Privacy Policy

What we store, and why

PhaseOps stores your account data (name, email, phone) and the operational data your company enters — shows, crew, gear, trucks, trips, documents, finances. We store it to run your company's workspace, and for no other reason. Data is scoped per company and isolated with row-level security in Postgres.

Who processes it

These are the services PhaseOps actually calls, and what each one receives:

• Supabase — authentication, database and file storage. Holds your account and company data. Passwords are handled by Supabase Auth and are never visible to PhaseOps.
• Vercel — hosts the application, so requests to PhaseOps pass through it.
• Stripe — payment processing. Receives the details of a payment you make or collect; card numbers go to Stripe, not to us.
• Resend — outbound mail. When someone in your company presses Send on an invite, an invoice or a proposal, Resend delivers it and receives the recipient's address and the contents of that message. Nothing sends on a schedule and PhaseOps does not receive mail.
• Duffel — the flight and stay booking provider behind travel search. Receives traveller details (name, contact, travel dates) only when your company books travel through the app. You do not hold an account with them; the booking is made through ours.
• Xweather — weather data and map tiles. Receives the venue coordinates being looked up, not who is asking.
• Photon (komoot) — address search and geocoding. Receives the address text you type into an address field.
• OSRM — road routing for trip estimates. Receives the coordinates of a trip's endpoints.
• Browser push services — if you turn on push notifications, they are delivered through your browser vendor's push service.

Google Sign-In

If you sign in with Google, Google sends us your email address, name and profile photo so we can identify you and either create your account or link it to one that already exists. We store those three things on your account. We do not use Google as a data source for anything else — no Drive, no Calendar, no Contacts, no Gmail. What Google does with the sign-in on their side is covered by Google's own privacy policy.

What we do not do

We do not sell personal data. There is no ad tracking and no analytics script on this site or in the app. Trucks are not GPS units: position is the driver's phone while the run is open, and the map says so. No crew member's location is ever reported, and a driver who has opted in stops sharing the moment they switch it off.

Retention

Your data stays until your company deletes it or asks us to. We do not keep operational data past that for our own purposes.

Questions

This policy is operated by PhaseOps, the platform served at www.phaseops.live. Mail hello@phaseops.live — it is read by a person. As the product grows, this policy will grow with it, and changes will be dated rather than slipped in.