Privacy Policy

Effective: September 8, 2026Last updated: September 8, 2026

What Steadwerk collects, why, who else sees it, and how long we keep it. Written to be read, not to be skipped.

Who this covers

Steadwerk is warehouse and fleet software sold to companies. Almost everyone who uses it does so because their employer bought it, not because they signed up themselves.

That shapes this whole page. Your employer decides who gets an account, what role you hold, and what happens to your records when you leave. They control the data in their account. We hold it for them and run the service.

If you are an employee with a question about your own records, your company administrator can answer it faster than we can. If you are the company, this page describes what we do with what you put in.

What we collect

Everything below is either something you type in or something the app records as you work.

Your account. Name, work email, the role your administrator gave you, and which company you belong to. A mobile number, only if you add one so the app can reach you about alerts.
Sign-in. Your password, stored only as a cryptographic hash that cannot be reversed back into the password. If you turn on two-factor authentication, the secret for your authenticator app.
Work records. Jobs, purchase order numbers, job site addresses, schedules, contract values, notes, inventory items and counts, suppliers and prices, vehicles, trailers, mileage, service history, maintenance requests, and inspections.
Photos and files. Job before and after photos, vehicle and product photos, inspection and maintenance photos, chat attachments, training media, and your company logo.
Team chat. Messages you send inside the app, their attachments, and which messages you have read.
Activity history. An audit trail of actions taken in your company account: what changed, who changed it, and when. This exists so an inventory or cost discrepancy can be traced. See section 07 for how long it is kept.
Billing. Your plan, seat count, and subscription status. Card details go straight to Stripe and never reach our servers or our database.
Crash diagnostics, performance data, and masked session replay. When the app or one of our servers hits a bug, the error message, a stack trace, and basic technical details (browser or app version, operating system) go to Sentry, our error-monitoring service, so we can find and fix it. The web app also sends Sentry performance timing (how long pages and requests take) and, for a sample of sessions, a session replay: a recording of layout and interaction with every piece of on-screen text masked and every image and video blocked before it ever leaves your browser. A replay shows what you clicked and how the app responded — not the job costs, customer names, or pricing that were on screen. See "Companies we rely on" below.

What we do not collect

Stated plainly, because these are the things people reasonably assume software like this does.

We do not track your location. The app shows weather for a fixed set of coordinates your company configures. It never reads your device location, and there is no GPS, geofencing, or crew tracking anywhere in the product.
We run no analytics or advertising. There is no Google Analytics, no Meta pixel, no Segment, Mixpanel, Amplitude, or Hotjar. No third party builds a marketing or advertising profile of you from your visit, because no such third party is loaded. (Error monitoring is different and is disclosed separately — see "Companies we rely on." It exists to catch bugs and slow performance, not to profile you, and its session replay masks all on-screen text and blocks all images before anything is sent.)
We do not use advertising cookies. The app stores only what it needs to work: your session, your language and theme choice, and your email address if you ticked the box asking it to be remembered.
We do not sell or rent personal information, and we do not share it for advertising.
The camera and photo library are only opened when you tap to add a photo. Nothing is captured in the background.

Cookies & local storage

Steadwerk does not use cookies for tracking or advertising, and does not run a cookie-consent banner, because there is no non-essential cookie to ask consent for. Here is everything actually stored in your browser, and why.

Your sign-in session. So you stay signed in between visits instead of re-entering your password every time you open the app.
Your language and theme choice, and your email address if you ticked "remember me" on the sign-in screen — so the app looks and behaves the way you left it.
Fonts, served by us. The app's typefaces are bundled with the app itself rather than fetched from a third party's servers on every visit, so loading a page does not send your IP address to anyone but us.
Error monitoring, if enabled. If Sentry (see "Companies we rely on") is turned on for this deployment, its SDK keeps a small amount of browser storage of its own to group related events into one session — the same masked, functional-only data described there, never advertising or cross-site tracking.

None of the above identifies you to an outside party or follows you to another website. If a future version of Steadwerk adds anything that would, this section — and a consent mechanism, if the law where you are requires one — gets added first, not after.

How we use it

We use what we hold to run the service you are paying for, and for very little else.

Operating the product: showing your jobs, inventory, fleet and reports, and saving your changes.
Signing you in and keeping other companies out of your account.
Sending you the notifications the app is built to send, such as a job assignment or a maintenance update.
Billing your company and keeping your seat count correct.
Supporting you when you ask us for help, and diagnosing faults when something breaks.
Keeping the audit trail your company relies on to reconcile stock and job costs.

