Privacy Policy
1. Who we are and what this policy covers
Space Place, Inc. ("Space Place", "we", "us") is a Michigan corporation that provides a software-as-a-service platform for space planning and inventory management (the "Application"), the website at spaceplace.app (the "Website"), and related support. This policy explains what information we collect when you use the Website or the Application, how we use and share it, how long we keep it, and the choices you have.
The Application is used by businesses ("Customer organizations") and the people they authorize. When a Customer organization enters or imports information into the Application, including information about its own customers, vendors, products, and operations ("Customer Data"), we process that information on the organization's behalf and according to its instructions. The organization decides what Customer Data goes in and who in the organization can see it. If you are a customer or contact of one of our Customer organizations and have questions about how your information is handled, please contact that organization directly; we will help them respond.
This policy, together with the End User License Agreement, governs your use of the Application.
2. Information we collect
Information you give us. When you create an account or accept an invitation, we collect your name, username, email address, and password (which we store only as a one-way hash), and optionally your phone number, job title, time zone, and language. You may choose a profile picture from a gallery we provide. Your account is linked to your Customer organization and records who invited or approved you.
Information about your use of the Application. When you sign in, we record the time, the IP address, and the browser or device identifier used. While you use the Application we maintain a session record and note when you were last active, so that we can send email about new messages only when you are away. When you accept the End User License Agreement we record the version, the time, your IP address, and your browser identifier as the record of your agreement. We also record the notifications you have read and your notification preferences.
Content you create. Messages you send to coworkers or to Space Place through the Application, feedback you submit (including an optional screenshot of your screen), and the operational records you create, such as scans on a handheld device.
Customer Data. Products, inventory, locations, vendors, purchase orders, manufacturing orders, quotes, invoices, payment records (amounts, methods, and references, never card numbers), and the Customer organization's own customers' names, email addresses, phone numbers, and shipping addresses. Customer Data may be entered by hand or imported from services the organization connects, such as online stores.
Information from connected services. When a Customer organization connects a store, a carrier, or a mailbox, we receive the data those services provide (orders, customers, inventory quantities, shipping rates, tracking numbers, sent mail) and we store the credentials needed to connect, encrypted.
Information sent to our API. Customer organizations may send events to the Application from their own systems. For each event we record the sender's IP address and the values the sender chooses to send.
Error information. If the Application encounters an error, we record the error, the page and request involved, and your account, with passwords, secrets, tokens, and cookies removed before storage.
Website contact form. If you write to us through the Website, we receive the name, email address, and message you provide. These are delivered to our mailbox and are not stored in the Application.
Cookies and similar technologies. See section 5.
3. How we use information
- To provide, operate, secure, and support the Website and the Application, including signing you in, keeping your organization's data separate from others', and detecting misuse.
- To send service messages: invitations, password resets, notifications about messages and activity in your organization, and notes about changes to the Application. You can adjust message and release-note emails in your Settings.
- To send product news and offers about Space Place, which you can turn off in your Settings at any time.
- To respond to feedback, questions, and support requests.
- To fix errors and improve the Application.
- To keep records we need, such as your acceptance of the End User License Agreement.
- To comply with law and enforce our agreements.
We do not use your information for advertising, and we do not make automated decisions about you that have legal or similarly significant effects.
4. How we share information
Within your organization. Members of your Customer organization can see your name, username, and role, and Admins can see your email, sign-in history, and agreement status, as needed to run their business and manage their account.
Service providers. We use other companies to run the Application on our behalf. They receive only what they need and may use it only to provide their service to us.
Services your organization connects. At a Customer organization's direction, the Application exchanges data with services the organization has chosen and holds its own accounts with, such as online stores (for example BigCommerce and Etsy), shipping carriers and label services (for example ShipStation and FedEx), and Microsoft 365 for the organization's own email. Those and other services handle the data under their own terms.
Public pages. A Customer organization may choose to publish a chart, an event scroll, or a planogram at a public web address. Anything it publishes is visible to anyone with the link.
Legal reasons and business transfers. We may disclose information if required by law, to protect the rights, property, or safety of Space Place, our customers, or others, or as part of a merger, acquisition, or sale of assets, in which case this policy would continue to apply to the transferred information.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
5. Cookies and similar technologies
The Application uses a small number of cookies, all of which are needed to sign you in and keep you signed in:
| Cookie | Purpose |
|---|---|
| space-place-session | Identifies your session. Expires after 120 minutes of inactivity. |
| XSRF-TOKEN | Protects forms you submit from being forged by another site. |
| remember_web_… (random suffix) | Set only if you choose "Remember me on this device", so you stay signed in across browser restarts. |
A few screens remember choices such as a collapsed panel in your browser's local storage; that information stays in your browser and is not sent to us. We do not use analytics, advertising, or social-media tracking technologies on the Website or in the Application. Because we do not sell or share personal information, browser "Do Not Track" and Global Privacy Control signals do not change how we handle it.
6. How long we keep information
We keep account information and Customer Data for as long as the Customer organization uses the Application and for a reasonable period afterwards to allow reactivation, resolve disputes, and meet legal obligations, unless the organization asks us to delete it sooner. Records of your acceptance of the End User License Agreement are kept for as long as needed to evidence the agreement. Sessions expire after 120 minutes of inactivity. Feedback and error reports are kept for 3 years. Backups are kept for varying time periods depending upon the data being backed up.
7. Security
We protect information with measures that include encryption in transit, hashed passwords, encrypted storage of connected-service credentials, role-based access within each organization, separation of each organization's data, and redaction of secrets from error records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us at the address in section 12.
8. Your choices
- Your account.You can view and update your name, username, email, phone, job title, time zone, profile picture, and notification preferences in Settings.
- Email.Service messages are part of the Application. Message and release-note emails can be adjusted in Settings. Product news and offers can be turned off in Settings or by contacting us.
- Deleting your account or your organization's data.Ask your organization's Admin, or contact us at the address in section 12. We will act on the request or, for Customer Data, refer it to the Customer organization that controls it.
9. Your privacy rights
Depending on where you live, you may have the right to ask us what personal information we hold about you, to receive a copy of it, to correct it, to delete it, or to limit how we use it, and the right not to be treated differently for exercising those rights. To make a request, contact us at the address in section 12. We will verify your identity, usually through the email address on your account, and respond within the time the law requires. If you are an employee or contractor of a Customer organization, we may refer your request to that organization where it controls the information. You may authorize an agent to make a request on your behalf.
Residents of California and other U.S. states with privacy laws. The categories of data collected are: identifiers; account and contact details; internet and device activity; professional information; and content you create. We do not sell personal information and do not share it for targeted advertising.
10. Where information is stored
The Application is hosted in the United States. If you use the Application from outside that country, your information will be transferred to and processed there.
11. Children
The Website and the Application are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.
12. Changes and how to contact us
We may update this policy from time to time. We will post the new version on the Website with its effective date and, for material changes, tell signed-in users through the Application or by email. Questions, requests, or complaints about this policy: [email protected], or by mail to Space Place, Inc., 636 Pennoyer Ave, Grand Haven, MI 49417.