Privacy Policy

1. What we collect

Account and billing information: your name, email address, company name, and the payment details you provide at checkout. Card details are collected and processed by Stripe and never touch UniformProof's systems.

Documents you upload: your uniform rental service agreement, addenda, and invoices. These invoices frequently list employee wearer names or identifiers alongside the garments assigned to them.

2. Employee data and pseudonymization

We treat wearer rosters as sensitive. Our loss-rate and inventory analysis requires counts, not identities, so wearer identities are pseudonymized to an internal identifier before analysis wherever the source document permits it.

If you are subject to GDPR, you are the controller of your employees' personal data and UniformProof is a processor. A Data Processing Agreement is available on request at support@uniformproof.com and must be executed before your first upload if this applies to you.

3. How your documents are stored

Uploaded documents are held in a private object store that is not publicly accessible. There are no public URLs; access requires a short-lived signed link generated server-side for a specific file.

Data is encrypted in transit and at rest. Database access is protected by row-level security so that one customer's records are structurally isolated from another's.

4. Who we share it with

We do not sell your data, and we do not share it for advertising.

We never share your documents, findings, or identity with your uniform supplier. We do not contact your supplier at all.

We use a small number of processors to run the service: Stripe (payments), Supabase (database and document storage), and Vercel (application hosting). Each processes data only to provide their service to us.

5. How long we keep it

We retain your documents for 90 days after your audit is delivered so we can answer follow-up questions about the findings. After that period they are deleted.

You may request export or deletion of your entire document set at any time, including immediately after delivery, by emailing support@uniformproof.com. We will action a deletion request within 30 days.

6. Your rights

Depending on where you and your employees are located, you may have rights to access, correct, delete, or port personal data, and to object to or restrict its processing. California residents have rights under the CCPA/CPRA, including the right to know and the right to delete; we do not sell or share personal information as those terms are defined.

To exercise any of these rights, contact support@uniformproof.com. We will not discriminate against you for doing so.

7. Contact

Questions about this policy can be sent to support@uniformproof.com.