Privacy Policy.

Logirate LLC is based in Puerto Rico and operates tierbatch.com. This policy covers TierBatch's website, account and batch features, and related customer communications. Our services are currently intended for businesses in the United States, including Puerto Rico.

Logirate also operates valueoversight.com, a promotional website. When you follow a link from that website to TierBatch, we may receive advertising and referral information as described in Section 5. This policy covers our handling of that information at TierBatch. The notice presented on ValueOversight governs collection on that website; this document is not a substitute for that notice.

A batch merchant is the company selling the goods and handling the purchase and fulfillment for that batch. The merchant is identified in the batch listing and purchase terms. Our current merchant is Southside Palmetto LLC. A merchant is a separate legal entity even where there is common operational control.

This policy describes privacy practices. It does not change the batch purchase terms, create marketing permission merely through website use, or waive any privacy right you have under applicable law.

The information collected depends on how you interact with TierBatch. Personal information includes information linked or reasonably linkable to a person, including a business contact.

We may derive ordinary business insights from these records, such as products a customer has asked about or whether a reservation remains incomplete. We do not currently buy external enrichment profiles or use personal information to make solely automated decisions producing legal or similarly significant effects.

Please do not submit full payment-card numbers, security codes, passwords, Social Security numbers, health information, or unrelated sensitive information through support messages, photographs, or general upload fields. Provide only information needed for the transaction, and redact unnecessary personal details from tax documents where appropriate.

If you provide someone else's information, such as a receiving employee's contact details, provide it only when you are authorized to do so and make this policy available to them.

We obtain information directly from you; automatically through the website and its service providers; from ValueOversight referral links; and from participants in your transaction, including the merchant, payment processor, supplier, carrier, or logistics provider. For example, a carrier may provide delivery status and the merchant may provide payment or fulfillment confirmation.

When third-party sign-in or other optional integrations are enabled, information may also come from the provider you choose, within the permissions you authorize.

How the advertising information moves

When you arrive through an advertisement, the destination URL may contain a Google advertising click identifier and campaign information. On ValueOversight, our script may store that identifier in a first-party cookie and include it in a link you follow to TierBatch. TierBatch may then receive the identifier and associate it with your account, lead, reservation, or transaction in our database. The two websites do not need to read the same cookie for an identifier to be transferred through a link.

The click-ID cookie is configured to expire 60 days after it is set. An ordinary return visit does not restart that period. A new advertising click identifier may replace the prior identifier and start a new 60-day period. Browser settings or your choices may cause earlier deletion or prevent storage. This period applies to our click-ID cookie, not automatically to other providers' cookies.

Cookie expiration does not automatically delete an identifier already saved in an account or transaction record. Database retention is addressed in Section 11. Cookie storage, referral transfers, and conversion uploads remain subject to applicable privacy requirements and choices.

Conversion uploads to Google

We report eligible conversion events to Google Ads to measure advertising results and improve campaign performance. Events may include registrations, leads, reservations, and completed purchases, including credit-card purchases. The uploaded information may include a click identifier, event type, event date and time, transaction or order identifier, conversion value, and currency.

Our initial implementation uses click identifiers. We also plan to enable enhanced conversions, which may use customer-provided information such as email addresses or telephone numbers, hashed before upload as required by Google's implementation. When enabled, Google can match that information with information it holds to measure conversions. Hashing transforms information into a coded value; it does not necessarily make information anonymous. Any required notice or consent will be provided or obtained before activating additional processing.

We share information with Google for advertising measurement on our behalf. We do not send full card numbers or security codes as conversion data. We do not currently upload customer lists for Customer Match or other audience-building programs. Learn more about how Google uses information from sites and apps that use its services and Google's advertising controls. Those controls are separate from requests you make to TierBatch.

Other cookies and similar technologies

The platform and its providers may also use cookies, local storage, or similar technologies for authentication, security, payment functionality, preferences, and Hotjar analytics. An identifier used for advertising attribution is not treated as essential merely because it is stored by us rather than a third party.

