Who this covers
This policy explains what Fathom Connectivity LLC ("we", "us") does with personal data across the Serialworks marketing site (serialworks.app) and the Serialworks application. It is written to meet the EU and UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and COPPA.
What we collect, and what we do not
The marketing site collects almost nothing. It sets no cookies, runs no analytics, and embeds no third-party trackers. Our web server keeps standard security logs (IP address, timestamp, page requested) for a short period to protect the service. That is all.
Payments are handled entirely by Stripe on Stripe's own pages. We never see, store, log, or transmit your card number. Stripe returns to us only what we need to run your subscription: your email, billing status, and the subscription and customer identifiers. Stripe's own privacy terms govern the card data it holds.
In the application, once you have an account, we process the account details you give us (name, email, shop name), the inventory and business data you enter (which is yours), and basic usage and audit records needed to run and secure the service.
Why we process it (GDPR legal bases)
- To perform our contract with you — creating and running your account, taking payment, providing support.
- Legitimate interests — securing the service, preventing fraud and abuse, keeping audit records. We balance these against your rights.
- Consent — only where the law requires it; you can withdraw it at any time.
- Legal obligation — keeping tax and accounting records.
Who we share it with
We do not sell personal data and do not "share" it for cross-context behavioral advertising, as those terms are defined under the CPRA. We disclose data only to the sub-processors that run the service — Stripe (payments), our hosting provider (Vultr), and our backup store — each under a data-processing agreement, and to authorities where the law compels us.
International transfers
Our infrastructure is in the United States. If you are in the EU, UK, or elsewhere, your data will be transferred to and processed in the US under appropriate safeguards, such as the Standard Contractual Clauses.
Your rights
If you are in the EU or UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. You may lodge a complaint with your supervisory authority.
If you are in California, you have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights.
To exercise any right, contact privacy@serialworks.app. Because your business data is yours, the application also lets you export every screen to CSV and request a full database dump at any time.
How long we keep it
We keep account and business data for as long as your account is active, and for 90 days after cancellation so you can recover it, after which it is deleted or anonymized. Billing records are kept as long as tax law requires.
Security
The service runs over TLS only, isolates each customer's data in its own database, keeps an append-only ledger that cannot be silently edited, and takes verified nightly backups. No system is perfectly secure, but security is a first-order design goal here, not an afterthought.
Children under 13 (and under 16 in the EU)
Serialworks is business software for manufacturers. It is not directed to children, and it is not intended for anyone under 18.
We do not knowingly collect personal data from children under 13, in line with the US Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal data from children under 16 in the EU without verifiable parental or guardian consent, in line with GDPR Article 8 (the exact age is 13 to 16 depending on the member state).
If you believe a child has given us personal data, contact privacy@serialworks.app and we will delete it promptly. We do not condition participation in any activity on a child disclosing more than is reasonably necessary, and we run no service, feature, or advertising aimed at children.
Changes
If we change this policy we will post the new version with a new effective date and, for material changes, notify account holders.
Contact
Fathom Connectivity LLC — privacy@serialworks.app. Questions about this policy, or a request to exercise your rights, go here.