Legal & Privacy
Privacy Policy
Plain English. We build NetSuite tools, not data businesses. Your ERP records never leave your account.
Last Updated: July 29, 2026
The Short Version
Suite Utils tools run inside your own NetSuite account. Your records, invoices, and ledger data never leave your instance. We don't have access to them, and we don't want it. We collect only what's needed to sell you a license and answer your support questions.
1. What We Collect
We collect the minimum required to run this business:
- Name and work email. Collected when you fill out the contact form or join the waitlist. Used to respond to your inquiry and send product updates you opted into.
- Company name. Helps us understand which NetSuite instance you're licensing for.
- Payment data. Processed entirely by Stripe. We never see or store your card number. What we receive from Stripe is a transaction ID and confirmation of payment.
- License verification ping. When a Suite Utils SuiteApp activates, it sends an anonymous check to confirm your license is valid. This ping includes your NetSuite Account ID and the installed version. Nothing else.
- Anonymous site analytics. Google Analytics 4 with Consent Mode v2. We track page visits, session counts, and broad referral data. No personal identifiers are stored in GA4 without your explicit consent via the cookie banner.
2. What We Don't Collect
Your NetSuite data is yours. We have no access to it and no desire to have it:
- We don't read, copy, or transmit your NetSuite transaction records, customer data, invoices, GL balances, or any ERP content.
- We don't store your NetSuite OAuth tokens or integration credentials. These stay encrypted inside your NetSuite account.
- We don't use advertising trackers, behavioral retargeting scripts, Facebook Pixel, or third-party data broker services.
- We don't sell your contact information to anyone, ever.
3. How We Use What We Collect
- Contact and waitlist data: to respond to your inquiry and, if you opted in, to send product launch announcements and engineering guides. You can unsubscribe from any email with one click.
- License verification data: to confirm your subscription is active and route you to the correct SuiteApp version.
- Analytics data: to understand which pages are useful and which aren't. We use this to improve the site and docs, not to build profiles.
4. Subprocessors
Three companies we use to run this site. All SOC 2 compliant:
Stripe
PCI-DSS Level 1 payment processing. They handle card data; we receive only a transaction confirmation.
Loops.so
Stores email addresses and sends transactional and newsletter emails on our behalf. EU-hosted option available on request.
Cloudflare
Hosts this site and handles DNS, SSL/TLS, and DDoS protection. Logs basic request metadata (IP, UA) per their privacy policy.
Google Analytics 4
Anonymous session analytics with Consent Mode v2. No cookies set without your explicit acceptance via the banner.
5. Data Retention
- Contact form submissions: kept for as long as you're a customer or have an active inquiry. Deleted on request within 24 hours.
- Email list membership: retained until you unsubscribe. Unsubscribing removes you from all Suite Utils lists immediately.
- License verification logs: anonymous ping records retained for 90 days for abuse detection, then deleted.
- Analytics data: GA4 data retention set to 14 months (Google's minimum configurable period).
6. Your Rights
Under GDPR, CCPA, and equivalent frameworks, you can:
- Request a full export of data we hold about you.
- Request deletion of your account record and contact history.
- Withdraw consent for analytics cookies at any time via the cookie banner.
- Opt out of all marketing email with one click from any email we send.
We fulfill deletion requests within 24 business hours. If you need a signed Data Processing Agreement (DPA) for compliance, email us.