You can manage cookies in your browser. Blocking or deleting necessary cookies can affect login or checkout. Deleting cookies alone does not delete database records, stop every server-side use, or exercise every legal opt-out right. See Section 10 and Privacy Choices to manage optional tracking or make a privacy request.

We use Hotjar to understand how visitors use TierBatch and improve usability. Its tools may create heatmaps and session replays from interactions such as clicks, taps, scrolling, navigation, and page content. A session replay reconstructs browser interactions; it is not a camera or microphone recording of you.

Hotjar may receive device and browser information, page URLs, timestamps, identifiers, and interaction data. Our intended coverage includes public pages and signed-in areas. The information visible in a recording depends on the pages visited and the suppression settings applied. Pages may display personal or business information, so recording controls and masking are important.

We use these tools subject to applicable notice, consent, and choice requirements. We do not intend to collect passwords, full card details, security codes, or the contents of sensitive documents through recordings. Do not submit unnecessary sensitive information in general site fields. Information about Hotjar's practices is available in Hotjar's Privacy Policy.

Stripe handles payment-card entry and processing. TierBatch does not collect full card numbers or card security codes through its own ordinary forms. We receive the transaction and limited payment-method information needed to administer payments, refunds, accounting, support, and fraud prevention.

Stripe also processes information for purposes described in its own Privacy Policy, including payment security and legal compliance. The batch merchant may separately process your purchase invoice and receive payment-related records for that transaction. Do not email or text full card details to us or the merchant.

The batch merchant and logistics personnel

During the current proof-of-concept phase, Southside Palmetto LLC has access to the same customer dataset available to TierBatch's operational team, rather than only a limited extract for a particular order. This can include contact and account information, leads, reservations, order and payment-related records, documents, communications, and available attribution and interaction records. It does not mean access to full card data retained by Stripe or to plaintext passwords.

The merchant uses this information to administer batch participation, answer inquiries, invoice, procure goods, coordinate logistics, resolve problems, and support TierBatch-related customer communications. Our administrator, merchant personnel, and logistics specialist may access the shared records as part of these operations.

The merchant handles some information as a separate seller with its own accounting, tax, fulfillment, and legal obligations. Requests to us concerning shared information will be coordinated with the merchant where appropriate. A merchant's independent processing may also be described in a notice it provides. Common operational control does not eliminate either company's privacy obligations.

Sharing operational contact information does not itself authorize the merchant to enroll you in independent promotional texts, sell your information, or market unrelated offerings without the notice and permission required for that activity. Mobile messaging consent is specific to the sender and use for which it was obtained; it is not transferred as a marketing permission merely through shared database access.

Suppliers, carriers, and delivery providers

We and the merchant disclose information needed to quote, procure, deliver, or investigate an order, such as goods and quantities, delivery addresses, receiving contacts, access instructions, and relevant claim evidence. These parties do not receive unrestricted platform-database access merely by participating in a shipment.

Technology and operational providers

Providers process information for functions such as hosting, databases, authentication, payments, messaging, support, and analytics. Our current or planned service arrangements include:

• Stripe: payment processing and related payment services.
• Google Ads: click attribution and conversion measurement described in Section 5.
• Google Sheets: operational records, reporting, and workflows, which may contain contact, transaction, and attribution information.
• Twilio: message delivery and related communications services, which may process phone numbers, message content, delivery records, and opt-out information.
• Lovable and hosting/database providers: operation and maintenance of the platform and its stored information. The specific infrastructure can change as the service develops.
• Hotjar: website interaction analytics and session recordings described in Section 6.

We may also disclose information to authorized technical contractors and professional advisers where needed for their work. Where a provider acts on our behalf, its handling is subject to the applicable service arrangement. Some providers also act independently for their own legal, security, or other disclosed purposes.

Legal matters and business transactions

We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights or safety, investigate suspected fraud or abuse, or resolve claims. Information may also be reviewed or transferred in connection with financing, a merger, reorganization, sale of assets, or similar transaction, subject to applicable confidentiality and privacy requirements.

