Powerline — Privacy Policy

1. Information We Collect

Account and organization: your name, work email, a securely hashed password, your role/membership, and your organization's business details (legal name, address, contact information, business type, and license or verification documents you provide).

Transactional: wholesale orders, listings, pricing, credit/net-terms records, sales-rep and commission records, and the status of the platform-fee invoices we bill to sellers. We do not process the product payment between businesses and do not store payment card numbers.

Communications: messages exchanged between businesses through Powerline, and your support inquiries.

Automatically: device and technical information, IP address, and usage information (features used, actions taken, error logs) for security, fraud prevention, and improvement.

2. How We Use Information

To provide and secure the marketplace; verify businesses; facilitate orders, credit tooling, sales-rep attribution, and messaging between buyers and sellers; bill and record the platform fee to sellers; communicate about your account and transactions; improve the Service; detect fraud; and comply with legal obligations. Our legal bases include contract performance, legitimate interests, consent, and legal obligations.

3. How We Share Information

Between counterparties: to conduct a wholesale transaction, we share the information the other business needs — for example, order details and the business and contact information necessary to fulfill and communicate about the order. Each business must use that information only for the transaction and consistent with our Terms (Section 11, Confidentiality).

Service providers: we share data with the providers that operate the Service (below), each contractually obligated to protect it. Legal disclosure: we may disclose information when required by law or valid legal process, or to protect our rights or users' safety. If Dose'd is involved in a merger or acquisition, information may transfer as part of that transaction. We do not sell, rent, or trade personal information, and we do not share it with data brokers.

4. Our Service Providers

Supabase / PostgreSQL — authentication and primary database (encrypted in transit and at rest).

Cloudflare R2 — storage for documents and images you upload (e.g., verification documents, product media, message attachments).

Stripe — used to bill the platform fee to sellers and record fee-invoice status; product payments occur directly between businesses and are not processed by Powerline.

Brevo — transactional email (invitations, confirmations, reminders, notifications).

Sentry — error and crash reporting, with personal information minimized.

PostHog — product analytics to understand and improve the marketplace.

5. Data Security

We use TLS/HTTPS in transit and encryption at rest for sensitive data, hash passwords, validate sensitive operations server-side, enforce row-level access controls, limit employee access, and monitor for suspicious activity. No system is perfectly secure, so we cannot guarantee absolute security. In the event of a breach affecting personal information, we will notify affected users and authorities as required by law.

6. Data Retention

We retain account and organization information for as long as the account is active, and order, transaction, credit, and fee records for the period required by law and tax rules. Communication and audit logs are retained for dispute resolution and compliance, and analytics for a limited period. When information is no longer needed and not subject to a legal retention requirement, we delete or anonymize it.

7. Your Rights

Individuals may request access to, correction of, or deletion of their personal information, and may opt out of marketing. Depending on your location, you may have rights under the CCPA/CPRA (California) or the GDPR (EEA/UK/Switzerland), including access, correction, deletion, portability, and objection; we do not sell or share personal information for cross-context behavioral advertising. Note that some information must be retained to operate the marketplace and meet legal obligations while your organization remains active. To exercise a right, email privacy@dose-d.com; we verify identity and aim to respond within 30 days.

8. Changes and Contact

We may update this Policy and will notify you of material changes before they take effect, updating the "Last updated" date for minor changes. Questions or requests: privacy@dose-d.com or legal@dose-d.com (Dose'D LLC, Attn: Privacy, Pennsylvania, United States).