Privacy Policy

1. Information We Collect

Steward collects information necessary to manage your organization's inventory. This includes your name and email (provided via Clerk), and any equipment data you manually enter into the system.

2. How We Use Data

Data is used strictly for the operation of the Steward platform:

  • Facilitating check-outs and check-ins.
  • Generating accountability logs for equipment assignments.
  • Providing role-based access to organization assets.

3. Data Security

We prioritize the security of your data. We use industry-standard encryption and rely on trusted infrastructure providers:

  • Authentication: Managed securely by Clerk.
  • Database: Hosted on Neon's secure PostgreSQL platform.
  • Hosting: Secured by Vercel's global infrastructure.
  • Email Delivery: Transactional notifications (checkouts, incidents, overdue reminders) are sent via Resend.
  • Photo Storage: Asset and condition photos are stored via Vercel Blob.

Asset photos are stored at unguessable, randomly-generated URLs rather than behind authentication. Anyone with the exact link to a photo can view it, so please do not upload confidential or sensitive imagery as asset or condition photos.

4. Third-Party Services

We do not sell your data. We only share information with the sub-processors necessary to provide the service (Vercel, Clerk, Neon, Vercel Blob, and Resend).

5. Data Retention

Activity and audit log history is retained according to your organization's plan: 30 days of history on the Starter plan, and unlimited history on the Pro plan. Data older than your plan's retention window may no longer be accessible through the platform.

6. Your Rights

You have the right to access, correct, or delete your data at any time via your Organization's administrator or by contacting Steward support.