Privacy policy

Who we are

guardable provides equipment tracking software: tracking clients, inventory and orders. This policy explains what personal data we collect when you use guardable, why we collect it, and the choices you have. It applies to the guardable website and application.

Data we collect

We collect only what we need to run the service:

• Account data — your name, email address and password (stored hashed), or your Google account identifier if you sign in with Google.
• Workspace data — the clients, items and orders you enter into your workspaces. This data belongs to you; we process it only to provide the service.
• Billing data — if you subscribe to a paid plan, payment details are handled by our payment provider (Stripe). We never see or store your full card number.
• Usage and log data — technical logs (IP address, browser, timestamps) and error reports, used for security, debugging and keeping the service reliable.

How we use your data

• To provide, operate and improve the service.
• To authenticate you and keep your workspaces isolated and secure.
• To process subscription payments and send transactional emails (e.g. invitations, receipts).
• To detect, investigate and prevent abuse or security incidents.

We do not sell your personal data, and we do not use your workspace data for advertising.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to secure your session. We do not use third-party advertising or tracking cookies.

Sharing and subprocessors

We share data only with service providers that help us run guardable — hosting infrastructure, payment processing (Stripe), error monitoring (Sentry) and email delivery. Each provider processes data only on our instructions and under a data processing agreement.

Data retention

We keep your data for as long as your account is active. If you delete your account or a workspace, the associated data is deleted or anonymised within a reasonable period, except where we are legally required to retain it (for example, billing records).

Security

All traffic is encrypted in transit (TLS). Workspaces are strictly isolated, access is controlled by role-based permissions, and changes to rental orders are stored as an immutable, auditable event history.

Your rights

Depending on where you live (including under the GDPR), you have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below and we will respond within 30 days.

Changes to this policy

We may update this policy as the service evolves. If we make material changes, we will notify you by email or in the app before they take effect.

Contact

Questions about privacy? Email us at info@guardable.dev.