Privacy Policy

1. Information we collect

• Account details: your name and email address, entered by you or by an admin who invites you.
• Organization records: the organization's name and location, rooms, equipment, inspection results, notes, issues and corrective actions, and who logged each one and when.
• Billing details: the subscription status and plan. Card details are collected and held by Stripe; we never see or store your card number.
• Slack connection: if an admin connects Slack, the workspace and channel chosen and an access token, which we store encrypted.
• Technical data: a sign-in cookie that keeps you logged in, and standard server logs (such as IP address and browser type) kept by our hosting provider.

The camera is used only in your browser to read QR codes. No images or video are sent to us or stored.

2. How we use it

• to provide the service: showing what is due, recording inspections, and producing reports;
• to send sign-in links and the email and Slack notifications you or your admins have turned on;
• to process subscription payments;
• to keep the service secure and fix problems;
• to answer support requests.

We do not sell your information, use it for advertising, or use advertising or tracking cookies.

3. Who we share it with

Only the service providers needed to run LabSafe, each handling the minimum required:

• Supabase: database and sign-in;
• Vercel: application hosting;
• Stripe: payments;
• Resend: sending email;
• Slack: only if your organization connects it, and only the notifications it has turned on.

Within your organization, admins and team members can see the organization's records, including the names of people who logged inspections. We may disclose information if required by law, or to a successor if LabSafe is acquired, in which case this policy continues to apply to it.

4. Retention

Inspection records are kept for as long as the organization has an account, including after a subscription lapses, so that a compliance history is never lost by accident. Removed equipment and people stay attached to the inspections they were part of. An organization's primary admin can ask us to delete the organization and all of its data by emailing support@getlabsafe.com.

5. Security

Data is encrypted in transit and at rest. Each organization's records are separated from every other organization's, sign-in uses one-time email links instead of passwords, and integration tokens are encrypted. No system is perfectly secure; if a breach affects your information we will notify your organization's admins without undue delay.

6. Your choices

• Update your name and email address in Account → Profile.
• Choose which emails you receive in Account → Notifications.
• Ask for a copy of your information, a correction, or deletion by emailing us. If your account belongs to an organization, we may refer the request to its admins, who control those records.

7. Where data is processed

LabSafe is operated from the United States, and information is stored and processed there.

8. Children

LabSafe is a workplace tool and is not intended for anyone under 16.

9. Changes

We may update this policy. If a change is significant we will notify organization admins by email before it takes effect.

10. Contact

Questions or requests: support@getlabsafe.com.