Countmill is in beta. This policy describes our current practices and will be revised as the product, its infrastructure, and its sub-processors mature toward general availability. We'll update the date below whenever it changes.

Account & contact information — name, work email, company, and anything else you give us when you book a demo, sign up, or contact support.

Customer Data — the records your business puts into the product: CRM, support, commerce, books, people, and analytics data, scoped to the businesses in your account. This is yours; see section 5.

Usage & log data — request logs, error references, and basic diagnostic data the product needs to operate and to find and fix failures (see the Enterprise page for how errors are made findable). Logs are redacted before they leave the system.

We do not run third-party advertising or analytics trackers on this marketing site today. The only browser storage it sets is a first-party preference for light/dark theme.

To provide, maintain, and support the service you've signed up for.

To respond to demo requests and support questions.

To secure the service — detecting abuse, debugging failures, and enforcing the access scoping described in section 4.

We do not sell personal information or Customer Data, and we do not use Customer Data to train models for use outside your account without your written consent.

Every record in Countmill is scoped to one business. Roles and permissions are checked per app and per business on every request, so a user (or an API credential) only ever reaches the entity they were granted. Full detail is on the Enterprise page.

You can export your Customer Data at any time — CSV from any module, or programmatically through the brand-scoped API v1, always scoped to the business the credential belongs to.

If you close your account, you can export Customer Data for a reasonable period afterward, then it is deleted from active systems, subject to what we're legally required to retain (for example, billing records).

We share information only with the infrastructure and service providers necessary to run Countmill (for example, cloud hosting), each bound to protect it, and with law enforcement only where legally required. We don't share Customer Data with other customers or with unrelated third parties. A current sub-processor list is available on request while we're in beta — email us and we'll send it.

Access control is enforced per app and per business (RBAC), postings carry an audit trail, and logs are redacted at every depth before they leave the system. See the Enterprise page for the full list of what's live in the product today — we describe only what's actually built, not aspirational certifications.

No system is perfectly secure. If we become aware of a breach affecting your data, we'll notify you without undue delay.

We retain account and Customer Data for as long as your account is active, plus a reasonable window after closure to allow export, plus whatever additional period the law requires for specific records (such as billing).

Depending on where you're located, you may have rights to access, correct, export, or delete personal information we hold about you. Email hello@countmill.com and we'll respond within a reasonable time.

We'll post updates here with a new "last updated" date, and for material changes we'll make a reasonable effort to notify account administrators directly.

Questions about this policy, or a request to see the current sub-processor list: hello@countmill.com.