Privacy Policy

This Privacy Policy explains how Pivot Management(“we,” “us,” or “our”) collects, uses, shares, and protects information in connection with Pivot COA(the “Service”), including the website at pivotmgmt.co.

By using the Service, you acknowledge this Policy. For terms that govern use of the Service, see our Terms of Service.

This Policy covers:

• Public visitors who browse lab results and download certificates of analysis (COAs)
• Authorized staff who sign in to non-public tools connected to the Service

It does not cover third-party websites or laboratories we may link to, which have their own privacy practices.

Information you provide. When staff sign in, we collect account identifiers such as name, email address, and authentication details from our identity provider (for example, Microsoft Outlook / Entra ID). If you email us, we receive the content of your message and your contact details.

Information collected automatically. Like most websites, we and our infrastructure providers may automatically collect technical data when you visit, such as IP address, browser type, device information, approximate location derived from IP, pages viewed, referring URL, and timestamps. This data is used for security, reliability, and diagnostics.

Product and business data. The Service displays product, brand, batch, and laboratory information that we publish. Staff tools may process order and operational data needed to run our business. Public product pages are limited to information intended for public lab-result transparency.

Cookies and similar technologies. We use cookies and similar storage that are necessary to operate the Service—for example, to maintain authenticated sessions and to remember theme preferences (such as light or dark mode). We do not use third-party advertising cookies on the public lab-results pages.

We use information to:

• Provide, maintain, and improve the Service
• Authenticate users and enforce access controls
• Protect security and integrity, including detecting abuse and preventing unauthorized access
• Respond to inquiries and provide support
• Comply with legal obligations and enforce our Terms
• Generate operational analytics in aggregated or de-identified form where practical

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

We may share information with:

• Service providers who process data on our behalf, such as hosting, database, authentication, and content-delivery providers (including cloud infrastructure used to run Pivot COA)
• Affiliates and internal teams who need access to operate the Service
• Professional advisors such as lawyers or auditors, when needed
• Legal and safety recipients when required by law, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards

Public COA content you download is intentionally published for transparency and may be shared by you for legitimate reference; that published content is not treated as your personal information.

We retain personal information only as long as needed for the purposes described in this Policy, including to provide the Service, meet legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary by data type. Security and server logs are typically kept for shorter operational windows; account records for authorized staff are retained while access is active and for a reasonable period afterward as needed for audits and continuity.

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), access controls for staff tools, and infrastructure security provided by our hosting and database vendors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of certain personal information we hold about you, or to object to or restrict certain processing. Residents of California and other U.S. states with comprehensive privacy laws may have additional rights, including the right to know categories of personal information collected and the right to non-discrimination for exercising privacy rights.

To exercise applicable rights, email privacy@pivotmgmt.co. We may need to verify your identity before fulfilling a request. You may also designate an authorized agent where the law allows.

Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer a “Do Not Sell or Share” opt-out for those activities.

We are based in the United States. If you access the Service from outside the United States, your information may be processed in the U.S. or other countries where our providers operate. Those jurisdictions may have different data-protection laws than your home country.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes may also be highlighted on the Service or communicated to authenticated users when appropriate. Continued use after an update constitutes acceptance of the revised Policy.

Privacy questions or requests: privacy@pivotmgmt.co

General legal inquiries: legal@pivotmgmt.co

Pivot Management
Operating Pivot COA at pivotmgmt.co