Privacy Policy

1. Information We Collect

When you create an account and use SprayLog, we collect:

• Account information: Name, email address, company name, phone number
• Business data: Customer records, chemical products, application logs, license information, and SDS documents you enter into the platform
• Location data: GPS coordinates captured during application logging (only when you use the feature)
• Photos: Site photos you upload through the application form
• Payment information: Billing details processed securely through Stripe (we never store your full credit card number)
• Usage data: How you interact with the platform, pages visited, features used

2. How We Use Your Information

We use your information to:

• Provide and maintain the SprayLog service
• Generate compliance reports and audit documentation
• Send license expiration alerts and service notifications
• Process payments and manage your subscription
• Improve our product and customer experience
• Respond to support requests

3. Data Storage and Security

Your data is stored securely on cloud infrastructure provided by Supabase and Vercel, both of which maintain SOC 2 compliance. All data is encrypted in transit (TLS/SSL) and at rest. We implement row-level security to ensure your company data is only accessible to authorized users within your organization.

4. Data Sharing

We do not sell your data. We only share information with:

• Stripe: For payment processing
• Resend: For sending email notifications
• Law enforcement: Only when required by valid legal process

5. Your Data Rights

You have the right to:

• Access all data we store about you and your company
• Export your data at any time through the Reports feature
• Request correction of inaccurate data
• Request deletion of your account and all associated data

6. Cookies

We use essential cookies to maintain your login session and remember your preferences. We do not use third-party advertising or tracking cookies.

7. Data Retention

We retain your data for as long as your account is active. Application records are retained for a minimum of 3 years to support compliance requirements. Upon account deletion, all data is permanently removed within 30 days.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through a notice on our platform.

9. Contact Us

If you have questions about this privacy policy or your data, contact us at support@getspraylog.com.