Privacy Policy

GearDesk ("GearDesk," "we," "us") provides self-checkout equipment-tracking software for teams and organizations. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website, web app, and mobile apps (together, the "Service").

Information we collect

• Account & organization data — your name, email, role, and the organization you belong to, provided when an account is created or a manager adds you.
• Equipment data you enter — the gear, tags, storage locations, checkouts, return windows, conditions, and notes your organization tracks in GearDesk.
• Usage & device data — standard technical information such as IP address, browser or device type, and log/diagnostic data needed to operate and secure the Service.
• Camera access — the app uses your device camera only to scan QR tags, on-device. We do not store camera images.

How we use it

• To provide and operate the Service — checkouts, reminders, inventory, and reporting.
• To send transactional messages (return-window reminders, account and security notices).
• To secure the Service, prevent abuse, and troubleshoot problems.
• To improve GearDesk in aggregate. We do not sell your personal information, and we do not use it for third-party advertising.

Tenant isolation

Each organization's data is logically separated so one organization cannot access another's. Your gear, users, and records are visible only within your own organization.

Service providers (subprocessors)

We share data only with vendors that help us run the Service, under contract and only as needed:

• Supabase — managed database and authentication (data hosted in the United States).
• Amazon Web Services (SES) — sending transactional email.
• Our hosting provider — running the web app and API.
• If paid plans are enabled, a payment processor (e.g., Stripe) handles billing; we do not store full card numbers.

Security

We protect data in transit with encryption (HTTPS/TLS), hash passwords, isolate each organization's data, and restrict administrative access. No system is perfectly secure, but we work to protect your information and to respond promptly to any issue.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When an organization deletes its account, we delete or de-identify its data within a reasonable period, except where we must retain records to comply with law.

Your choices & rights

• Access, correct, or export your information — contact us and we will help.
• Delete your account and associated data from within the app or by request.
• Depending on where you live, you may have additional rights (for example under GDPR or CCPA); we honor valid requests.

Children

GearDesk is a workplace tool intended for people 16 and older. It is not directed to children, and we do not knowingly collect data from them.

Changes

We may update this policy as the Service evolves. We will post the new effective date here and, for material changes, notify account admins.

Contact

Questions or requests? Email hello@geardesk.app.