Privacy Policy

Last updated: April 10, 2026

[COMPANY_NAME] ("we", "our", "us") operates the support mobile application and the client support portal at [DOMAIN]/support (collectively, the "Service"). This policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

We collect information you provide when your administrator creates your account and when you use the Service:

• Account information — name, email address, and company association, provided by your IT administrator when your account is created.
• Support content — tickets, chat messages, and file attachments you submit through the Service.
• Device identifiers — Apple Push Notification Service (APNs) tokens, used solely to deliver push notifications to your device.
• Authentication data — hashed passwords and session tokens, managed by our authentication provider (Supabase Auth).

2. Information We Do Not Collect

• Location data
• Contacts, photos, or media from your device
• Browsing or search history
• Advertising identifiers or tracking data
• Health, financial, or biometric data (Face ID verification is processed entirely on your device by Apple and is never sent to us)
• Analytics or diagnostic data

3. How We Use Your Information

• To provide IT support services — creating, tracking, and resolving your support tickets.
• To send you push notifications about ticket updates, chat messages, and service communications.
• To authenticate your identity and secure your account.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

The Service uses the following third-party providers to operate:

• Supabase — database hosting and user authentication. Supabase Privacy Policy
• Apple Push Notification Service (APNs) — delivery of push notifications to iOS devices.
• Resend — transactional email delivery (ticket confirmations, password resets). Resend Privacy Policy
• Vercel — web application hosting. Vercel Privacy Policy

These providers process data only as necessary to deliver the Service and are bound by their own privacy policies.

5. Data Security

We protect your data using:

• Encrypted connections (TLS/HTTPS) for all data in transit.
• Row-Level Security (RLS) policies in our database so users can only access their own data.
• Optional Face ID app lock on the mobile app.
• Secure credential storage using the iOS Keychain.

6. Data Retention

We retain your account and support data for as long as your company maintains an active service agreement with [COMPANY_NAME]. If your company ends its service, we will delete your data within 90 days unless retention is required by law or requested for record-keeping purposes.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting your IT administrator or by emailing us directly. If you are a California resident, you have additional rights under the CCPA, including the right to know what data we hold and the right to request deletion.

8. Children's Privacy

The Service is intended for business use and is not directed at children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top reflects the most recent revision.

10. Contact Us

If you have questions about this privacy policy or your data, contact us:

• Email: [SUPPORT_EMAIL]
• Web: [DOMAIN]/contact