Data sales and advertising disclosures

We do not currently sell customer lists for money or operate a lead-selling business. Certain advertising-related disclosures may nevertheless be considered a "sale," "sharing," or processing for targeted advertising under particular state laws, depending on the recipient's uses and contractual restrictions. Where those rules apply to our processing, the corresponding rights described in Section 10 apply. We do not treat the absence of a cash payment as proof that a disclosure is outside those rules.

We communicate manually and through automated systems. Operational communications include receipts, order acknowledgments, account verification, batch updates, invoice and delivery notices, and support responses. Promotional communications may include future batches, incomplete reservations, news, and products or services relevant to our business customers. Whether a message is promotional depends on its content and purpose, not simply its label.

Where required, we obtain consent for the channel, sender, and type of communication before sending it. Consent to promotional texts or calls is not a condition of purchase. Providing a phone number for delivery or accepting general terms does not by itself constitute unlimited marketing consent.

• Email: use the unsubscribe link in a promotional email or contact us to stop promotional emails.
• Text messages: reply STOP to opt out of messages from the applicable program or number. You may receive a permitted confirmation. Contact us for assistance or an alternative way to receive necessary order information. Message frequency varies; message and data rates may apply.
• Calls: tell the caller you do not want further marketing calls or email us with the number to suppress. We honor applicable do-not-call and consent requirements.

Marketing opt-outs do not prevent necessary nonpromotional email or other lawful operational communications. A text-message opt-out will not be bypassed by relabeling messages as transactional; we will use another appropriate channel where necessary. We retain limited suppression and consent records to respect your choices.

If we introduce call recording, transcription, or artificial/prerecorded voice features, we will provide the required notice and obtain any required consent before using them. This policy is not consent to those features.

Contact privacy@tierbatch.com to ask about our practices, request access or correction, request account closure or deletion, or ask us to stop specified advertising or marketing uses. Identify the relevant account email and describe your request. Do not send a password or full payment-card number.

Tracking choices

You have choices about advertising measurement and session recordings. Visit Privacy Choices to manage these separately or submit a request to opt out of covered sales, sharing, or targeted advertising. You can change your choices at any time without closing your account or losing access to purchasing features.

• Advertising measurement: turn off optional advertising attribution, including storage and use of advertising click identifiers and future Google conversion uploads associated with your browser or identified account, including uploads using hashed contact details.
• Session recordings and analytics: turn off optional Hotjar collection, including session recordings and heatmaps.
• Essential functions: necessary account, security, payment, and order-processing technologies remain available. Advertising and Hotjar tracking are not classified as essential just because they help our business.

Where prior consent is required, we ask before activating the relevant tracking. Where applicable law permits notice and opt-out, the relevant processing may occur unless you opt out. We honor applicable opt-out requests and recognized signals, including Global Privacy Control where required. Your choices apply to the corresponding browser and server-side processing; we do not substitute another identifier to bypass them.

We apply a browser choice to that browser and, when we can associate it with your account, to the corresponding account-level processing. A recognized choice passed from ValueOversight is carried forward to the corresponding TierBatch advertising processing. If we cannot identify a choice from another browser or device, you may need to make the choice there too. Contact privacy@tierbatch.com for help applying a request to your account.

Turning off optional tracking stops the covered future collection or use; it is not automatically a request to erase every existing record. You may separately request deletion. We may retain transaction, security, and consent or suppression records for the purposes described in Section 11. Marketing email, text, and call preferences are separate and are explained in Section 9.

Where applicable law requires an opt-out from sale, sharing, or targeted advertising, or requires honoring a recognized browser signal such as Global Privacy Control, that requirement applies to the relevant processing. Where prior consent is required, processing requiring that consent must not begin without it. Advertising choices must be applied to relevant server-side conversion uploads as well as browser storage. A cookie rejection is not bypassed by substituting hashed contact information for the same rejected use.

Privacy controls may operate at browser or device level unless associated with your account. Deleting cookies or using another browser may require reapplying a browser-level preference. A legally required recognized opt-out signal is handled according to applicable law. The older "Do Not Track" signal is distinct from Global Privacy Control; this policy does not claim that all tools recognize it.

