PointVault Privacy Policy

1. Overview

PointVault ("PointVault," "we," "us") is a field-surveying companion application that lets surveying companies and their crews import, view, search, and selectively share survey point data. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the PointVault web app and the PointVault Android app, both of which use the same service at pointvault.app.

2. Information we collect

Information you provide

• Account information — the email address you sign in with, and (optionally) a password you set. Your account is associated with a company workspace.
• Survey and project data — point coordinates, point IDs, descriptions, job numbers, source file names, status, and similar attributes you import or enter, plus any field notes you add.
• Support communications — information you send us when you contact us for help.

Information collected automatically

• Device location — if you grant permission, the app reads your device's GPS location to center the map on your position ("You Are Here") and to find points near you. Location is used to provide these features; it is not used for advertising and is not sold.
• Diagnostics and crash data — we use Sentry to capture error reports and limited diagnostic information when the app crashes or misbehaves, including a limited session replay that may be recorded around an error, to help us fix problems.
• Usage and device data — basic technical information such as browser/app type and IP address, which is processed by our hosting and map-tile providers to deliver the service.
• Local storage — we store your sign-in session and some preferences (such as theme and default map settings) in your browser/device storage so the app works and remembers your choices.

Payment information

If your company subscribes to a paid plan, payments are processed by Stripe. Your full card details are entered with and held by Stripe; PointVault does not receive or store your full card number.

3. How we use information

• To provide, operate, and maintain the app and your company workspace.
• To authenticate you, including sending sign-in (magic-link) and account emails.
• To display the map, locate you, and surface nearby and shared points.
• To process imports and run de-duplication and community-sharing features.
• To monitor, debug, secure, and improve the service.
• To process subscription billing and send related account/administrative notices.
• To comply with legal obligations and enforce our terms.

4. How information is shared

Community sharing (a core feature you control)

Points you import are private to your company by default. If you choose to share a point to the PointVault community, its coordinates and attributes become viewable by other contributing companies through the app, deduplicated against nearby contributions. Field notes you leave on community points are attributed to your company and user account and are visible to other companies with full community access. Points you do not share remain visible only to your own company.

Service providers

We share information with vendors that operate the service on our behalf, under agreements that limit their use of the data:

• Supabase — authentication, database, and storage (hosts your account and survey data).
• Vercel — web application hosting.
• Fly.io — background import-processing worker.
• Stripe — subscription payment processing.
• Sentry — error and crash diagnostics.
• Resend — transactional and account email delivery.
• Map-tile providers (Esri/ArcGIS, CARTO, and the USGS National Map) — serve basemap imagery; they receive request data such as your IP address and the map area being viewed.

Legal and safety

We may disclose information if required by law or to protect the rights, safety, and security of PointVault, our users, or the public.

No sale of personal information

We do not sell your personal information, and we do not use it for cross-context behavioral advertising.

5. Data retention

We retain account and survey data for as long as your account/company workspace is active or as needed to provide the service. Diagnostic data is retained for a limited period. You may request deletion as described below; note that points already shared to the community and append-only field notes may persist in aggregated community records after your account is closed.

6. Security

We use industry-standard measures including encryption in transit (HTTPS) and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information.

7. Your choices and rights

• Location — you can grant or revoke location permission at any time in your device or browser settings. The app works without location; you simply won't get GPS centering.
• Access, correction, deletion — you may request a copy of your data, corrections, or deletion of your account by contacting us at the address below.
• Marketing — we do not send marketing email; account and sign-in emails are required to use the service.

8. Children

PointVault is a tool for professional surveying work and is not directed to children. We do not knowingly collect personal information from children under 13.

9. Where your data is processed

PointVault is operated in the United States, and your information is processed and stored on servers located in the United States by the providers listed above.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective date" above and, for material changes, provide notice within the app.

11. Contact us

Questions about this policy or your data? Contact us at support@pointvault.app.