Privacy Policy
Pace HQ LLC (“Pace”) operates pacehq.io and app.pacehq.io. This policy describes how we handle personal information.
1. Who this applies to
Visitors, account administrators, and end users invited into a customer workspace. For workspace content, your organization is generally the controller and Pace is the processor. For signup, billing, and platform security, Pace is the controller.
2. What we collect
- Account data: name, email, organization, role, authentication identifiers (via Stytch)
- Billing: payment metadata via Stripe (we do not store full card numbers)
- Usage & logs: IP address, browser, pages/features used, audit and security events
- Workspace content: data you upload (chat, documents, credentials, files) — controlled by your organization
- Cookies: see our Cookie Policy
3. How we use data
To provide and secure the service, bill subscriptions, support customers, debug errors (Sentry), and comply with law. We do not sell personal information or use workspace content to train public AI models.
4. Sharing
We share data with subprocessors (hosting, database, auth, payments, monitoring), your organization’s admins, professional advisers, and when required by law. See the subprocessor list for vendors and locations.
5. International transfers
We operate from the United States. Primary platform database region: us-east-2 (Supabase). Cross-border safeguards (e.g., SCCs) are available on request for customers that require them.
6. Retention
Active account data for the subscription term plus a post-termination export window (typically 30 days). Billing records retained per tax law. Security logs retained per operational need (typically 1–7 years).
7. Security
Multi-tenant Postgres RLS, JWT validation, append-only audit logs, TLS in transit, encryption at rest where supported by infrastructure. Report issues to security@pacehq.io.
8. Your rights
Depending on your location you may request access, correction, deletion, restriction, portability, or opt-out of certain processing. Workspace users should contact their organization first. Email privacy@pacehq.io — we respond within 30 days where applicable.
9. Children
Business service not directed to children under 16.
10. Changes
We post updates here with a new “Last updated” date and provide additional notice for material changes when required.
11. Contact
privacy@pacehq.io
[REGISTERED BUSINESS ADDRESS]