State-law rights

Depending on your state, the context of the information, and whether the relevant law applies to us, you may have rights to confirm processing, access or obtain a portable copy, correct inaccuracies, delete information, and opt out of covered sales, sharing, targeted advertising, or certain profiling. Some laws also provide rights concerning sensitive information, authorized agents, appeals, and freedom from unlawful discrimination for exercising rights.

We assess requests under applicable law, verify identity where appropriate, and respond within the required period. We do not require unnecessary identity verification for an opt-out. An authorized agent may submit a request; we may request evidence of authority where allowed. If a request is denied, we explain the reason where required and any applicable appeal procedure. You may submit an appeal to our privacy email with "Privacy Appeal" in the subject and may contact your state privacy regulator or attorney general.

Deletion and access rights have legal exceptions, including records needed for transactions, security, taxes, disputes, or legal obligations, and protection of another person's information. Account closure does not necessarily erase outstanding orders or required records. We do not unlawfully discriminate against you for exercising applicable rights.

Additional information for California residents

If the California Consumer Privacy Act applies to us and your information, the categories and sources in Sections 2–3, purposes in Sections 4–9, recipient categories in Section 8, and retention criteria in Section 11 describe our relevant practices. These can include identifiers, customer-record information, commercial information, internet activity, approximate geolocation, uploaded visual information, and inferences about product interests. Limited account-access or document information may qualify as sensitive personal information depending on its contents. We do not seek sensitive information for advertising.

We do not knowingly sell or share personal information of people under 16. You can submit applicable sale or sharing opt-outs through Privacy Choices.

We retain personal information for as long as reasonably necessary for the purposes described here, considering the nature of the information, account activity, outstanding transactions, legal obligations, disputes, security needs, and applicable deletion requests. Different records have different retention periods.

• Click-ID cookie: up to 60 days from setting it, with a new period only for a new click identifier, as explained in Section 5.
• Database attribution records: retained separately while needed for conversion reporting, reconciliation, troubleshooting, or a documented legal purpose; they are not automatically deleted when the cookie expires.
• Accounts and unconverted leads: retained while needed for an active account, inquiry, requested follow-up, or permitted marketing relationship, with inactivity and opt-outs considered when reviewing retention.
• Orders, invoices, tax documents, and agreement records: retained as needed for fulfillment, accounting, applicable recordkeeping, refunds, chargebacks, and legal claims.
• Support and session data: retained according to the operational need, provider settings, sensitivity, and whether needed for an unresolved issue. Session-recording retention may differ from support-message retention.
• Consent and suppression records: retained as needed to demonstrate consent, honor opt-outs, and avoid contacting people who have declined marketing.

When information is no longer needed, we delete it or de-identify it, subject to applicable retention duties. Backup copies may persist until their normal deletion cycle and are not intended for routine reuse. If restoration is necessary, applicable deletion and suppression requests must be reapplied. A legal hold may require keeping specific records longer.

We use administrative, technical, and organizational safeguards appropriate to the information and our operations. Administrative and operational accounts used by our administrator, merchant, and logistics specialist are protected with two-factor authentication. Access within the current shared operating arrangement is described in Section 8.

No website, storage system, or transmission method is completely secure. We do not promise absolute security. Protect your login information, use available account-security features, and notify us promptly of suspected unauthorized access. We investigate incidents and provide notices where required by applicable law.

Logirate operates from Puerto Rico, the current merchant operates from South Carolina, and technology providers may process information in the United States and other countries where they or their service providers operate. We do not promise that all information remains in one state, territory, or country. Processing remains subject to applicable contractual and legal safeguards.

Our service currently targets the U.S. market. That does not waive any mandatory protection that may apply to an individual. Links to third-party services are provided for convenience. Those services' own notices apply to their independent processing; their presence does not eliminate our responsibilities for disclosures we make.

For merchant-specific records, identify your batch or order so we can coordinate your request with the appropriate merchant.