Privacy Policy

This Privacy Policy describes how Empowered Labs LLC (“Tillage”, “we”, “us”, or “our”) collects, uses, and shares your information when you use our quote-to-cash platform and related services.

By using Tillage, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for you to access Tillage or parts of our Service.
Company (referred to as either “the Company”, “Tillage”, “We”, “Us” or “Our” in this Agreement) refers to Empowered Labs LLC, operating at tillage.ai.
Cookies are small files placed on your computer, mobile device or any other device by a website, containing details of your browsing history on that website.
Country refers to: United States
Device means any device that can access the Service such as a computer, cellphone or digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Tillage platform, including the marketing website (tillage.ai), web application (app.tillage.ai), and all related services for quote generation, contract management, invoicing, and payment processing.
Service Provider means any natural or legal person who processes data on behalf of the Company. This includes third-party companies or individuals employed by Tillage to facilitate the Service, such as providers of payment processing, hosting, data storage and backups, email delivery, error monitoring, analytics, and security. See Third-Party Services.
Client means a business or individual that you invoice, quote, or contract with through Tillage, including that client’s contacts.
Usage Data refers to data collected automatically through use of the Service or from the Service infrastructure itself (for example, duration of a page visit, features used, invoices created).
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Information We Collect

Personal Data

While using Tillage, we may ask you to provide certain personally identifiable information that can be used to contact or identify you, including:

Email address
First and last name
Company name and business information
Payment information (processed securely through Stripe)
Client contact information you enter into the platform
Phone number (optional)
Business details you provide to receive payments, such as your business country, state, website, and tax or VAT number
Profile information from a sign-in provider (such as Google) if you choose to sign in with one
API keys for OpenAI or Anthropic that you add to your team settings, which we store encrypted

Information About Your Clients

When you use Tillage to work with your Clients, we process information about them on your behalf, including:

Names, email addresses, phone numbers, company details, and addresses you enter or import
Quotes, contracts, and invoices you send them, and their activity on those documents (such as when a document is viewed, approved, or paid), including the IP address and browser information recorded with that activity
Electronic signatures on contracts and quotes, including the signer’s name, title, signature image, date and time, IP address, and browser information
Records of consent to save a payment method or to pay automatically, including the date, IP address, and browser information
Replies your Clients send to emails from Tillage, which we forward to your team

You are responsible for having the right to share your Clients’ information with us and for giving your Clients any notices required by law.

Usage Data

Usage Data is collected automatically when using the Service and may include:

Your device’s Internet Protocol address (IP address)
Browser type and version
Pages of our Service that you visit
Time and date of your visit
Time spent on pages
Unique device identifiers
Quotes, invoices, and contracts you create
Payment transactions and financial data
Integration usage (Harvest, Stripe, and QuickBooks or other file imports)
Project and client data used for AI-powered quote generation
Requests made through the Tillage API and MCP server, and the apps you connect

Payment Information

When you process payments through Tillage, we use Stripe as our payment processor. Payment information (credit card numbers, bank account details) is collected and processed directly by Stripe and is not stored on Tillage servers. This applies to cards and to bank debits such as ACH, pre-authorized debits, Bacs, BECS, and SEPA Direct Debit. We receive the transaction information necessary to provide the Service (amounts, dates, status, payment method type, and the last digits and brand or bank name of a saved payment method), and information Stripe provides about the risk of a payment or account, such as risk evaluations, early fraud warnings, disputes, and failed or returned payments.

When you or your Client choose to save a payment method for future or automatic payments, the payment method is stored by Stripe and we keep a record of that consent.

Fraud Prevention and Security Data

To protect you, your Clients, and the Service from fraud and abuse, we collect and analyze:

Device and browser information, including a long-lived identifier stored in a security cookie
IP addresses used to sign up, sign in, and use the Service
Account and business details, such as email addresses, phone numbers, websites, payout bank accounts, and the cards used to pay invoices, which we may compare across Tillage accounts in a hashed form
Payment activity and the payment risk information described above
Publicly available information about your business, such as domain registration records and your website

We do not use this information for advertising.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on our Service and store certain information. We use:

Essential Cookies - Required for authentication, security, fraud prevention, and core platform functionality
Analytics Cookies - To understand how you use Tillage and improve our Service. See our Cookie Policy for details
Preference Cookies - To remember your settings and preferences

You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some features of Tillage.

How We Use Your Personal Data

Tillage uses Personal Data for the following purposes:

To provide and maintain our Service - Including quote generation, contract creation, invoice management, and payment processing
To manage your Account - Registration, authentication, and account management
To fulfill contracts - Processing payments, generating invoices, and managing client relationships on your behalf
To contact you - Service updates, security notifications, billing information, and customer support
To provide customer support - Responding to your requests and troubleshooting issues
To improve our Service - Analyzing usage patterns and developing new features
To prevent fraud and keep the Service secure - Verifying accounts, detecting and investigating fraud, payment abuse, and unauthorized access, limiting or suspending accounts, and protecting you, your Clients, and Tillage from loss
For compliance - Meeting legal obligations, tax requirements, and financial regulations
With your consent - Any other purpose with your explicit consent

Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or another region that requires a legal basis for processing Personal Data, we rely on:

Contract - To provide the Service you signed up for, including processing payments and sending your documents
Legitimate interests - To prevent fraud and abuse, secure the Service and our users’ accounts, protect your Clients from unauthorized charges, and improve the Service. We balance these interests against your rights and use the data only as needed for these purposes
Legal obligation - To meet tax, accounting, anti-money laundering, and other legal requirements
Consent - Where we ask for it, such as saving a payment method. You can withdraw consent at any time

We may share your personal information in the following situations:

With Service Providers - The providers listed in Third-Party Services and other providers necessary to operate Tillage
With AI Services - When you use AI-powered quote generation, project and client data may be sent to OpenAI or Anthropic to generate quotes. See AI Services
With Your Clients - When you send quotes, invoices, or contracts through Tillage, or share a document or client dashboard link
With apps you connect - When you connect an AI assistant or other app through the Tillage MCP server, OAuth, API keys, or webhooks, we share the data that app is authorized to access or that you configure us to send
For fraud prevention and payment security - With Stripe, and through Stripe with card networks and banks, to verify accounts, assess payment risk, and investigate fraud, disputes, and chargebacks
For legal compliance - When required by law, to respond to lawful requests from law enforcement or regulators, to report suspected fraud or other crimes, or to protect our rights, our users, and their Clients
With Your consent - Any other sharing with your explicit permission

We will never sell your personal data to third parties.

Data Retention

Tillage retains your Personal Data only as long as necessary for the purposes outlined in this Privacy Policy:

Active accounts - Data is retained while your account is active
Closed accounts - When you ask us to delete your account, we delete your data from the Service, including fraud prevention records. If your account has processed payments through Tillage, we keep the records needed for tax, accounting, and payment disputes
Backups - Deleted data may remain in our database backups until those backups expire on their regular schedule

You may request deletion of your account at any time through our contact page. Upon account deletion, we will remove your data subject to legal retention requirements. Payment records held by Stripe are retained under Stripe’s own policies.

Data Security

The security of your Personal Data is critical to us. We implement industry-standard security measures including:

Encryption in transit (TLS/SSL)
Encryption at rest for sensitive data, including stored API keys and integration credentials
API keys and access tokens for connected apps stored as one-way hashes
Regular security audits
Access controls and authentication, including email verification and bot protection on sign-up
Secure payment processing through PCI-compliant providers
Monitoring for fraud and abuse

You can review and revoke apps connected to your account at any time from your account settings.

To report a security vulnerability, see our security policy or email security@tillage.ai.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.

Your Data Rights

Depending on your location, you may have the following rights:

Access - Request a copy of your personal data
Correction - Request correction of inaccurate data
Deletion - Request deletion of your data
Export - Request a machine-readable export of your data
Objection - Object to certain processing of your data
Restriction - Request restriction of processing your data

To exercise these rights, contact us.

International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, or country where data protection laws may differ. Your consent to this Privacy Policy followed by your submission of information represents your agreement to that transfer.

Children’s Privacy

Tillage does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us.

Third-Party Services

We use service providers to run Tillage, including providers of hosting, data storage and backups, email delivery, error monitoring, product and website analytics, bot protection, customer feedback, and contact forms. They process Personal Data only on our behalf and as needed to provide their services to us.

Some services are part of features you use directly:

Stripe - Payment processing, Connect accounts, and payment fraud screening
Google - Sign-in (optional)
OpenAI and Anthropic - AI-powered quote generation (optional)
Harvest - Time tracking integration (optional)
QuickBooks - Accounting data imports (optional)

These services have their own privacy policies. We encourage you to review their policies when connecting your accounts.

AI Services

When you use Tillage’s AI-powered quote generation features, project details, scope, and client information (such as the client’s company details and primary contact’s name, email, and title) may be sent to OpenAI or Anthropic to generate accurate quotes. Important notes:

Your API keys - Quote generation uses the OpenAI or Anthropic API key you add to your team settings. We store these keys encrypted and use them only to make requests you start. Requests made with your key are covered by your own agreement with that provider, including its data retention and training terms
Onboarding demo - The one-time AI demo during onboarding uses Tillage’s OpenAI account and sends only the project description and details you enter in the demo
Not used for training - Under OpenAI’s and Anthropic’s API terms, API data is not used to train their models by default
Processed securely - Data is transmitted over encrypted connections
Limited processing - AI services process your data to generate the quote and may retain it for a limited time under their policies, for example to monitor for abuse
You control it - AI features are optional and you can choose not to use them

Connected Apps and the MCP Server

You can connect AI assistants and other apps to Tillage through our MCP server using OAuth or a team API key. A connected app can read and change the data covered by the access you grant, and what it does with that data is governed by that app’s own terms and privacy policy. You can revoke OAuth access from your account settings and delete API keys from your team settings at any time.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by:

Posting the new Privacy Policy on this page
Updating the “Last updated” date
Sending an email notification for material changes

Changes are effective when posted on this page. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions about this Privacy Policy, please contact us.

Address: Empowered Labs LLC, 5 Grumbacher Rd, York, PA 17406