Privacy Policy

1. Introduction

HyperFab (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at weldx.ai and our mobile applications (collectively, the “Service”).

2. Information We Collect

Information You Provide

• Account information (name, email address, phone number, company name)
• Employee/welder information (names, phone numbers, certifications, union affiliations)
• Job and dispatch data (locations, dates, work descriptions)
• Timecard data (hours worked, signatures, work descriptions)
• Invoice and billing data (contractor information, amounts, payment details)
• Compliance documents (welding procedures, certifications, safety records)
• Pipeline and CRM data (prospects, contacts, notes)

Information Collected Automatically

• Device information (type, operating system, browser)
• Usage data (pages visited, features used, time spent)
• IP address and approximate location
• Error logs and performance data
• Push notification tokens (mobile app only)

Payment Information

Payment processing is handled by Stripe, Inc. We do not store credit card numbers or bank account details on our servers. Stripe's privacy policy governs payment data handling.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process dispatches, timecards, and invoices
• Send notifications about dispatches, timecard approvals, and account updates
• Process subscription payments
• Respond to support requests
• Monitor and analyze usage to improve the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate (Supabase for database hosting, Stripe for payments, Vercel for hosting, Sentry for error monitoring, Expo for mobile push notifications)
• Within Your Organization: Data is shared among members of your tenant/organization as configured by your administrator
• Legal Requirements: When required by law, court order, or governmental regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for stored data
• Row-level security policies ensuring tenant data isolation
• Regular security audits and monitoring
• Access controls and authentication requirements

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for 30 days before permanent deletion. Compliance-related documents may be retained longer as required by law or industry regulations.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to processing of your data
• Withdraw consent where applicable

To exercise these rights, contact us at privacy@weldx.ai

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Cookies and Tracking

We use essential cookies for authentication and session management. We use Sentry for error tracking and performance monitoring. We do not use advertising cookies or third-party tracking pixels.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Last updated” date at the top indicates the most recent revision.

12. Contact Us

For privacy-related questions or requests: