Privacy Policy

1.1 Account & Organization Information

When a company signs up, we collect:

• Company name
• Business contact information
• Admin user name and email
• User roles and permissions
• Clerk authentication IDs

This data is required to create and manage your organization within PortaPro Software.

1.2 Operational Data Entered Into the Platform

Customers maintain full ownership of all uploaded data. This includes:

• Unit inventory details (serials, specs, maintenance)
• Customer records
• Quotes, work orders, invoices
• Route schedules and assignments
• Driver/tech task completion data
• Images taken in the field (e.g., service proof photos)
• Vehicle and fleet information
• Consumables and product inventory usage
• Notes, signatures, and file uploads

This data is used solely to provide the PortaPro Software service to your organization.

1.3 Authentication & Identity Information

PortaPro Software uses Clerk for secure authentication. Clerk processes:

• Email address
• Login credentials
• Passkeys / device-level sessions
• Two-factor tokens (if enabled)
• User metadata required for access control

Clerk does not share passwords or sensitive credential data with PortaPro Software.

1.4 Payment Information

PortaPro Software uses Stripe for payments. We do not store:

• Credit card numbers
• Bank account numbers
• CVV
• Card expiration details

Stripe directly handles:

• Card tokenization
• Subscription billing
• Connect payouts to rental operators
• Fraud monitoring

We only receive:

• Payment status
• Last 4 digits (for display purposes only)
• Billing history

1.5 Device & Usage Information

To improve performance and support, we collect:

• Device type (mobile, tablet, desktop)
• Browser type
• IP address (for security and fraud detection)
• Pages visited within the app
• General usage telemetry (load times, errors)

We do not track personal browsing history or sell behavioral analytics.

We use collected information to:

Provide the Core PortaPro Software Platform

• Manage company accounts and permissions
• Track units, routes, staff, customers, maintenance, and billing
• Generate quotes, invoices, reports, and schedules
• Support the mobile-first driver/tech experience
• Deliver secure customer portals

Improve Reliability & Performance

• Debug issues
• Optimize load times
• Improve route and data sync performance
• Enhance field usability

Process Payments

• Charge subscription fees
• Handle operator payouts via Stripe Connect
• Issue receipts and billing notices

Maintain Platform Security

• Authenticate users
• Enforce role-based permissions
• Prevent unauthorized access
• Detect suspicious activity

Provide Support

• Respond to customer service requests
• Assist with onboarding
• Diagnose account-specific problems

3.1 Database Storage via Supabase

All operational data is stored in Supabase Postgres, which includes:

• Encryption at rest
• Automated daily backups
• Point-in-time recovery
• Isolated project-level access

PortaPro Software engineers cannot access customer data without explicit authorization.

3.2 Deployment & Infrastructure via Vercel

Front-end and serverless functions are hosted on Vercel, which provides:

• Isolated, immutable deployments
• Global CDN edge delivery
• Automatic security patching
• Encrypted environment variables

3.3 File Storage

Images, uploaded documents, and service photos are stored via Supabase Storage using:

• Signed URL access
• Time-limited permission tokens

PortaPro Software does not:

• Sell your data
• Rent your data
• Share your data with advertisers
• Train AI models on your data

We only share data with essential processors needed to run the service:

Each provider maintains its own security certifications.

5. Data Ownership & Portability

You own all data entered into PortaPro Software.

You may request:

• Data export (CSV or structured format)
• Data deletion
• Account cancellation

We will process requests within 30 days unless legally restricted.

6. Data Retention

We retain operational data while your organization maintains an active account. Upon cancellation:

• Data can be exported prior to closure
• All organizational data is permanently deleted within 60 days
• Backups containing deleted data naturally expire

7. How We Protect Your Information

• Encryption in transit (TLS 1.2+)
• Encryption at rest (Supabase-managed)
• Role-based access control
• Executable builds isolated via Vercel
• Strict engineering access policies
• Continuous monitoring and error tracking
• Signed file URLs
• SOC 2–compliant vendors for hosting and auth layers

8. Children's Privacy

PortaPro Software is not intended for individuals under 16. We do not knowingly collect information from children.

PortaPro Software is operated in the United States. If you access the platform from outside the U.S., data may be processed and stored in U.S. data centers.

10. Changes to This Privacy Policy

We may update this policy as the platform evolves. When changes occur, we will update the "Effective Date" at the top of this page and notify organization owners.

For privacy questions or data requests, contact: