SaaS Privacy Policy

Effective Date: Sep 10, 2025

1. Introduction

Lumber Marketplace, LLC, doing business as ProPortals (“ProPortals,” “we,” “us,” or “our”)

provides a software platform and related services that allow Companies to create and manage

branded customer portals for commercial transactions, payments, and account management

(the “Service”).

This Privacy Policy (“Notice”) describes how we collect, use, disclose, and protect personal

information when you use the Service. For purposes of this Notice, the following definitions

apply (consistent with the ProPortals Terms of Service):

  • “Company” (also referred to as “you” or “your”) means the business entity that registers for and maintains a ProPortals account and uses the Service to create a branded customer portal. This includes the Company’s officers, employees, agents, and authorized contractors.
  • “Company Users” means individuals authorized by the Company to access and use the Service on its behalf, including Company employees and contractors.
  • “End Customers” means the customers or clients of the Company who are granted access to the Company’s customer portal hosted on the ProPortals platform. End Customers may log in to place orders, view product listings, check order status, and make payments through available payment methods.
  • “Platform” means the cloud-based software services, websites, mobile applications, and associated tools provided by ProPortals.
  • “Service” means the ProPortals Platform and all associated features, tools, content, applications, payment and fulfillment capabilities, and integrations made available by ProPortals to Companies, Company Users, and End Customers.

This Notice applies to all individuals who access or use the Service, including Companies,

Company Users, and End Customers.

This Notice does not cover information collected by ProPortals for other purposes, such as

marketing. Please refer to our Website Privacy Policy for those practices.

2. About ProPortals and the Personal Information We Collect

While using the Service, Companies, Company Users, and End Customers may input or

transfer electronic data into the ProPortals systems (“Customer Data”). Customer Data may

include personal information such as:

  • Name, email address, phone number, and other contact details
  • Company name, role, or position
  • Login credentials and account preferences
  • Order, invoice, and payment information (ACH, credit card, or terms)
  • Notification preferences, including opt-ins for email or SMS/text updates

ProPortals may also collect usage data (log-ins, clicks, activity, and technical information) to operate and improve the Service.

3. Retention of Personal Information

ProPortals retains personal information for as long as necessary to provide the Service, comply

with legal obligations, resolve disputes, and enforce agreements. We may retain and use

aggregated or anonymized information indefinitely. This data does not identify individuals or

Companies and may be used or sold for analytics, benchmarking, or commercial purposes.

4. Transfers and Subprocessors

ProPortals may transfer personal information to trusted service providers and subprocessors

that support delivery of the Service. These include hosting providers, payment processors, SMS

messaging services, analytics providers, and similar vendors.

We require subprocessors to process personal information only as necessary to provide their

services to ProPortals and in accordance with applicable law. A current list of subprocessors is

available upon request.

5. How We Collect Personal Information

5.1 From Companies

ProPortals processes Customer Data under the direction of Companies. Companies are

responsible for ensuring they have the right to collect, use, and share personal information

before transferring it to ProPortals for processing.

5.2 From You

We may collect information directly from you when you:

  • Register to use a ProPortals-powered portal
  • Place orders, view invoices, or make payments through the Service
  • Opt in to receive email or SMS/text message notifications
  • Contact support or otherwise communicate with us

5.3 Passive Collection

We automatically collect certain technical information such as IP address, browser type,

operating system, referring/exit pages, usage logs, clickstream data, and cookies to operate and

improve the Service.

6. Contact Visibility

By design, the Service enables transparency between Companies and their End Customers.

Company Users and End Customers may see each other’s names, roles, email addresses,

and/or phone numbers in the context of portal activity (such as order placement, fulfillment, or

support). This visibility is an essential feature of the Service. By using the Service, you

acknowledge that such contact information will be shared between Companies and their End

Customers.

7. Your Rights to Access, Correct, or Delete Personal Information

If you seek to access, correct, or delete inaccurate personal information processed by

ProPortals, you should first contact the Company that manages the portal you use. If you cannot

obtain assistance from the Company, you may contact us directly at privacy@proportals.com.

We will process your request within a reasonable timeframe, subject to applicable law and

contractual obligations.

8. Customer Obligations Around Personal Information

If you provide personal information about someone else (for example, your employee or

customer), you must ensure you are authorized to disclose that information and that all required

notices and consents have been obtained.

9. How ProPortals Uses Personal Information

ProPortals uses personal information solely for the purposes of providing, operating, and

improving the Service. We do not use Customer Data or End Customer data for our own direct

marketing or advertising purposes.

ProPortals does not sell personal data. We may, however, create, use, license, or sell

aggregated and/or anonymized data derived from Customer Data or usage of the Service,

provided that such data cannot reasonably be used to identify any individual or Company. Such

datasets may be used for purposes including:

  • Industry benchmarking reports
  • Market insights and analytics
  • Commercial licensing to third parties
  • Research and product development

When we create or share anonymized datasets, we take steps to ensure they cannot

reasonably be re-identified.

10. Payment Information

When you make payments through the Service:

  • Credit card data is collected and stored securely by a third-party payment processor (Stripe). Stripe is PCI-DSS compliant. ProPortals does not directly store or process full credit card numbers.
  • ACH and saved payment methods may be stored outside of a single checkout session. This is managed by our payment processors in compliance with applicable banking and payments regulations.
  • ProPortals itself does not store sensitive payment credentials beyond what is required for transaction records.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect personal

information from unauthorized access, disclosure, or use. While we take reasonable measures

consistent with industry standards, no system can be guaranteed 100% secure.

12. State Privacy Rights (California and Other U.S. State Laws)

Certain state privacy laws, including the California Consumer Privacy Act (CCPA) as amended

by the California Privacy Rights Act (CPRA), provide residents with rights regarding their

personal information. Depending on your state of residence, you may have the right to:

  • Know what categories of personal information we collect and how it is used
  • Request access to specific pieces of personal information we hold about you
  • Request deletion of your personal information, subject to legal and contractual limits
  • Request correction of inaccurate personal information
  • Opt out of the “sale” or “sharing” of personal information (ProPortals does not sell personal information)

You or your authorized agent may exercise these rights by contacting us at privacy@proportals.com. We will verify your request as required by applicable law.

13. Cookies

ProPortals and its service providers use cookies and similar technologies for authentication,

session management, analytics, and to improve the Service. You may disable cookies in your

browser, but certain features may not function properly.

14. Disclosures of Personal Information

We share personal information only as necessary to provide the Service, including with:

  • Service providers and subprocessors (e.g., hosting, payment processing, SMS delivery, analytics)
  • Affiliates and subcontractors engaged to support the Service
  • Legal authorities when required by law

We do not sell personal information.

15. Complaints and Contact Information

If you have questions or complaints about this Notice, please contact us at:

ProPortals Privacy Team

417 W. 7th Street, #877

Columbia, TN 38402

Email: privacy@proportals.com

We will provide an initial response within 15 business days and attempt to resolve your inquiry within 45 business days or a reasonable extended period where necessary.

16. Changes to This Policy

We may update this Notice from time to time to reflect changes in our practices. Material

updates will be posted to our website or communicated through the Service. Your continued use

of the Service after the effective date of any change constitutes your acceptance of the updated

Policy.