Privacy Policy
Effective October 10, 2026. This policy describes how Timberline handles information when you visit timberlineledger.com or use a workspace.
Information we collect
We collect your account email, sign-in information, workspace name, and the records you choose to add: tickets, mill statements, dispatch lists, people, jobs, rates, and settlements. These records may include contact information and payment obligations. Hosting and service providers also process technical information such as IP addresses, security logs, and request details.
How information is used
We use information to provide sign-in, store your records, read uploaded documents, calculate and export settlements, process subscriptions, troubleshoot problems, and respond to support requests. We do not sell your personal information or use uploaded business records for advertising.
Service providers
Supabase provides account authentication, the database, and private document storage. Vercel hosts the application. Resend delivers account emails. OpenAI reads uploaded PDFs and images; the document contents are sent to its API with response storage disabled. OpenAI API data is not used for model training by default, but provider retention and abuse-monitoring policies still apply. CSV imports are parsed without sending their contents to OpenAI. Stripe processes subscriptions and payment details; Timberline does not store full card numbers.
Access and security
Records are associated with your workspace and accessed through authenticated application requests. Source documents are held in private storage. Workspace owners and authorized staff can access their workspace records. We use provider security controls and encrypted connections; no service can promise absolute security.
Retention and your choices
We retain workspace records while you use the service, including after a subscription ends so you can view and export them. You can request account or workspace deletion by contacting support. We will verify your authority, explain any records that must be retained for legal or billing purposes, and arrange deletion. Provider backups and security logs may persist under their retention policies. Approved settlements remain unchanged in the app unless the entire workspace is deleted.
You can access and correct unapproved business records in the app, export approved settlements, unsubscribe from optional messages, and request access to or deletion of personal information. Contact us for privacy requests. We use essential sign-in cookies; no advertising cookies are required.
Changes and contact
We will update this page when the policy changes and notify account holders of material changes. Contact lpendeavors@gmail.com with privacy questions or requests.