Privacy
Privacy summary
PartPact is built to keep job files, addresses, payments, and helper records separate. This page is a plain-English summary and must be reviewed before public launch.
- Supabase stores account data, profiles, job records, private file metadata, and app database records.
- Vercel hosts the website and runs the server-side app code.
- Stripe handles card payments. PartPact does not store card numbers, CVC codes, or card expiry dates.
- Shippo may receive delivery address details when PartPact estimates postage or checks shipping information.
- Postcodes entered into postcode lookup are sent to postcodes.io so the app can validate and format UK postcodes.
- Public quote STL files are read temporarily to calculate an estimate and are not saved unless you sign in and create a job draft.
- Private job files, helper test images, proof photos, and postage proof files are stored in private Supabase buckets with short-lived signed access links.
- Buyer addresses are kept separate from general job details and are released to the correct helper only after proof approval.
- Do not include passwords, secret project names, or private notes in uploaded filenames.
Data retention
- Uploaded models and reference files should be kept only while needed for the job, support, records, or a lawful retention reason.
- Proof photos and postage proof should be kept while the job, dispute, accounting, or safety record may still be needed.
- Delivery addresses should be retained only as long as needed for fulfilment, support, records, or legal obligations.
- Audit logs are retained for security, fraud prevention, and operational records and should not contain raw file paths or payment instrument details.
- Final production retention periods must be confirmed before public launch.