Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information — when you sign up, we collect your name, business name, email address, and a password (stored only as a secure hash).
• Data you enter ("Your Data")— the business records you put into the Service, such as your customers' names and contact details, addresses, equipment, jobs, invoices, and staff records.
• Payment information — when you subscribe, payment is handled by our processor, Stripe. We do not see or store your full card number; we keep only limited billing details such as your plan, billing status, and Stripe customer identifiers.
• Usage and device data — logs, IP address, browser/device type, and similar technical data generated when you use the Service, used for security, debugging, and improving reliability.

2. How we use information

We use information to:

• provide, operate, secure, and improve the Service;
• process subscriptions and payments and send related notices;
• respond to support requests and communicate with you about your account;
• detect, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations.

We do not sell your personal information or Your Data.

3. Your customers' data — your role and ours

When you use the Service to manage information about your own customers, you control that information and we process it on your behalf, in line with these terms and our agreement with you. You are responsible for providing any notices to, and obtaining any consents from, your customers that the law requires.

4. How we share information

We share information only as needed to run the Service, and with service providers ("subprocessors") who process data on our behalf under appropriate confidentiality and security obligations:

• Stripe — payment processing and subscription billing.
• Supabase — database, authentication, and file storage hosting.
• Vercel — application hosting and content delivery.
• Resend — sending transactional email (such as verification and invoice emails).
• Sentry — error monitoring and diagnostics.
• Google Maps — mapping and route features.

We may also disclose information if required by law, to enforce our terms, to protect the rights, safety, or property of anyone, or in connection with a merger, acquisition, or sale of assets (in which case we will continue to protect your information consistent with this Policy).

5. Data security and tenant isolation

We use technical and organizational measures to protect information, including encryption in transit, hashed passwords, access controls, and database-level isolation so that each organization can access only its own data. No method of transmission or storage is perfectly secure, but we work to protect your information and to address issues promptly.

6. Data retention

We retain account information and Your Data while your account is active and as needed to provide the Service. After you cancel or terminate, we may retain data for a reasonable period to allow export and to meet legal, accounting, or security obligations, after which it is deleted or de-identified in the ordinary course. Encrypted backups are retained on a rolling basis.

7. Your choices and rights

You can access and update much of your information directly within the Service. Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To make a request, contact us at the email below. We will respond consistent with applicable law. If a request concerns information that one of our business customers controls, we may direct you to that business.

8. Children

The Service is intended for businesses and is not directed to children under 13, and we do not knowingly collect personal information from children.

9. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or within the Service). The "Effective" date above indicates when this Policy was last updated.

10. Contact

Broad River Studios LLC — for privacy questions or requests, contact admin@broadriver.studio.