Privacy Policy

1. Information we collect

We collect the following from users of industrialspineresearch.com:

• Account information: Email address, firm name, role/title, and email domain. Collected when you sign in, request a preview, or complete a purchase.
• Transaction information: Billing details handled and stored by our payment processor Stripe. We retain transaction metadata (date, amount, SKU, currency, tax jurisdiction).
• Communications: The content of inquiries via our contact form and any subsequent correspondence.
• Usage information: Hashed IP address for preview-request rate limiting (not retained beyond 30 days), and Stripe Checkout session metadata.

We do not use analytics scripts, advertising trackers, third-party cookies, or social-media pixels on industrialspineresearch.com.

2. How we use information

To (a) provide and deliver the research products you purchase, (b) administer your account and any firm/enterprise subscription, (c) process payments, (d) respond to inquiries, (e) send transactional emails related to purchases and account, and (f) comply with our legal obligations.

We do not sell, rent, or trade your information. We do not use it for behavioral advertising. We do not use it to train any machine learning model.

3. Third-party processors

• Cloudflare — hosting, content delivery, DDoS protection, R2 object storage, Workers compute, KV storage.
• Stripe — payment processing, tax calculation, subscription management.
• Postmark — transactional email delivery (magic-link sign-in, purchase confirmations, account notifications).

4. Data retention

Account, transaction, and purchase information is retained for as long as your account is active and for seven years thereafter, consistent with U.S. tax and business-records retention requirements.

5. Your rights

Depending on your jurisdiction (CCPA/CPRA, GDPR, PIPEDA, and others), you may have rights to access, correct, delete, or port the personal information we hold about you, and to object to certain processing activities. To exercise any of these rights, contact [email protected].

6. Security

All traffic is encrypted in transit via HTTPS; payment information is transmitted directly to Stripe and never traverses our servers; gated research artifacts are stored in private Cloudflare R2 buckets and accessible only through Worker-issued time-limited signed URLs; user authentication uses email-based magic links (no passwords stored); session cookies are HTTP-only, Secure, and HMAC-signed.

7. International transfers

We operate from the United States. By using the service, you acknowledge that your information will be processed in the United States and other jurisdictions where our sub-processors operate. Where required, we rely on Standard Contractual Clauses for international transfers.

8. Children

Our service is directed to institutional buyers and not intended for use by anyone under 18. We do not knowingly collect personal information from minors.

9. Updates

Material changes will be communicated by email to active account holders at least 30 days prior to taking effect.

10. Contact

For privacy questions: [email protected].