Privacy Policy

1. Introduction

Welcome to FieldPins. We are committed to protecting your privacy and ensuring you have control over your data. This Privacy Policy explains how we collect, use, and protect your information when you use our offline-first site survey application.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we collect:

• Your email address
• Your Google profile information (name, profile picture)
• Google OAuth tokens for Drive access

2.2 Application Data

The data you create within FieldPins (projects, floorplans, pins, notes, and photos) is stored:

• Locally in your browser using IndexedDB for offline functionality
• In your Google Drive under /My Drive/FieldPins/ when you manually sync

2.3 Payment Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card information. We only receive and store your subscription status from Stripe.

3. How We Use Your Information

We use your information to:

• Authenticate your account via Supabase Auth and Google OAuth
• Enable Google Drive synchronization when you trigger a manual sync
• Manage your subscription status and feature access
• Provide customer support when requested

4. Data Storage and Ownership

4.1 You Own Your Data

All project data you create belongs to you. Your projects, floorplans, pins, notes, and photos are stored exclusively in your Google Drive and your browser's local storage. We do not maintain copies of your project data on our servers.

4.2 Local Storage (IndexedDB)

Data is stored locally in your browser using IndexedDB for offline functionality. This data remains on your device and is only accessible by you. If you clear your browser data or uninstall the app, this local data will be deleted.

4.3 Google Drive Storage

When you manually sync, your project data is uploaded to your Google Drive account under/My Drive/FieldPins/. This data is subject to Google's privacy policy and your Google Drive storage limits.

4.4 Minimal Backend Storage

We only store minimal profile information in our Supabase database:

• Your user ID
• Your subscription status (free, pro, etc.)
• Account creation and update timestamps

We do not store your project data, floorplans, pins, or photos on our servers.

5. Third-Party Services

5.1 Supabase

We use Supabase for authentication and minimal user profile storage. Supabase's privacy policy applies to data they process on our behalf.

5.2 Google OAuth & Drive API

We use Google OAuth for authentication and the Google Drive API for cloud storage. Google's privacy policy applies to their services. We request the following scopes:

• openid - Identity verification
• email - Your email address
• profile - Basic profile information
• https://www.googleapis.com/auth/drive - Google Drive access for file storage

5.3 Stripe

Payment processing is handled by Stripe. We do not have access to your complete credit card information. Stripe's privacy policy applies to payment data.

6. Cookies and Local Storage

We use essential cookies and browser storage to:

• Maintain your login session
• Store authentication tokens securely
• Enable offline functionality via IndexedDB and Service Workers

We do not use tracking cookies or analytics cookies.

7. Data Security

We implement industry-standard security measures to protect your information:

• HTTPS encryption for all data in transit
• Secure OAuth 2.0 authentication flow
• HTTP-only cookies for session management
• No server-side storage of sensitive project data

8. Your Rights

You have the following rights regarding your data:

• Access: You can access all your project data in your Google Drive
• Export: Download your projects as JSON files directly from Google Drive
• Delete: Delete projects from the app (removes from local storage and Google Drive)
• Account Deletion: Request account deletion by contacting us
• Revoke Access: Revoke FieldPins access to Google Drive from your Google Account settings

9. Data Retention

We retain minimal profile data (user ID, subscription status) for as long as your account is active. Your project data in Google Drive is retained according to your own preferences and Google's policies. Local browser data persists until you clear it or uninstall the app.

10. Children's Privacy

FieldPins is not intended for use by children under 13 years of age. We do not knowingly collect information from children under 13.

11. International Data Transfers

Your data may be processed in various locations depending on where our service providers operate (Supabase, Google, Stripe). We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy. Continued use of FieldPins after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: fieldpins@jnors.eu