Privacy Policy

⚠️ Placeholder Privacy Policy for MVP. Replace with a lawyer-reviewed version before production launch.

Last updated: 2026-05-02

What we collect

• Email address (for admin sign-in via magic link)
• Organization name and slug
• Operator names and PIN hashes (we never see plaintext PINs)
• Production data you enter into the Service (POs, parts, machines, entries)
• Standard server logs (IP address, request paths, timestamps)

What we don't do

• We do not sell or share Customer Data with third parties.
• We do not use Customer Data to train any AI models.
• We do not run advertising or third-party trackers in the Service.

Subprocessors

We use Vercel (hosting), Supabase (database + auth), and Stripe (billing). Each is a SOC 2 / industry-standard provider; their privacy practices apply to data they process on our behalf.

Data retention

Customer Data is retained for the duration of the subscription. On termination, data is deleted within 90 days unless Customer requests an export first.

Contact

Privacy questions: privacy@craneapp.com