Privacy

What we collect

If you have an account: the answers you give in the readiness assessment, which describe your company rather than any individual; evidence you attach, meaning files you upload and links you add; and your identity as our authentication provider gives it to us — your email address, your name if you supply one, and which organization you belong to.

If you only write to us: the name, email address, company and message you put in the enquiry form. We keep that until we have finished the conversation it belongs to, and you can ask us to delete it at any time. It is not attached to an account, so deleting a company does not delete it.

Where it lives

Your answers and records are held in a managed PostgreSQL database. Evidence files are held in a private Cloudflare R2 bucket. Both are encrypted at rest by the provider. Evidence objects are never public: a download is served through a signed link that expires after fifteen minutes, and the storage key for a file is never shown to anyone outside your organization.

Who can see it

Members of your organization, and Woodstock Software LLC as the operator. We do not sell your data, and we do not share it with your customers — what you record here is yours to send them, not ours.

Keeping it, and deleting it

We keep your data while your company account exists. You can delete the company from the company page at any time. Deletion is immediate from your side — the company stops being reachable at once — and your records and evidence files are then permanently purged 30 days after you confirm. The delay exists so an accidental deletion can be reversed by contacting us within that window; after it, the data is gone and we cannot recover it.

The 30-day window covers the data attached to your company. An enquiry you sent through the contact form is separate, and we delete it on request.

To request deletion or ask what we hold, write to ready@coppertier.com.

Error reporting

When something breaks we record the error so we can fix it. Those reports are scrubbed of personal information before they are sent, and they never carry evidence files or your assessment answers.

Cookies

We use the cookies our authentication provider needs to keep you signed in. We do not use advertising cookies and we do not track you across other sites.