Product Tours by Gallagher's Resource

1. Overview

Gallagher's Resource ("we", "our", "us") operates Product Tours at https://tours.gallaghersresource.com. This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

2. Information We Collect

We collect the following types of information:

Account information: name, email address, and password when you register
Workspace data: tours, steps, triggers, and settings you create
Tour session data: anonymous and identified user sessions from tours you publish
Contact data: lead information captured through your public tours
Usage data: how you interact with the dashboard (pages visited, actions taken)

3. How We Use Your Information

We use your information to:

Provide, operate, and improve the Service
Send transactional emails (account confirmation, password reset)
Display analytics and reports within your dashboard
Respond to support requests
Comply with legal obligations

We do not sell your personal data to third parties.

4. Data Storage and Security

Your data is stored securely using Supabase, a hosted PostgreSQL database service with row-level security enabled. All data in transit is encrypted using TLS. We apply industry-standard security practices to protect your information.

5. Third-Party Services

We use the following third-party services:

Supabase — database and authentication (supabase.com)
Resend — transactional email delivery (resend.com)
Cloudflare — hosting and edge delivery (cloudflare.com)

Each provider has their own privacy policy governing how they handle data.

6. Cookies

We use authentication cookies to keep you logged in. These are essential to the Service and cannot be disabled. We do not use advertising or tracking cookies.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your data

To exercise these rights, contact us at tours@gallaghersresource.com.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, by email.

11. Contact

For privacy questions or requests, contact us at tours@gallaghersresource.com or visit gallaghersresource.com.