Privacy policy

Effective October 26, 2026. This policy explains the information Facilory processes when organizations and their team members use its facility operations software.

Information we collect

When you register or use Facilory, we process your name, email address, authentication information, company membership and role, buildings and rooms, work orders and assignments, inspections and checklist responses, recurring maintenance, equipment information, optional maintenance photographs, comments, and related activity records. Public QR reporting forms may collect an optional contact email and a description of a problem without an account. Support requests contain the information you provide in the support form.

How we use information

We use it to authenticate users, maintain company workspaces, assign and verify work, provide customer support, prevent misuse, process subscription payments, improve site stability, and provide the requested features.

Access and sharing

Authorized members of your company can see operational records according to their permissions. Public QR reports may be shared with the relevant company’s authorized users. Facilory uses service providers, including Supabase for database and authentication, Vercel for website hosting and analytics, and Stripe for subscription billing. Card details are handled by Stripe, rather than stored directly in Facilory’s database. Provider policies also apply to their processing.

Analytics and site data

We use Vercel Web Analytics and Speed Insights to understand site traffic and performance. Facilory attempts to remove sensitive invitation tokens and query parameters before reporting page URLs. Necessary browser storage is used for sign-in sessions and limited device-local drafts.

Advertising

Some public information pages on Facilory may display advertisements served by Google AdSense. Google and its third-party advertising partners may place and read cookies or use web beacons, IP addresses, and similar identifiers in connection with serving, measuring, and personalizing ads. The technologies used can depend on your settings, location, and applicable consent requirements. Learn how Google uses data when you use partner sites, and review or change ad-personalization choices in Google Ads Settings. You can also manage cookies through your browser settings.

Retention and security

Records are kept while needed to provide the service, support a company's operation, address account requests, or meet legitimate security and legal needs. Some backups and transaction records may be retained after deletion for a limited period. We apply access controls and account authentication, but no online system can guarantee absolute security.

Your choices and requests

Company administrators can manage company members and certain records. Individuals can request access, corrections, or deletion by submitting a support and privacy request. We may need to verify the request and preserve shared organization records where appropriate.

Changes

We may update this policy as the service changes and will publish a new effective date here. Do not enter sensitive medical data, children's personal information, or payment-card details into operational reports.