Tower WMS — Privacy Policy
Slug: privacy · Version: v0.1-draft · Effective: TBD (on
attorney review)
DRAFT — not effective. See
README.md. Public-facing: will cover the towerwms.com marketing site and the hosted application.
Who we are. Tower WMS is a warehouse-management service operated by Moral Support Studios LLC (a Missouri limited liability company). Contact: support@towerwms.com.
The short version. Tower WMS is business software sold to companies. We collect the minimum needed to run it: your account details (provided by your employer), the business records your company enters, and security logs. We don't run ads, we don't sell data, and we use only essential cookies.
What we collect
- Account data — name, email address, and role, typically created for you by your company's administrator. Used to sign you in and control what you can access.
- Business records — the warehouse, inventory, and billing data your company enters into the service. Your company owns and controls this data; we process it on their behalf under a Data Processing Agreement. Questions about it should go to your company's administrator.
- Security and usage logs — sign-in events, IP addresses, timestamps, and an append-only record of actions taken in the service. Used for security, support, and audit purposes.
- Support and feedback — emails you send to support@towerwms.com and submissions through the in-app feedback tool (feedback is filed into our ticketing system, hosted by GitHub).
- Website visits — the marketing site collects no personal data and sets no tracking cookies. [DECISION: update if analytics are ever added.]
Cookies
The application uses essential cookies only: session/authentication and security (anti-forgery) cookies required for the service to function. No advertising or cross-site tracking cookies.
How we use information
To provide, secure, support, and improve the service; to communicate about the service (support replies, maintenance notices, terms changes); and to meet legal obligations. We do not sell personal information or use it for third-party advertising.
Who we share it with
Only the service providers needed to operate Tower WMS — currently Microsoft Azure (hosting, US), GitHub (feedback/ticketing, US), and ImprovMX/Google (support email, US) — plus professional advisors, or authorities where the law requires it. The current subprocessor list is maintained in the DPA.
Retention
Account data and business records are kept for your company's subscription term plus a [30]-day post-termination window, then permanently deleted. Administrative audit metadata and encrypted backups persist slightly longer for security and recovery purposes before aging out.
Security
Encryption in transit and at rest, per-company data isolation, role-based access control, account lockout, and append-only audit logs. No security measure is perfect; we notify affected customers of breaches per the DPA.
Your choices and rights
Most data we hold about individuals is held on behalf of their employer in a business context; requests to access, correct, or delete it are usually routed through your company's administrator, and we assist them. You can also contact us directly at support@towerwms.com and we will respond to reasonable requests, including any rights you have under applicable state privacy laws.
Other things
The service is for business users and not directed to children under 18. We will post updates to this policy here and note the effective date; material changes will be announced in the application or by email.