Legal & Privacy
Privacy Policy
Plain English. We build NetSuite tools, not data businesses. Your ERP records never leave your account.
Last Updated: September 21, 2026
The Short Version
Suite Utils tools run inside your own NetSuite account. Your records, invoices, and ledger data never leave your instance. We don't have access to them, and we don't want it. We collect only what's needed to sell you a license and answer your support questions.
1. What We Collect
We collect the minimum required to run this business:
- Newsletter signup. Loops receives your email address.
- Product waitlist. Loops receives your first name, last name, company name, and work email. We use it to contact you about that product.
- Contact form. Loops receives your name, work email, role, topic, and message. We use it to answer your message.
- Payment data. Processed entirely by Stripe. We never see or store your card number. What we receive from Stripe is a transaction ID and confirmation of payment.
- License verification ping. When a Suite Utils SuiteApp activates, it sends an anonymous check to confirm your license is valid. This ping includes your NetSuite Account ID and the installed version. Nothing else.
- Anonymous site analytics. Google Analytics 4. We track page visits, session counts, broad referral data, and which forms get submitted. Form events record that a submission happened, never what you typed. We count analytics as part of running the site, so it runs on arrival. Advertising storage stays off, so your visit never feeds an ad profile. Your browser's cookie controls or a tracker blocker will stop it.
2. What We Don't Collect
Your NetSuite data is yours. We have no access to it and no desire to have it:
- We don't read, copy, or transmit your NetSuite transaction records, customer data, invoices, GL balances, or any ERP content.
- We don't store your NetSuite OAuth tokens or integration credentials. These stay encrypted inside your NetSuite account.
- We don't use advertising trackers, behavioral retargeting scripts, Facebook Pixel, or third-party data broker services.
- We don't sell your contact information to anyone, ever.
3. How We Use What We Collect
- Contact data: to answer your message.
- Newsletter and waitlist data: to send the emails you requested. You can unsubscribe from any marketing email.
- License verification data: to confirm your subscription is active and route you to the correct SuiteApp version.
- Analytics data: to understand which pages are useful and which aren't. We use this to improve the site and docs, not to build profiles.
4. Subprocessors
Four companies process data for this site:
Stripe
PCI-DSS Level 1 payment processing. They handle card data; we receive only a transaction confirmation.
Loops.so
Stores newsletter email addresses; waitlist first name, last name, company name, and email; and contact name, email, role, subject, and message. It sends emails for us.
Cloudflare
Hosts this site and handles DNS, SSL/TLS, and DDoS protection. Logs basic request metadata (IP, UA) per their privacy policy.
Google Analytics 4
Anonymous session analytics. Sets two cookies on arrival to count visits and form submissions. Advertising storage stays off.
5. Data Retention
- Contact form submissions: kept for as long as you're a customer or have an active inquiry. Deleted on request within 24 business hours.
- Email list membership: retained until you unsubscribe. Unsubscribing removes you from all Suite Utils lists immediately.
- License verification logs: anonymous ping records retained for 90 days for abuse detection, then deleted.
- Analytics data: GA4 data retention set to 14 months, the longest period a standard GA4 property offers. The only other option is 2 months.
6. Your Rights
Under GDPR, CCPA, and equivalent frameworks, you can:
- Request a full export of data we hold about you.
- Request deletion of your account record and contact history.
- Block analytics cookies at any time through your browser's cookie controls or a tracker blocker.
- Opt out of all marketing email with one click from any email we send.
We fulfill deletion requests within 24 business hours. If you need a signed Data Processing Agreement (DPA) for compliance, email us.