Privacy Policy

1. Information We Collect

We collect only the information needed to operate the Portal for you:

• Account information — your name, work email address, and the company you are authorized to represent. Your company is assigned by TWO Packaging from our approved-client records; you do not choose it yourself.
• Authentication credentials — your password is collected and stored by our authentication provider (Supabase) in encrypted/hashed form. We never see or store your plaintext password.
• Order and business information — the invoices, order descriptions, quantities, prices, payment status, shipping/tracking details, and packing lists that relate to your company's orders with TWO Packaging. This information is entered by TWO Packaging's operations team and shown to you in the Portal.
• Electronic signature records — when you sign an invoice in the Portal, we record the name and title you provide, your email, the date and time, and the version of the terms you accepted, as a record of your acceptance.
• Technical information — to keep you signed in and to operate and secure the service, we and our hosting providers process essential session cookies and standard server logs (such as IP address, browser type, and request timestamps).

2. Information We Do NOT Collect

• We do not collect payment card numbers or bank account details through the Portal. Payments are handled separately by TWO Packaging and its payment/accounting providers.
• We do not collect your precise location, your device contacts, photos, health data, or biometric data.
• We do not use advertising identifiers, and the Portal contains no third-party advertising or ad tracking.

3. How We Use Your Information

• To create and secure your account and authenticate you when you sign in.
• To show you your company's orders, statuses, shipments, invoices, and loyalty standing.
• To let you review and electronically sign invoices, and to keep a record of that acceptance.
• To provide customer support and respond to your requests.
• To operate, maintain, secure, and improve the Portal, and to detect and prevent fraud or abuse.
• To comply with our legal obligations.

4. How Your Information Is Shared

We do not sell your personal information, and we do not share it for advertising. We share information only with service providers who help us run the Portal, and only as needed to provide the service. These providers are contractually required to protect your information and to use it only to provide services to us:

• Supabase — provides authentication and the database that stores your profile and signature records.
• Vercel — hosts and serves the Portal application.
• Google — your order data is maintained by TWO Packaging in a private Google Sheet and read by the Portal through a private, token-protected, read-only connection. The sheet is not public.
• Intuit (QuickBooks) — if invoice download/sign-back is enabled, we retrieve your invoice from TWO Packaging's QuickBooks account so you can view and sign it.

5. Legal Disclosures

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of TWO Packaging, our clients, or others.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Portal to you. We retain electronic signature and order-acceptance records for as long as necessary for our legitimate business, accounting, and legal purposes. When information is no longer needed, we delete or anonymize it.

7. Your Rights and Choices

You may access and review your account details in the Portal at any time. To correct your name or company, contact your TWO Packaging account representative.

• Access & correction — view your profile in the Portal, or contact us to request access to or correction of your information.
• Account deletion — you may delete your account at any time from the Profile screen in the Portal ("Delete Account"), or by emailing us at hello@twopackaging.com. Deleting your account removes your login and profile from our systems. (Order records that TWO Packaging must keep for business and legal reasons are retained as described above.)
• Withdraw consent — you may stop using the Portal and request deletion of your account at any time.

8. Security

We protect your information using industry-standard safeguards, including encryption in transit (HTTPS), hashed/encrypted password storage, server-side handling of all secrets, and database access controls that limit each client to their own company's data. No method of transmission or storage is 100% secure, but we work to protect your information and to maintain the integrity of the Portal.

9. Children's Privacy

The Portal is a business service intended for use by TWO Packaging's clients and their authorized staff. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

10. Where Your Information Is Processed

TWO Packaging operates in the United States, and your information is processed and stored in the United States. By using the Portal, you understand that your information will be processed there.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Effective" date above and post the updated Policy in the Portal and on our website. Material changes will be communicated as appropriate.

12. Contact Us

If you have questions about this Policy or your information, contact us at hello@twopackaging.com or +1 623-254-6832, or visit twopackaging.com.