Privacy Policy
Last updated: October 5, 2026
ERRA, LLC, a Utah limited liability company, provides the ERRA platform.
What we collect
- Account information (name, email, organization name) when your account is created or you accept an invite
- Formula, ingredient, supplier, and product data you enter into the platform
- Usage data (pages visited, features used) for product improvement
- Error reports (via Sentry) that may include technical context but not formula content
How we use it
- To provide and improve the ERRA platform
- To communicate with you about your account and the product
- To provide opt-in aggregated benchmarks under the limits set out below
What we do not do
- We do not sell your data
- We share records with partners only as directed by the customer who grants access. Opt-in aggregated benchmarks are computed across five or more organizations.
- We do not use your data to train AI models, and no ERRA tool will reveal or reconstruct your formulas
- We do not display advertising
What we learn from, and the limits we hold ourselves to
Opt-in benchmarks are computed across at least five organizations. The aggregate output excludes company, product, brand, supplier and partner identities and personal data. Customer data is not used to train AI models.
Five limits apply, and they are written into our customer agreements:
- No disclosure. De-identified data is not given to any third party and is never used to train a third party's model.
- No reconstruction. No ERRA tool, model or output will reveal a customer's formula, specification or document, or let anyone rebuild one.
- Groups of five or more. Anything we publish or show to other customers is aggregated across at least five organizations.
- No re-identification. We do not attempt to re-identify de-identified data, and aggregated outputs do not identify customer accounts.
- No personal data. Adverse event reports, complaints and any other personal data are never included.
When your account closes, your organization is frozen read-only and the owner can export its records within 90 days. Compliance records are retained: the audit trail and signed records are never hard-deleted, supporting customers' regulatory retention requirements. Account closure does not promise de-identification or uploaded-file deletion.
Data storage
Your data is stored on AWS infrastructure in the United States, encrypted at rest and in transit.
Your rights
- Access: The owner can export the organization's records as a capped JSON bundle with a truncation manifest, plus CSV exports of key records. A complete copy including files is available on request.
- Deletion: You can request account closure and export. Compliance records, including the audit trail and signed records, are retained and are never hard-deleted.
- Correction: You can correct editable data through the platform. Approved versions are corrected by creating a new version.
California residents (CCPA)
You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
Website forms, newsletter and consumer reports
- Contact and demo requests: We collect your name, email, optional company and message, the page and referrer you came from, and campaign attribution when supplied. We use these records to respond and follow up. They remain on file for that purpose without a scheduled deletion deadline.
- Newsletter: We collect your email, signup source, IP address, browser information and subscription, confirmation and unsubscribe dates. We use them for double opt-in delivery, consent records and abuse prevention. You can unsubscribe at any time; the subscription and opt-out record remains on file so we can honor your preferences. There is no automatic purge schedule.
- Consumer intake: A customer-provided intake link collects your report and any name, email, phone, date of experience, health-related indicator, lot code and purchase location you choose to provide. A hashed IP is kept for abuse review. The customer receives the report for quality review and may convert it into a controlled complaint or adverse-event record. Reports and their audit history are retained, including when dismissed; they have no automatic expiry. Personal data is excluded from benchmarks.
Contact privacy@goerra.com to request a review of personal information or retention. Customer compliance records remain subject to regulatory retention requirements.
Subprocessors
- Amazon Web Services: Hosting, database, file storage, email delivery, monitoring, first-party analytics and abuse-prevention infrastructure. Primary data storage is in the United States, AWS us-west-2. Content delivery uses AWS's global edge network.
- Sentry: Error monitoring when configured, with request bodies, headers, cookies and user fields stripped before sending. Processing location depends on the Sentry project; this policy does not specify a processing region.
- Google Workspace: Company email and customer support correspondence. Processing uses Google-managed infrastructure; this policy does not specify a fixed processing region.