Privacy Policy

1. Introduction

Automate Capture, LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the IPP Solutions software and related services ("Software" or "Service").

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information Provided Through Azure AD Authentication

When you authenticate with the Software, we receive from Microsoft Azure AD:

• Email address
• Display name
• Azure AD tenant ID
• User object ID

2.2 Information Stored in Our Database

For authorization purposes, we store:

• Email address
• User role (admin, manager, user)
• Tenant association
• Authorization status
• Login timestamps (for security audit)

2.3 Automatically Collected Information

When you use the Software, we may collect:

• IP address (for security logging)
• Device type and operating system
• Software version
• Anonymous usage statistics (optional)

2.4 Information We Do Not Collect

3. How We Use Your Information

We use collected information for:

4. Data Storage and Security

4.1 Data Storage Locations

Your data is stored in:

• Azure PostgreSQL Database (user authorization, invoice records)
• Microsoft SharePoint (generated documents, per your configuration)
• Local device (cached data, tokens)

4.2 Security Measures

We implement enterprise-grade security including:

• Azure AD authentication (industry standard)
• SSL/TLS encryption for all data in transit
• Encrypted database connections
• Server-side token validation
• Security audit logging
• Role-based access controls

4.3 Your Responsibilities

You are responsible for:

• Protecting your Azure AD credentials
• Reporting unauthorized access
• Maintaining security of your devices
• Backing up your local data

5. Data Sharing and Disclosure

Third-Party Service Providers

We use trusted third-party services:

• Microsoft Azure AD (authentication)
• Microsoft Azure (hosting, database)
• Microsoft SharePoint (document storage)

These providers are contractually obligated to protect your information.

Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our terms and conditions

6. Data Retention

We retain your information for as long as:

• Your account is active
• Required for legal or business purposes
• Required by law

You may request deletion of your data at any time (see Section 7).

7. Your Rights and Choices

You have the right to:

To exercise these rights, contact: info@automate-capture.com

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information. To exercise your CCPA rights, contact: info@automate-capture.com

9. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object

Legal basis for processing: Contract performance, Legitimate interests, and Consent. To exercise your GDPR rights, contact: info@automate-capture.com

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification
• Displaying an in-app notification

Your continued use of the Service after changes constitutes acceptance.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of discovery
• Describe the nature of the breach
• Provide information about affected data
• Explain steps we are taking to address the breach
• Advise you on steps you can take to protect yourself