PRIVACY POLICY

1. Who We Are

Fortress is a product of Cadmus Project Management LLC, a Service Disabled Veteran Owned Small Business (SDVOSB) based in Rocklin, California. If you have questions about this policy, contact us at garrett@cadmusprojects.com.

2. Information We Collect

We collect only what is necessary to provide the Fortress service:

• Account information - your email address, collected via Clerk authentication.
• Vault contents - the comics you add to your vault, including titles, issue numbers, condition, and prices you enter.
• Scan history - barcodes scanned and their associated lookup results, used to improve the service and understand feature usage.
• Subscription data - your current tier and billing status, managed through Stripe.

We do not collect browsing history, device fingerprints, or any data beyond what you explicitly provide.

3. How We Use Your Data

Your data is used solely to operate the Fortress service:

• Displaying and managing your vault and want list
• Enforcing tier limits and feature access
• Processing subscription payments via Stripe
• Responding to support inquiries

We do not use your data for advertising, profiling, or any purpose unrelated to operating Fortress.

4. Data Storage

Your account and vault data is stored securely using Supabase, a cloud database platform. Data is stored in the United States. We apply industry-standard security practices including encrypted connections (TLS) and access controls.

5. Payment Processing

All payment processing is handled by Stripe. Fortress never sees, stores, or has access to your credit card number or payment details. Stripe's privacy policy is available at stripe.com/privacy.

6. Data Sharing

We do not sell, rent, or trade your personal data to any third party. We do not share your data with advertisers or data brokers. The only third-party services that receive data are:

• Clerk - authentication provider (email, session management)
• Supabase - database storage
• Stripe - payment processing

Each of these providers is bound by their own privacy policies and data processing agreements.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data and vault contents within 30 days. To request deletion, email garrett@cadmusprojects.com.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your vault data

To exercise any of these rights, contact us at garrett@cadmusprojects.com.

9. Cookies

Fortress uses session cookies required for authentication (via Clerk). We do not use tracking cookies or third-party analytics cookies.

10. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated via email to registered users. Continued use of Fortress after changes constitutes acceptance of the revised policy.

11. Contact

Questions or concerns about this privacy policy should be directed to:

Cadmus Project Management LLC
Rocklin, California
garrett@cadmusprojects.com