Privacy Policy

1. Who We Are

SLEDstack is a product of Trinitek Holdings, Inc., a Delaware C-Corporation (“Trinitek,” “we,” “us,” or “our”). SLEDstack provides Florida SLED market intelligence to government technology vendors. Our platform is available at sledstack.com.

Questions about this policy may be directed to: privacy@trinitek.com

2. Information We Collect

We collect information you provide directly and information generated through your use of the platform.

Information you provide:

• Account registration: name, email address, company name
• Vendor profile: company description, capability statement, NAICS codes, contract vehicles, past performance
• Payment information: processed by Stripe; we do not store card numbers or ACH account details
• Communications you send to us via email or support channels

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps
• Usage data: features accessed, searches performed, solicitations viewed
• Authentication tokens managed by Clerk (our identity provider)

3. How We Use Your Information

• To provide, operate, and improve the SLEDstack platform
• To personalize your experience — solicitation matching and fit scoring against your vendor profile
• To send you the daily intelligence digest and account-related notifications
• To process payments and manage your subscription
• To respond to your support requests
• To detect and prevent fraud or security incidents
• To comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your vendor profile data to populate our market intelligence database — your competitive intelligence stays private to your account.

4. Subprocessors and Third-Party Services

We use the following subprocessors to deliver the platform. Each is bound by data processing terms consistent with this policy:

All subprocessors are US-based. Government customer data is never transferred outside the United States.

5. Data Security

• All data in transit is encrypted using TLS 1.2 or higher
• Data at rest is encrypted using AES-256
• Access to production systems is restricted to authorized personnel with multi-factor authentication
• Payment data is handled by Stripe — we are PCI-compliant by scope reduction
• We conduct periodic security reviews of our infrastructure and subprocessors

No security measure is perfect. If you discover a vulnerability, please report it to security@trinitek.com before public disclosure.

6. Data Retention

We retain your account data for as long as your subscription is active and for up to 90 days after cancellation, after which it is deleted from our systems. Anonymized usage data (e.g., aggregate feature usage) may be retained indefinitely. Payment records are retained as required by applicable law (typically 7 years).

You may request deletion of your account and associated data at any time by contacting privacy@trinitek.com. We will confirm deletion within 30 days.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete information via your profile settings
• Deletion — request that we delete your account and personal data
• Portability — request your data in a structured, machine-readable format
• Opt-out — unsubscribe from marketing emails at any time via the unsubscribe link in any email

To exercise any of these rights, email privacy@trinitek.com. We will respond within 30 days.

8. Florida Privacy Law

SLEDstack is built and operated in Florida. We comply with the Florida Information Protection Act (FIPA, §501.171), including the requirement to notify affected individuals and the Florida Department of Legal Affairs within 30 days of discovering a security breach affecting Florida residents' personal information.

9. Government Customers

If you are a government agency or government-affiliated entity using SLEDstack, please contact us at privacy@trinitek.com to discuss a Data Processing Agreement (DPA). We maintain a DPA template and will execute it prior to any government contract.

10. Cookies

We use cookies and similar technologies for authentication (session management via Clerk) and basic analytics. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but authentication will not function without session cookies.

11. Children's Privacy

SLEDstack is a B2B platform intended for business use only. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, contact us at privacy@trinitek.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect. Continued use of SLEDstack after the effective date constitutes acceptance of the updated policy.

13. Contact

Trinitek Holdings, Inc.
Attn: Privacy
privacy@trinitek.com