties except as necessary to provide or improve these features, as required by law, for security, or as part of a merger or acquisition with notice to you.
• We do not use or transfer Google user data for advertising, including retargeting or personalized or interest-based advertising.
• We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve, or train generalized AI or machine learning models.
• We do not allow humans to read Google user data unless you give affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymized for internal operations.

Shopify Merchant Data

If you connect a Shopify store, we read order totals only to calculate your monthly sales. We do not store your customers' personal information. We honor Shopify's privacy requests: customer data requests and deletions are acknowledged (we hold no customer-level data), and when you uninstall our app, your store's connection and synced figures are deleted.

Your Rights and Choices

Depending on your location, you have the following rights:

For U.S. Residents (CCPA)

• Request access to personal data we hold.
• Ask us to delete your data.
• Opt-out of targeted advertising.

To make a request, email clay@inpaceline.com with "Privacy Request" in the subject line.

For EEA Residents (GDPR)

• Access, correct, or erase your data.
• Restrict or object to data processing.
• Data portability (receive a copy in a readable format).

For GDPR requests, contact us via email.

Connected Accounts

• You can disconnect any connected account at any time in Settings → Integrations.
• You can also remove InPaceline's access from the provider's side: for Google, at myaccount.google.com/permissions; for Shopify, by uninstalling the app; for Stripe, by uninstalling the app or deleting the key you created.

Cookies and Tracking

We use cookies to improve your browsing experience and to keep you signed in. You can manage cookies through browser settings or visit www.allaboutcookies.org for guidance.

Do Not Track (DNT)

Currently, we do not respond to "Do Not Track" signals due to inconsistencies in industry standards.

Data Retention

We keep your information as long as your account is active or as necessary for legal, business, or customer service purposes. Specifically:

• Connected accounts: when you disconnect, we delete the stored access and the figures synced from that account. Monthly history snapshots already recorded in your company's history are kept unless you ask us to delete them.
• Google Calendar: copies of events from the calendars you select are kept while your calendar is connected; hiding a calendar deletes its stored events. You can ask us to delete all stored calendar data.
• Shopify: when Shopify tells us a store has uninstalled our app, that store's connection and figures are deleted.
• Upon request, we will delete your data unless retention is legally required.

Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date.