Privacy Policy

1. Scope

This policy covers the EquipQR dashboard and the public equipment pages served at links beginning with /e/. It applies both to the companies ("Customers") that use EquipQR to manage their equipment and to the end-users ("End Users") who scan a QR code and interact with a Customer's equipment page.

2. Information we collect

From Customers and their team members, we collect:

• Account information: name, email address, and authentication credentials;
• Company data you enter: company name, notification email, customer records, equipment records, and troubleshooting guides;
• Billing information, handled directly by our payment processor (Stripe) — we receive a subscription status and reference token, not your full card number; and
• Usage data such as pages visited and actions taken in the dashboard, used to operate and improve the Service.

From End Users who scan a QR code or submit a service request, we collect:

• Troubleshooting responses: the answers selected while working through a guide, and any question typed into the chat-style assistant;
• Service request details: a description of the issue, contact name, email and/or phone number, and any photos or video attached; and
• Basic technical data such as IP address and browser type, for security and abuse prevention.

We do not require End Users to create an account, and we do not knowingly collect more information from them than is needed to route a service request to the Customer they're contacting.

3. How we use information

• To provide the Service: operate accounts, guides, equipment pages, and service requests;
• To power AI features: drafting troubleshooting guides, answering questions in the chat assistant, and summarizing service requests for the Customer that receives them;
• To send transactional email, such as new service request notifications and account emails;
• To process payments and manage subscriptions;
• To secure the Service, prevent abuse, and enforce our Terms of Service; and
• To comply with legal obligations.

4. Subprocessors

We use a small number of subprocessors to run EquipQR, each bound by contract to protect data they process on our behalf and to use it only to provide their service to us:

• Supabase — database, authentication, and file storage (including service request photos and video);
• Stripe — payment processing and subscription billing;
• Resend — transactional email delivery (e.g. service request and account notifications); and
• Anthropic — AI model provider used to draft troubleshooting guides, power the chat assistant, and summarize service requests.

We don't sell personal information, and we don't share Customer Content with third parties except the subprocessors above, at a Customer's direction, or where required by law.

5. Data retention

We retain account and Customer Content for as long as the account is active, plus a limited period after cancellation to allow data export, unless a shorter period is requested or a longer period is required by law. End User data submitted through a service request is retained as part of that Customer's records and is subject to that Customer's own retention practices.

6. Security

Data is encrypted in transit (TLS) and at rest, and access to Customer data within our database is enforced by row-level security scoped to each company — one Customer's data is not queryable by another. More detail is on our Security page.

7. Your choices and rights

Customers can access, correct, export, or delete data they've entered from within the dashboard, or by contacting us. End Users who want to access, correct, or delete information they submitted through a service request should contact the Customer they submitted it to, since that Customer controls the record; we'll assist Customers with such requests. Depending on where you live, you may have additional rights under applicable law (for example, the right to request a copy of your data or to object to certain processing) — contact us and we'll respond.

8. Children's privacy

EquipQR is a business tool and is not directed at children. We do not knowingly collect personal information from children under 13.

9. International data

Our infrastructure and subprocessors may store and process data in the United States. By using the Service, you consent to this transfer and processing.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced, for example by email or an in-app notice, before they take effect.

11. Contact

Questions about this policy or a privacy request can be sent to support@equipqr.co.