Privacy Policy

1. Introduction

Strut (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our shop management and invoicing platform (“Service”).

2. Information We Collect

We collect information you provide directly:

• Account information (name, email, password)
• Business information (shop name, address, phone)
• Customer data you enter (customer names, emails, phone numbers, vehicle details)
• Invoice and service records
• Communications with our support team

We automatically collect:

• Usage data (pages visited, features used, timestamps)
• Device and browser information
• IP address and approximate location
• Error and performance data

3. How We Use Your Information

• To provide and maintain the Service
• To process your transactions and send invoices
• To send transactional emails (invoice notifications, appointment reminders)
• To respond to support requests
• To improve the Service and develop new features
• To detect and prevent fraud or security issues

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — database hosting and authentication (data stored on AWS infrastructure)
• Vercel — application hosting and analytics
• Resend — transactional email delivery
• Sentry — error tracking and performance monitoring

Each of these services has their own privacy policies governing their use of data.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete your data within 90 days unless retention is required by law. You may export your data at any time through the platform's export features.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and audit logging. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies. Analytics cookies may be used to understand how the Service is used.

8. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data, correct inaccurate data, delete your data, export your data in a portable format, and withdraw consent. To exercise these rights, contact us at the email below.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at support@struthq.ca.