How Timberlark collects, uses, and protects your information.
Timberlark, LLC ("Timberlark," "we," "us," or "our") operates the Timberlark platform at timberlark.com and associated mobile applications. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.
Account Information: When you register, we collect your name, email address, role (logger, landowner, mill, trucker, or equipment dealer), and any profile information you choose to provide.
Job and Transaction Data: We collect information about jobs you post or accept, including job details, location, timber type, payment amounts, and job status milestones.
Payment Information: Payment processing is handled by Stripe. Timberlark does not store your credit card numbers or bank account details. Stripe's privacy policy governs the handling of payment data. We do retain transaction records (amounts, dates, job IDs) for accounting and dispute resolution purposes.
Location Data: If you use mapping or GPS features, we may collect location data to enable harvest origin tracking, logging conditions data, and EUDR compliance documentation. Location data is used only for the purpose for which it was submitted.
Compliance Documents: For EUDR and Lacey Act compliance tools, we collect the information you submit including harvest location coordinates, species data, and supply chain documentation. This data may be recorded on the VeChain blockchain (see Section 6).
Usage Data: We collect standard web analytics data including pages visited, time on site, device type, browser, and referring URL. We use Vercel Analytics and may use other analytics tools. IP addresses are collected in server logs.
Communications: If you contact us, we retain records of that communication.
We use your information to:
With Other Users: Your profile information (name, role, rating, and job history visible to your role level) is visible to other Platform Users as necessary to facilitate transactions. Job postings you create are publicly visible to Platform Users.
With Service Providers: We share data with trusted service providers who help us operate the Platform, including:
We do not sell your personal information to third parties for advertising or marketing purposes.
Blockchain Records: Compliance statements and job milestones recorded on the VeChain blockchain are publicly visible on the blockchain by their transaction ID. We record a cryptographic hash of the data — the underlying personal details are stored in our database, not on the blockchain itself.
Legal Requirements: We may disclose your information when required by law, subpoena, court order, or government request, or to protect the rights, safety, or property of Timberlark, our Users, or the public.
We retain your account information for as long as your account is active. Job records, transaction history, and compliance documents are retained for a minimum of 7 years to meet legal, accounting, and EUDR documentation requirements.
Blockchain records are permanent by nature and cannot be deleted — this is a feature of how blockchain technology works. The hashed compliance data recorded on VeChain cannot be altered or removed after filing.
We use industry-standard security practices including encrypted data transmission (HTTPS/TLS), encrypted database storage via Supabase, access controls, and regular security reviews. No method of internet transmission is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
We use cookies and similar technologies to maintain your login session and for analytics. You can control cookies through your browser settings, though disabling cookies may affect Platform functionality.
Depending on your location, you may have the following rights regarding your personal information:
To exercise any of these rights, email privacy@timberlark.com. We will respond within 30 days.
If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR may apply to your use of the Platform. Our legal basis for processing your data is:
You have the right to lodge a complaint with your national data protection authority if you believe we have not handled your data in accordance with applicable law.
The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated to registered Users via email. Your continued use of the Platform after any changes constitutes acceptance of the updated Policy.
For questions, requests, or concerns about this Privacy Policy:
Timberlark, LLC
Email: privacy@timberlark.com
Website: timberlark.com