Privacy Policy

1. Information We Collect

When you interact with RederSoft (referred to as "we," "us," or "our"), we may collect information in the following circumstances:

• Contact & Inquiry Information: When you submit a project request or contact form on our website, we collect your name, business name, email address, phone number, and project details.
• Billing & Account Information: For active clients subscribed to our $5/month hosting and website services, we collect billing contact details and process monthly subscriptions through secure, PCI-compliant third-party payment processors (e.g., Stripe). RederSoft does not directly store complete credit card numbers on our servers.
• Client Website Content: Text, images, logos, menus, pricing sheets, schedule details, and other brand assets you provide for inclusion on your website.
• Automated & Analytics Data: When you visit our website, our servers and content delivery networks (AWS CloudFront) automatically log standard technical data, such as your IP address, browser type, operating system, and pages viewed, to maintain security and optimize performance.

2. How We Use Your Information

We use the information we collect for legitimate business purposes, including:

• Designing, building, customizing, and publishing your business website.
• Providing high-speed CDN hosting, SSL encryption, and technical maintenance.
• Processing your $5/month recurring hosting subscription with no long-term agreements.
• Communicating with you regarding design revisions, updates, domain connections, and customer support.
• Protecting against fraud, security incidents, and unauthorized access.
• Complying with applicable legal and regulatory obligations.

3. Business Apps & Tenant Portal Data

For clients utilizing the RederSoft Business Apps Suite (such as the Restaurant & Menu CMS at admin.redersoft.com, Salon Scheduling, or Church Ministry Hub):

• Multi-Tenant Isolation: Your back-office data (menu items, prices, business hours, team member roster, appointment availability, and sermons) is stored within isolated tenant boundaries.
• Authentication & RBAC: Portal logins are authenticated using secure industry-standard protocols (e.g., AWS Cognito) with role-based access control (RBAC).
• Headless Public Feeds: Menu updates and public scheduling slots are published to edge JSON endpoints for instant website synchronization. Only information you intend to make publicly visible on your site is exposed in public feeds.

5. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information to data brokers or third-party advertisers.

We only share data with trusted third-party service providers necessary to operate our business, such as:

• Cloud Infrastructure: Amazon Web Services (AWS) for secure hosting, S3 storage, Cognito authentication, and CloudFront global CDN distribution.
• Payment Gateways: PCI-DSS compliant processors (e.g., Stripe) for recurring subscription billing.
• Communication Services: Email and SMS delivery providers (e.g., AWS SES, Twilio) for appointment confirmations, kitchen ticket OTPs, and customer support.
• Legal Requirements: If required by law, subpoena, or government authority to protect legal rights or safety.

6. Google API Services & Google Connectors Data Policy

When you use Google Sign-In, Google OAuth authentication, or connect Google services (such as Google Calendar for appointment sync or Google Workspace integrations) with RederSoft or our back-office tenant applications:

• Types of Data Accessed: We only access the specific Google user profile data (such as your name, email address, profile photo, or calendar events) that you explicitly authorize via the Google OAuth consent screen.
• Purpose of Use: Google user data is strictly used to authenticate your identity, secure your tenant portal session, or synchronize your business scheduling availability.
• No Sale or Third-Party Transfer: We do not sell your Google user data to third parties, data brokers, or advertisers. We do not use Google user data for advertising, marketing, or general surveillance.
• No AI Model Training: Google user data is never used to train, retrain, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
• Google Limited Use Disclosure: RederSoft's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Revoking Access & Data Deletion: You can revoke RederSoft's access to your Google account at any time via your Google Security Settings (Third-party apps with account access). You may also request deletion of any stored profile tokens by contacting privacy@redersoft.com.

6. Data Security & Hosting

We implement robust technical and organizational security measures to protect your personal and business data. All data transmitted between your browser and our website or tenant portals is encrypted in transit using modern Transport Layer Security (TLS/SSL).

Our hosting architecture leverages Amazon Web Services (AWS) data centers with strict physical access controls, continuous monitoring, and enterprise-grade redundancy.

7. Cookies & Tracking Technologies

RederSoft uses minimal cookies necessary for website functionality, theme preferences, and security authentication. We do not use invasive third-party tracking cookies or cross-site advertising trackers. You can configure your browser to decline cookies, though certain portal features may require session cookies to function properly.

8. Ownership of Client Content

You retain 100% full intellectual property ownership of all logos, photographs, business descriptions, trade names, and custom text you provide to us. RederSoft does not claim ownership over your brand or proprietary business materials.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access & Portability: Request a copy of the personal information we hold about you.
• Correction: Request that we update or correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal information upon cancellation of your website services.
• Opt-Out: Unsubscribe from non-essential promotional communications at any time.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us: