Privacy Policy

Who We Are

Sorbetto is operated by JCCG LLC doing business as Sorbetto. In this policy, "Sorbetto," "we," "us," and "our" refer to JCCG LLC d/b/a Sorbetto and the Sorbetto service. "Customer" means the business or organization that subscribes to or uses Sorbetto. "User" means an individual authorized by a Customer to access Sorbetto.

Information We Collect

Website and Contact Information

If you submit a contact form, we collect the information you provide, such as your name, email address, company, and message. We may also receive standard technical information associated with the request, such as IP address, browser/user-agent information, approximate country, and submission time.

Account and User Information

Customers and Users may provide or generate information needed to administer access, such as names, email addresses, company names, roles, module permissions, support notes, and account configuration details.

Customer Business Data

Sorbetto processes operational data that Customers choose to enter, import, or generate in the service. This may include account and user access records, company settings, items, vendors, locations, purchase orders, receipts, bills, invoices, vendor bills, payments, bill payments, production records, inventory activity, sales or fulfillment records, shipments, reports, project records, messages, attachments, import history, audit history, support context, and related business information.

Usage and Diagnostic Information

We may collect service usage, diagnostic, security, and support information, including request metadata, feature usage, error details, audit events, and records of actions taken inside Sorbetto. We use this information to operate, secure, troubleshoot, and improve the service.

AI Assistant Information

If a Customer or User opts in to AI assistant features, Sorbetto may process prompts, responses, selected conversation history, approved business context, usage logs, and confirmation records needed to provide the assistant experience. AI assistant features are optional and may be subject to additional in-product terms or notices. Use of AI assistant features may also be subject to the privacy policies, terms, and conditions of external AI providers or other third-party partners involved in providing those features. Customers and Users are responsible for reviewing and accepting those external terms before using optional AI assistant features.

Use of Your Personal Data

We use information to:

• Provide, maintain, secure, and improve Sorbetto.
• Monitor usage, reliability, security, and performance of the service.
• Respond to inquiries, support requests, and sales conversations.
• Authenticate Users and manage Customer access, roles, and permissions.
• Process Customer business workflows and generate reports requested by Users.
• Detect misuse, troubleshoot issues, and maintain audit history.
• Send administrative, support, service, or account-related communications.
• Perform our contracts with Customers, including implementation, support, billing, and account administration.
• Provide news, product updates, event information, or marketing communications where permitted, with opt-out options when required.
• Evaluate or complete a business transaction, such as a financing, merger, sale, reorganization, or transfer of all or part of our business.
• Analyze usage trends, evaluate promotional efforts, and improve our service, products, marketing, and customer experience.
• Comply with legal obligations and enforce our agreements.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, such as forms you complete, messages you send, account details you provide, or purchases you make.
• From Customers and authorized Users, such as when a Customer adds a User, assigns a role, imports data, or submits business records.
• Automatically from your use of the website or service, such as request metadata, device or browser information, usage logs, and diagnostic information.
• From service providers and business partners that help us provide, secure, support, bill for, or improve Sorbetto.

How We Share Information

We do not sell personal information. We may share information with service providers and contractors who help us host, operate, secure, support, communicate about, and improve Sorbetto. We may also share information when required by law, to protect rights and safety, in connection with a business transaction, or with Customer authorization.

We may share personal information in the following situations:

• With service providers who help us provide, monitor, analyze, secure, support, bill for, or communicate about the service.
• With payment processors or financial service providers when needed to process invoices, card payments, ACH, wire transfers, or related payment verification.
• With business partners when needed to provide a Customer-requested product, service, or promotion.
• With affiliates or related entities, if any, provided they are required to honor this Privacy Policy or equivalent protections.
• With another organization in connection with a merger, financing, acquisition, sale, divestiture, restructuring, bankruptcy, or similar business transaction.
• With other Users inside the same Customer account when your role, activity, messages, comments, assignments, or business records are visible as part of the service.
• With your consent or at the direction of the Customer that controls the relevant information.

When AI assistant features are enabled, prompts, context, and related data may be processed by external AI providers or other third-party partners. Those providers are independent services with their own terms, privacy policies, and data practices. Customers and Users are responsible for reviewing and accepting those third-party terms before opting in to AI assistant features.

Customer Control

Customers decide what business data is entered into Sorbetto and which Users may access it. Customer administrators are responsible for managing User access, role assignments, and internal permissions, including removing Users who no longer need access and controlling who may approve, post, reverse, export, import, modify, or delete records. Users should not enter information into Sorbetto unless they are authorized to do so by their organization.

Security of Your Personal Data

We take security seriously and use safeguards designed to protect Customer data from unauthorized access, loss, misuse, or alteration. These safeguards may include access controls, role-based permissions, tenant-based data separation, authentication checks, private storage for non-public files, audit records, restricted administrative access, and operational practices intended to limit access to people and service providers who need it to provide or support Sorbetto. We continue to improve these safeguards as the product matures. No internet-connected service can be guaranteed to be completely secure, and Customers should maintain their own appropriate internal controls.

