Privacy Policy

1. Introduction

This Privacy Policy explains how D20Web LLC, doing business as Power TC (“Power TC,” “we,” “us”), collects, uses, and protects personal information when you visit our website or use the Power TC application (together, the “Service”).

2. Information We Collect

Account information. Name, email address, role, and a securely hashed password for each user an office creates.

Office business data. Information your office enters to run its transactions: property and transaction details, task checklists, agent and contact records, milestone dates, commission figures, and notes.

Billing information. Subscriptions are processed by Stripe. Your payment card details are collected by and stored with Stripe — they never touch our servers. We store only the Stripe identifiers needed to link your office to its subscription.

Usage and log data. IP address, browser and device information, and request logs collected automatically for security and operations.

3. Your Office’s Data Belongs to Your Office

Power TC is a multi-tenant service: each office’s data is isolated from every other office. The business records your office enters belong to your office. We process them only to provide, maintain, secure, and improve the Service — we do not use them for advertising and we do not sell them.

4. Demo Sandboxes

The public demo creates a temporary sandbox office populated with entirely fictional data. Sandboxes are ephemeral and are automatically deleted on a nightly sweep. Do not enter real client or transaction information into a demo sandbox.

5. How We Use Information

• Provide, maintain, and improve the Service
• Authenticate users and secure accounts and offices
• Process subscription billing through Stripe
• Respond to support requests
• Monitor for fraud, abuse, and security incidents
• Comply with legal obligations

6. How We Share Information

We do not sell personal information. Information is shared only with:

• Service providers that host and operate the Service on our behalf: Vercel (application hosting), Turso (database hosting), Stripe (payments), and Cloudflare (bot protection on the demo entry).
• Legal authorities when required by law.
• Successor entities in the event of a merger, acquisition, or sale of assets, subject to this policy.

7. Data Retention

Demo sandboxes are deleted nightly. If your office’s subscription ends, we preserve the office’s data so it can be reactivated; you may request deletion at any time by emailing privacy@d20web.com, and we will delete it within a commercially reasonable period unless we are legally required to retain it.

8. Your Privacy Rights

Depending on your state of residence, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to not be discriminated against for exercising those rights. To exercise them, email privacy@d20web.com. We may need to verify your identity before acting on a request.

9. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including encrypted transport, hashed passwords, and per-office data isolation. No system is completely secure.

10. Children’s Privacy

The Service is for business use and is not directed to children under 13. We do not knowingly collect information from children.

11. Changes to This Policy

We will post updates to this policy on this page with a new “Last updated” date.

12. Contact

D20Web LLC (d/b/a Power TC) — privacy@d20web.com