The short version
This site uses Google Analytics. The application does not use anything. We do not sell your data, we do not advertise to you, and we do not contact your locations. Payment is handled by Stripe, so your card number never reaches us.
The longer version separates the two, because they genuinely are different. superpartner.app is this marketing site, which anybody can read. app.superpartner.app is the application you sign in to. What is measured on one is not measured on the other.
This site, superpartner.app
The marketing page carries Google Analytics 4, measurement id G‑TSQEBFHP9D. It tells us how many people read the page, roughly where in the world they were, and which page they came from. It is there so we know whether writing this site was worth the week it took.
The page you are reading now carries no tag at all, and neither do the other two documents. That is a decision rather than an oversight: the question on the marketing page is whether anybody read it, a privacy policy does not need to report who opened it, and this is the one page where being wrong about what it measures would be worst.
On the marketing page, Google sets its own identifiers in your browser. If you would rather it did not, a tracker blocker or Google's own opt out add on stops it, and nothing on this site breaks without it. These pages have no forms, no logins and no scripts of our own beyond the one that fires those events.
The typefaces come from Google Fonts, which means your browser makes a request to Google to fetch them. That is the only other thing this site loads from anywhere else.
The application, app.superpartner.app
This is deliberate and it is worth saying why. The screens in this software show an operator's takings, his customer list and his commission terms. That is his book of business. Sending a stream of what he clicks on to a third party, so that we could look at a chart, is not a trade worth making.
If you are working with no signal, the collections you post are kept on the device until it can send them, in that same browser storage. They are your entries, waiting, and they go to your own account when the phone finds a network.
The web client loads its typefaces from Google Fonts, as this site does.
What we hold, and why
About you, the operator
Your business name, a handle for it, the name and email address of whoever we deal with, and notes about what was agreed with you, which is the place where "said he would pay after the season" has to live. Alongside that, what you bought and the dates: the plan, the tier, whether you pay monthly or yearly, and the date you are paid through.
About the people on your account
A username, a name, a role, and which routes they work. That is all a user account holds. It does not hold an email address or a phone number. Passwords are stored only as an argon2id hash and cannot be read back, by us or by anybody who took a copy of the database.
About your route
This is the bulk of it, and it is your operating records rather than ours: your locations with their addresses, your contacts at those locations with their names, phone numbers and email addresses, your machines and serials, your vehicles, your collections with their meter readings and the money, your commission terms, and what a location still owes against money you fronted it.
About your payment
The identifiers Stripe gives us for your customer record and your subscription, which plan you are on, whether you pay monthly or yearly, and the date you are paid through. Your name, email and billing address are given to Stripe at its own checkout page and are held by Stripe under its own privacy policy. We never receive a card number, because there is nowhere in this software that takes one: the checkout and the billing portal are both Stripe's pages, not ours.
Who else touches it
- Stripe, for payment and subscriptions, and for calculating tax on the sale. It receives your name, email and billing address.
- Google Analytics, on the marketing page of this site only, and not on these documents and not in the application.
- Google Fonts, which serves the typefaces to your browser on both.
- The company that hosts the servers, which is HOSTING PROVIDER AND REGION.
That is the complete list. There is no email marketing platform, no customer relationship system, no advertising network and no error tracking service in any of this.
Where it is, and for how long
The hosted service runs in the United States. On the self-hosted plan it runs wherever you put it, and none of your operating data reaches us at all; what we know about a self-hosted customer is that he pays us.
Your data stays while your account exists. An account that stops being paid for goes read only rather than being deleted, precisely so that the records are still there.
Asking us for something
Write to support@hyperspacemediagroup.com and ask for a copy of what we hold about you, for something to be corrected, or for your account and its data to be deleted. We will do it, by hand, for the reason above. Where you are asking on behalf of one of your own contacts, you are the person who holds that relationship and we will act on your instruction.
Depending on where you live you may have rights under a state privacy law over and above that. We do not sell personal information and we do not share it for cross context advertising, so the rights that concern selling do not arise.
Children
This is software for running a route. It is not for children and we do not knowingly collect anything from one.
Security, honestly stated
Passwords are hashed with argon2id at the parameters OWASP publishes, the connection is encrypted, sign in is a bearer token rather than a cookie, and the five fields above stay out of ordinary queries. One operator's data cannot be reached from another operator's session, and that is enforced by the layer that issues the queries rather than by each query remembering to ask: a read that does not know which operator it is for fails outright instead of answering with everything.
No one can promise a system cannot be broken into. If anything of yours were exposed we would tell you, and we would tell you what we knew rather than a sentence from a template.
Changes
If this policy changes in a way that matters, we will write to the address on the account rather than quietly editing the page.