Privacy Policy

AquaOps stores information needed to operate the platform, including account details, organization and location data, chemical and maintenance records, compliance records, uploaded evidence, audit history, and support communications.

We also receive technical information needed to secure and run the service, such as authentication events, session/device metadata, and product analytics used to understand feature usage and diagnose failures.

We use collected information to provide the service, authenticate users, enforce permissions, route records to the correct organization, send operational notifications, respond to support requests, and improve product reliability.

We do not sell customer data. We may use aggregated or de-identified information to understand system performance, feature adoption, and overall product needs, provided it cannot reasonably identify your organization or end users.

We share information only with service providers needed to run AquaOps, and only to the extent necessary for them to perform those services on our behalf: Clerk (authentication and session management), Supabase (database and file storage), Vercel (application hosting and web analytics), Resend (transactional email delivery), PostHog (product usage analytics), and Google Maps Platform (address autocomplete for location setup).

We may also disclose information when required by law, to protect the rights or safety of customers or the public, or in connection with a merger, acquisition, financing, or asset sale involving the business.

Operational and compliance records may need to be retained for audit, incident review, or regulatory history, so we retain data for as long as reasonably necessary to provide the service and satisfy legal or contractual obligations.

We use administrative, technical, and organizational safeguards intended to protect information, but no internet service can guarantee absolute security. If you believe your account or data has been exposed, contact us promptly.