Privacy Policy

1. Data we collect from businesses

• Account data: business name, contact name, email address, password hash.
• Submission metadata: timestamp, IP address, browser user agent, attestation text and version.
• Uploaded documents such as invoices and correspondence, stored privately.
• Billing records held by our payment processor; we never store full card numbers.

2. Data about named clients

Records contain the client's name, city and state, service category, an optional disputed amount, a rating, and a narrative supplied by the business. We do not solicit or permit government identifiers, financial account numbers, health information, dates of birth, or precise home addresses. Records found to contain such data are edited or removed.

3. How we use data

To operate the platform, publish records, verify documentation, prevent fraud and duplicate or retaliatory submissions, process payments, respond to disputes, and comply with legal obligations. Submission metadata such as IP and timestamp exists specifically to support accountability and dispute handling.

4. What is public

Published records, the rating, the narrative, the client's name and city/state, and the submitting business name are public and indexable by search engines. Uploaded documents, IP addresses, user agents, email addresses, and internal notes are never public.

5. Sharing

We share data with infrastructure, payment, and email providers acting on our instructions, and with legal counsel or authorities where required by law or to defend a claim. We do not sell personal data.

6. Retention

Published records and their attestation logs are retained while the record remains live and for a limited period afterwards to defend against claims. Removed records are archived in a non-public form. Account data is deleted on request, subject to legal-hold and anti-abuse requirements.

7. Your rights

Depending on your location you may request access, correction, deletion, restriction, or a copy of your data, and object to certain processing. Named clients may claim their listing, publish a response, and file a dispute. Contact us at todaycompanies@gmail.com to exercise any of these rights; we may verify your identity first.

8. Security

Data is encrypted in transit and at rest. Documents are stored in a private bucket accessible only to the uploading business and authorised reviewers. Access to production systems is restricted and logged.

9. Cookies

We use strictly necessary cookies and local storage for authentication sessions and basic preferences. We do not use advertising cookies.

10. Changes

We will post updates to this policy here and announce material changes in-product.