Support, Privacy & Terms

CHEMPAC Inventory System operates this service and is responsible for the account and billing data described below. Inventory content is encrypted in your browser, so we hold it only as ciphertext we cannot read.

Account information: email address, optional name and company, sign-in timestamps. Billing information: tier, amount, currency, payment status and the payment provider's transaction reference. Card numbers are handled by the payment provider and never reach us.

Inventory records: ciphertext plus readable routing metadata — record identifier, region, reporting year, chemical count, tier and payment status. Operational logs: request routes, status codes and timestamps used to run and secure the service.

To provide the service you signed up for, to take payment, to keep the service secure and prevent abuse, and to meet tax and accounting record-keeping obligations. We do not use your information for advertising or profiling.

Inventory records are kept until you delete them or close your account. Deleting a record destroys its ciphertext. Billing records are retained for the period required by applicable tax and accounting law. Operational logs are short-lived.

If you are a California resident you have the right to know what personal information we have collected about you and how it is used, to request deletion of that information, to request correction of inaccurate information, and to opt out of the sale or sharing of personal information.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it for targeted advertising or profiling. There is therefore nothing to opt out of, but the right remains available to you.

Submit a request to privacy@chempac.uk. We will verify the request against your account email before acting on it, and you will not receive different pricing or a degraded service for exercising these rights. Residents of other states with comprehensive privacy laws — including Colorado, Connecticut, Texas, Utah and Virginia — may exercise comparable rights through the same address.

Because inventory content is encrypted with your vault key, a request for a copy can only return ciphertext and readable metadata from our side — the readable copy is produced by you in your browser or by exporting your report.

We use service providers for hosting, database storage, transactional email and payment processing. They process the information described above under contract and are not permitted to use it for their own purposes; the inventory content they hold is ciphertext. Data is hosted in the United States.

We set only what the service needs: a session cookie to keep you signed in and a preference cookie remembering your regional edition. No advertising or cross-site tracking cookies are used, and we honour Global Privacy Control signals where sent.

The service is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.

The service formats operator-provided data into a standardised EPCRA Tier II inventory layout and applies EPCRA threshold and OSHA HazCom logic to that data. It does not submit anything on your behalf.

You are responsible for the accuracy and completeness of the data you enter, for verifying every output against EPA, your State Emergency Response Commission and your Local Emergency Planning Committee, and for filing with the authorities that apply to your site. You must hold the rights to any data you upload.

Tier II inventory reports are due to your State Emergency Response Commission, Local Emergency Planning Committee and local fire department by March 1 for the preceding calendar year. Meeting that deadline is your responsibility; the service does not file on your behalf.

Outputs are informational and for internal record-keeping. They are not legal, environmental, safety or regulatory advice, and they are not a certification of compliance.

Report tiers are charged per record at the price shown at checkout. Enterprise access is billed annually. Because a generated report is delivered immediately on payment, fees are non-refundable once the report has been generated, except where required by law.

Do not attempt to break the service's security, access other operators' records, resell access without an Enterprise agreement, or use automated access outside the documented API and its rate limits.

The service is provided on an as-available basis. We may perform maintenance and change features. No uptime guarantee applies unless agreed in writing in an Enterprise contract.

To the maximum extent permitted by law, our aggregate liability is limited to the fees you paid for the record or subscription giving rise to the claim. We are not liable for regulatory penalties, business interruption or indirect loss arising from your use of the outputs. Nothing here excludes liability that cannot lawfully be excluded.

You acknowledge the zero-knowledge design described above and accept that a lost vault passphrase makes your stored records permanently unrecoverable, with no liability on our part for that loss.

You may stop using the service and delete your records at any time. We may suspend access for breach of these terms or non-payment.

These terms are governed by the federal law of the United States and, on matters federal law does not govern, by the law of the state in which the service operator is established, without regard to conflict-of-laws rules. Any dispute is brought in the federal or state courts having jurisdiction over that location, and both parties consent to that venue.