Privacy Policy

This policy explains what [Company legal name] ("All Blue USA") collects when you use the service and how we handle it. All Blue USA is for businesses only; we do not knowingly collect information about consumers or children.

What we collect

• Account data: your name, work email, password (stored hashed), and your role in your business.
• Business data: legal name, address, EIN, licences and the verification documents you upload.
• Activity data: orders, carts, lists, quotes, messages, disputes, payment and ledger records, and basic usage events such as searches and product views.
• Technical data: IP address, browser type and request logs, used for security and rate limiting.

Verification documents and EIN

Your EIN is encrypted at rest; the app shows only its last four digits. Verification documents are stored in private storage and are never public. When a reviewer needs to open one, we generate a short-lived link (about two minutes) that stops working afterwards. Only authorized All Blue USA staff review them.

How we use it

• to verify businesses and operate the marketplace, orders, escrow and disputes;
• to enforce state compliance rules and our prohibited-items policy;
• to send service emails and messages (order updates, verification results, resets);
• to prevent fraud, abuse and off-platform payment scams;
• to give warehouses aggregate analytics about impressions and views of their listings.

What other users see

Buyers and warehouses on the same order see each other's business name and the delivery and pickup details needed to fulfil it. In messages, phone numbers, emails, links and payment handles are automatically hidden. We do not sell your data.

Service providers

We use providers for hosting, file storage, email/SMS delivery and, when enabled, payment processing. They process data only to provide those services. We may disclose information when required by law or to protect rights and safety. [Lawyer: list providers by name.]

Cookies

We use a single session cookie to keep you signed in (a session lasts about 7 days). It is essential to the service, so there is no cookie banner. We do not use advertising or third-party analytics cookies. [Update this section if that changes.]

Retention

We keep account and business data while your account is active. Order, payment, ledger, dispute and audit records are kept as long as needed for tax, accounting, fraud prevention and legal obligations (planned: [7] years). Verification documents are kept while your account is active and for [period] afterwards. You can ask us to delete your data; we will do so except where we must keep it by law. [Operator and lawyer to confirm these periods.]

Security

We use encryption in transit, encryption of sensitive fields, private storage, per-business access controls and audit logging. No system is perfectly secure; tell us right away if you suspect a problem.

Your choices and US state rights

You can update account details in the app and request access, correction or deletion by emailing [contact email]. Some US states give residents extra rights over personal information; because this service handles business contacts only, those laws may apply differently. [Lawyer to confirm.] This service is operated in, and governed by the laws of, the United States.

Changes and contact

We will post updates here with a new date. Contact: [contact email], [Company legal name], [postal address]. See also our Terms of Service.