CoatPilot is operated by DesignTroit LLC, a Michigan limited liability company ("we," "us"). This policy explains what we collect through the CoatPilot application, how we use it, and the choices you have. Contact: ale@designtroit.com.
Account information — name, email, phone, company name, role, and authentication data (managed by Supabase Auth; we never see your password).
Project and business data — projects, addresses, stages, scope notes, estimates, invoices, expenses, contracts, sharing relationships, and supplier-representative connections your company creates in the app.
Photos and metadata — job-site photos you upload, including capture time and, when enabled on the device, GPS location metadata used to attach photos to the right project.
Worker time entries — names, work dates, clock-in/out times, lunch deductions, and computed hours entered by your company. If GPS-verified check-in is enabled, check-in location is also recorded. Your company (our customer) controls this data and is responsible for its own notices to its workers.
Device and log data — IP address, browser type, and usage logs for security and troubleshooting.
To provide and secure the Service; to sync data across your team; to generate the reports, invoices, and dashboards you request; to process subscription payments; to communicate service notices; and to improve the product. We do not use your business data to train third-party AI models.
We share data only with providers needed to run the Service: Supabase (database, authentication, file storage), Vercel (application hosting), and Stripe (subscription payments; we do not store full card numbers). These providers process data under their own security and privacy commitments.
We do not sell your personal information and we do not share it for cross-context behavioral advertising. Data is disclosed only: (a) to the people and companies you deliberately share with inside the app (e.g., a contractor you share a project with, or a supplier representative you connect with — always limited by the app's visibility rules); (b) to the processors above; (c) when required by law; or (d) in a merger or acquisition, under this policy's protections.
We keep data while your account is active. After termination you may export your data for 30 days; afterwards we delete or de-identify it within a commercially reasonable period, except as needed for legal, tax, or security purposes.
Data is encrypted in transit (TLS) and at rest by our providers. Access is controlled with row-level security so each company sees only its own records plus what has been explicitly shared with it. No system is perfectly secure; report concerns to ale@designtroit.com.
Depending on your state (including under the California Consumer Privacy Act and similar laws), you may have the right to: know/access the personal information we hold about you; correct inaccurate information; delete personal information; port your data in a usable format; and not be discriminated against for exercising these rights. Email ale@designtroit.com and we will respond within the time required by law. If a worker's data was entered by their employer, we may direct the request to that company, which controls the record.
Companies using CoatPilot enter information about their workers and business contacts. For that data, the company is the controller and CoatPilot processes it on the company's instructions. Workers with questions should contact their employer first; we will assist as required.
The Service is for business use and is not directed to children under 16. We do not knowingly collect their data.
We will post updates here and, for material changes, give notice by email or in-app before they take effect.
DesignTroit LLC · Detroit, Michigan · ale@designtroit.com
DRAFT — requires attorney review before public launch.