Legal
Privacy Policy
Last updated: January 1, 2026
1. Information We Collect
We collect information you provide directly, including your name, email address, company name, phone number, and product specifications when you create an account or submit a manufacturing order. We also collect usage data such as pages visited, features used, and interaction patterns to improve our platform. Technical data including IP address, browser type, device information, and cookies are collected automatically when you access our services.
2. How We Use Your Information
We use your information to process and fulfill manufacturing orders, communicate about your account and orders, improve our platform and AI formulation engines, provide customer support, send relevant product updates (with your consent), and comply with legal obligations. We never sell your personal information to third parties.
3. Formulation & IP Protection
Your product formulations, ingredient lists, and manufacturing specifications are treated as confidential trade secrets. We implement strict data isolation between clients -- no formulation data from one client is ever accessible to another. Our AI models are trained on aggregate, anonymized data and never expose individual client formulations. All formulation data is encrypted at rest (AES-256) and in transit (TLS 1.3).
4. Data Sharing
We share data only with service providers necessary to fulfill our services (e.g., shipping carriers for order delivery, payment processors for billing). We may disclose information when required by law, regulation, or legal process. We never share your formulation data, product specs, or business information with competitors or other clients.
5. Data Retention
We retain your account information for the duration of your relationship with us. Manufacturing records and batch data are retained for a minimum of 7 years to comply with FDA and cGMP record-keeping requirements. You may request deletion of non-regulatory personal data at any time by contacting privacy@cpgfactory.ai.
6. Security
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, SOC 2 Type II certified infrastructure, role-based access controls, continuous monitoring and intrusion detection, regular third-party security audits, and multi-factor authentication for all accounts.
7. Your Rights
Depending on your jurisdiction, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to regulatory retention requirements), opt out of marketing communications, data portability, and lodge a complaint with a supervisory authority.
8. Cookies
We use essential cookies required for platform functionality, analytics cookies to understand usage patterns and improve our services, and preference cookies to remember your settings. You can manage cookie preferences through your browser settings. Our platform functions with only essential cookies enabled.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. Your continued use of our services after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or requests, contact us at privacy@cpgfactory.ai or write to: CPGFactory.ai, Attn: Privacy Team, Katy, TX 77494.