Smart Ops Toolkit is a product of Bergman Holdings LLC, a consulting and digital product company serving nonprofit organizations. Our products are built on Google Workspace infrastructure and delivered through the Smart Ops Command Center, a Google Apps Script Web Application.

Data controller contact: info@smartopstoolkit.com

We collect only what is necessary to deliver and improve the product:

We do not collect payment card details. All payment processing is handled by Stripe, Inc. under their own privacy policy and PCI DSS compliance framework.

Your data is used exclusively to deliver and support the product you purchased:

• Verify your identity against the purchase registry when you access the portal
• Deliver your product bundle (PDF, portal access link) to your registered email
• Personalize the portal with your name and organization
• Save your implementation progress so you can resume where you left off
• Respond to support requests you initiate
• Communicate material changes to these terms or the product

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 04.

Smart Ops Toolkit is built entirely on Google infrastructure. Your data is stored and processed using the following Google services:

All data stored on Google infrastructure is subject to Google's data processing terms and security standards. Google does not have access to your payment information, which is held exclusively by Stripe.

Stripe, Inc. processes your payment and transmits purchase confirmation data (email, name, org, session ID) to our webhook. Stripe's privacy policy governs their handling of your payment data.

The Smart Ops Command Center uses Google OAuth to verify your identity. When you log in, Google confirms your email address to the portal. We request only the minimum permissions required:

• Email address — to verify your purchase against the registry
• We do not request access to your Gmail inbox, Drive files, Calendar, or any other Google Workspace data
• We do not store your Google OAuth token beyond the active session

You can revoke our application's Google access at any time via your Google Account settings at myaccount.google.com/permissions. Revoking access does not affect your purchase record.

Your purchase record (email, name, org, purchase date, pillar, access status) is retained in our registry for as long as your access is active. If access is revoked or the product is discontinued, records are retained for a minimum of 12 months for dispute resolution purposes, then deleted.

Implementation progress data stored in your personal Google Sheet is owned by you and can be deleted by you at any time from your Google Drive.

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data (e.g., incorrect organization name)
• Deletion — request deletion of your data, subject to legal retention requirements
• Portability — request your data in a machine-readable format

To exercise any of these rights, email info@smartopstoolkit.com with the subject line "Privacy Request" and your registered email address. We will respond within 10 business days.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated to active purchasers via email at least 14 days before taking effect. The current version is always accessible via the Smart Ops Command Center portal footer.

For any questions about this Privacy Policy or our data practices, contact: