Privacy Policy

This Privacy Policy describes how the Economic Development Committee ("EDC," "we," "us," or "our") collects, uses, and discloses information in connection with the customer portal (the "Portal") used for business onboarding, document review, and Letter of Intent ("LOI") processing under the EDC Bond Program.

Account information: name, email address, phone numbers, and password (stored only as a salted cryptographic hash — we never store or have access to your plaintext password).

Business information: legal business name, EIN, state of incorporation, business address, officer/owner details, and related company information you provide.

Documents: business formation documents, financial statements, tax returns, and other files you upload, along with LOI Information Form responses (project details, cost breakdowns, and supporting documentation flags).

Communications: messages you send through the Portal's secure messaging feature.

Usage information: log data such as IP address, login timestamps, and actions taken within the Portal, collected for security and audit purposes.

To create and manage your account and verify your identity, including through multi-factor authentication.

To review your submission, process your LOI request, and administer the EDC Bond Program.

To communicate with you about your account, review status, and program requirements.

To maintain security, detect fraud, and comply with legal and regulatory obligations.

To maintain an audit trail of account and review activity.

With authorized EDC personnel (the Bond Team and administrators) who require access to review your submission.

With service providers who perform functions on our behalf, such as cloud hosting, object storage, and email delivery, under confidentiality obligations consistent with this Policy.

As required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of EDC, our users, or others.

In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell your personal information.

Messages you send through the Portal that are marked customer-visible may be read by authorized EDC personnel and responded to. Internal notes and internal-only messages created by EDC personnel for review and coordination purposes are never shared with you or any customer account.

We retain account, submission, and audit information for as long as reasonably necessary to administer the EDC Bond Program, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Audit log records are retained on an append-only basis and are not deleted as part of routine account changes.

We use administrative, technical, and physical safeguards designed to protect your information, including mandatory multi-factor authentication, encryption of sensitive data such as MFA secrets at rest, allowlisted and signature-validated file uploads stored outside the public webroot, and server-side authorization checks on every protected action. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may review and update most account and business profile information directly within the Portal. To request access to, correction of, or deletion of other information we hold about you, contact us using the information below; we will respond consistent with applicable law and our legitimate business and recordkeeping needs, including audit trail integrity requirements described in Section 6.

The Portal uses strictly necessary cookies to maintain your authenticated session. We do not use the Portal for third-party advertising or cross-site tracking.

The Portal is intended for business use by adults acting on behalf of a business entity and is not directed to individuals under 18. We do not knowingly collect information from children.

We may update this Privacy Policy from time to time. Material changes will be presented to you for re-acceptance the next time you log in, and each acceptance is recorded with the version and timestamp of the Policy accepted.

Questions about this Privacy Policy or your information may be directed to support[at]economicdevelopmentcommittee.com.