We do not use your business records to train machine learning models, and we do not use them to build a profile of you.

Who can see your data

Every record in Steadwerk belongs to exactly one company, and the database enforces that separation itself rather than trusting the app to remember. One company cannot read another's jobs, inventory, people, or photos.

Inside your company, what you can see depends on the role and permissions your administrator sets.

A small number of Steadwerk staff can access company accounts to provide support, investigate a fault, or keep the service running. That access is recorded, and when a Steadwerk administrator enters a customer account the app displays a visible banner for the duration so it is never invisible to you.

Companies we rely on

Steadwerk is built on services run by other companies. Each one below receives only what it needs to do its job, and none of them are permitted to use your data for their own purposes.

Service	What it does	What it receives
Supabase	Database, sign-in, and file storage	Everything described in section 02
Netlify	Hosting and server functions	Requests made by the app as you use it
Stripe	Subscription payments	Billing contact and card details, entered on Stripe's own page
Resend	Sending email	The recipient's address and the message
Anthropic	The in-app assistant	What you type to it, and the company records it looks up to answer
AccuLynx	Job sync, only if your company connects it	Job and material details your company chooses to send
Open-Meteo	Weather	Only the coordinates your company configured. No personal data.
Sentry	Error monitoring and performance tracing, so we can catch and fix bugs	Error messages, stack traces, basic technical details (browser/app version, OS), page/request timing, and — for a sample of sessions — a masked session replay: every piece of on-screen text and every image/video is blocked before it leaves your browser, so the recording shows layout and clicks, not your data.

Two of these deserve a direct word. If you use the in-app assistant, what you type and the company records it needs to answer are sent to Anthropic to generate the reply. If your company connects AccuLynx, job data flows to AccuLynx under their terms, and that connection is your company's choice to make and to switch off.

How long we keep it

Activity history is deleted after 30 days. A scheduled job removes audit entries older than that, permanently and automatically.
Your work records stay until someone deletes them. Jobs, inventory, vehicles and photos are your company's business records, and we do not remove them on a timer.
Your account lasts as long as your access does. When an administrator removes you, your membership ends and you can no longer sign in.
Your name may remain on work you did. Records such as a stock receipt keep the name of the person who entered them, so history stays readable after they leave. This is deliberate: an inventory trail that says nothing about who received a delivery cannot be reconciled.
When a company closes its account, its data is removed. Some copies may persist briefly in encrypted backups before those expire.

How we protect it

Traffic between your device and Steadwerk is encrypted in transit, and data is encrypted at rest.
Separation between companies is enforced by the database, not only by the app.
Two-factor authentication is available, and once you enable it the app requires it on every sign-in.
Passwords are stored only as hashes. Nobody at Steadwerk can read your password.
Integration keys your company enters are held apart from ordinary settings so that only administrators can reach them.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data we will notify affected companies without undue delay.

Your choices and rights

Depending on where you live, you may have the right to:

See what personal information we hold about you.
Correct it if it is wrong. You can edit your own name, email and phone number in your profile at any time.
Ask for it to be deleted.
Ask for a copy in a portable format.
Object to or restrict certain uses.

Because your employer controls their account, we will usually direct a request about work records to them and help them answer it. Write to us at privacy@steadwerk.com and we will respond within the time your law allows. We will not treat you differently for asking.

The mobile app

The Steadwerk app collects nothing beyond what the website collects. Two things are worth stating.

Camera and photo access. The app asks permission the first time you attach a photo. It is used only at that moment, for that photo. Declining leaves every other part of the app working. You can change your mind later in your device settings.
No purchases in the app. Subscriptions are bought and managed on the Steadwerk website by a company administrator. The app signs you in to an account that already exists.

Children

Steadwerk is a workplace tool for adults and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child has been given an account, contact us and we will remove it.

Where your data is held

Steadwerk is operated from the United States, and the services in section 06 process and store data there. If you use Steadwerk from another country, you are sending your information to the United States, where privacy law differs from your own.

Changes to this policy

When this policy changes we update the date at the top of the page. If a change materially affects how we handle personal information, we will tell affected companies directly rather than relying on you to notice. Continuing to use Steadwerk after a change means you accept the updated policy.

Contact us

Questions about this policy, or about your information, go to:

privacy@steadwerk.com
Steadwerk, Fort Wayne, Indiana, United States

If you are an employee asking about your own work records, your company administrator can usually help you faster.