The security of personal information is important to us, but no method of transmission over the internet and no method of electronic storage is completely secure. While we work to use commercially reasonable means to protect personal information, we cannot guarantee absolute security.

Retention

During an active contract, we retain Customer data as reasonably necessary to provide and support Sorbetto. Unless a written agreement states otherwise or law requires a different period, we will delete Customer data from our active production database within 30 days after the contract ends or the applicable end date of the contract. Customers are responsible for exporting or requesting any records they need before contract termination or expiration, including books, tax records, legal records, audit support, and other business archives they are required to maintain. We may retain limited records as necessary to comply with legal obligations, resolve disputes, enforce agreements, maintain security records, or preserve ordinary backups until they expire in the normal backup cycle.

Your Choices and Rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding certain personal information. You may also have the right to opt out of certain processing. We will respond to applicable privacy rights requests as required by law.

If your information is controlled by a Sorbetto Customer, we may direct your request to that Customer or ask you to contact them directly.

Delete Your Personal Data

You may request that we delete or assist in deleting personal information that we have collected about you. Where the service gives you or your Customer administrator the ability to update, amend, or delete certain information directly, you may use those controls.

You may also contact us to request access to, correction of, or deletion of personal information you have provided to us. We may need to retain certain information when we have a legal obligation, contractual obligation, security need, dispute-resolution need, or other lawful basis to do so. If your information is controlled by a Sorbetto Customer, we may refer your request to that Customer.

Cookies and Tracking

Sorbetto's public website is intended to operate without advertising trackers. We may still receive standard server, network, or security logs when you visit the site. If we add analytics, advertising, or non-essential cookies later, we will update this policy as appropriate.

Detailed Information on Processing

Service Providers

Service providers we use may have access to personal information only as needed to perform services for us or for a Customer. These providers may collect, store, use, process, and transfer information according to their own privacy policies and our agreements with them.

Third-Party Services and Source Data

Sorbetto may receive information from, send information to, or otherwise work with third-party services at a Customer's direction, such as payment processors, spreadsheets, accounting systems, fulfillment providers, 3PLs, AI providers, email systems, analytics tools, or other business systems. Those third-party services have their own privacy policies, terms, security practices, availability, and data-handling practices.

Analytics

We do not currently use third-party advertising analytics on the public Sorbetto website. If we later use analytics providers to monitor or analyze use of the website or service, we will update this policy as appropriate and provide any required choices.

Email and Marketing Communications

We may use your contact information to send newsletters, product updates, marketing communications, or other information that may be of interest to you, where permitted by law. You may opt out of marketing emails by following the unsubscribe instructions in the email or by contacting us. We may still send administrative, security, billing, or service-related messages.

Payments

We may provide paid products or services and may use third-party payment processors for card payments, ACH, wire transfers, or related payment administration. If we accept credit card payments, payment card details should be provided directly to the applicable payment processor, such as Stripe or another processor we identify at checkout or in an invoice workflow. Their use of personal information is governed by their own privacy policies and terms.

We do not intend to store full payment card details in Sorbetto. For ACH or wire payments, we may ask for information reasonably needed to facilitate the transaction, apply the payment, prevent fraud, or verify identity.

AI Assistant and External Providers

Optional AI assistant features may rely on external AI providers or other third-party partners. Their processing of prompts, context, outputs, and related information may be governed by their own privacy policies, terms, and conditions. Customers and Users should review those terms before opting in.

Mobile Devices

Sorbetto is not currently offered as a native mobile app with mobile advertising identifiers or mobile location tracking. If we later offer mobile features or use mobile analytics or advertising tools, your device may provide settings to limit interest-based ads, ad personalization, tracking, or collection of location information. You can review the privacy and advertising settings provided by your device operating system.

Children's Privacy

Our service is not directed to anyone under the age of 13, and we do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us. If we learn that we have collected personal information from a child under 13 without appropriate parental consent, we will take steps to remove that information from our systems.

If we need to rely on consent as the legal basis for processing information and applicable law requires parental consent, we may require consent from a parent or guardian before collecting or using that information.

Sale of Personal Information of Minors Under 16

We do not knowingly collect personal information from minors under 16 through Sorbetto, and we do not sell personal information of consumers we actually know are under 16. Some third-party websites or services linked from Sorbetto may have their own terms and privacy policies. Parents and guardians should monitor their children's internet use and instruct children not to provide information on other websites without permission.

If you believe a child under 13, or a minor under 16, has provided personal information to us, please contact us with enough detail for us to review and delete the information where appropriate.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.

Contact

For privacy questions or requests, contact us at [email protected].