Privacy Policy

Last updated: March 26, 2026

This Privacy Policy describes how Jack Pearson d/b/a SmallTimeHoldings ("we", "us", or "our") collects, uses, and protects your information when you use FreightExtract and PrettyBid (the "Services").

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password (stored hashed, never in plain text).

Documents You Upload

We process documents you upload or forward to extract structured data. For demo (unauthenticated) use, documents are processed in memory and never stored. For authenticated accounts, documents and extracted data are stored in your organization's encrypted database records.

Payment Information

Payments are processed by Stripe. We do not store your credit card number. We receive your Stripe customer ID and transaction metadata (amount, date) for billing records.

Usage Data

We collect analytics data including document processing events, feature usage, and session activity to improve the Services. This data is processed through our analytics platform (Census) and is tied to your user ID.

Email Ingest

If you forward emails to your organization's ingest address, we receive and process the email attachments. Email body content is not stored.

2. How We Use Your Information

• To provide and operate the Services.
• To process your documents and extract data.
• To manage your account, credits, and billing.
• To send transactional emails (account confirmation, billing receipts).
• To analyze usage patterns and improve the Services.
• To detect and prevent fraud or abuse.

3. AI Processing

Your documents are sent to third-party AI providers (Anthropic) for classification and data extraction. Documents are processed per Anthropic's privacy policy. Anthropic does not use your documents to train their AI models when accessed through their API.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Anthropic — for AI document processing.
• Stripe — for payment processing.
• Railway — infrastructure hosting.
• Cloudflare — email ingest and CDN.
• Integrations you enable — QuickBooks, webhooks, or other services you explicitly connect.

5. Data Retention

Account data and extracted document data are retained for as long as your account is active. Demo (unauthenticated) documents are never stored. You may request deletion of your account and associated data at any time by emailing us.

6. Data Security

We use industry-standard security measures including encrypted database connections, hashed passwords, and secure API authentication. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You may:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and data.
• Export your document data via CSV export.

To exercise any of these rights, email [email protected].

8. Cookies

The Services use JWT tokens stored in the browser for authentication. We do not use third-party tracking cookies.

9. Children

The Services are not intended for use by anyone under the age of 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services.

11. Contact

Questions about this Privacy Policy? Email us at [email protected].