Privacy Policy

What this app is

Elevators is a service logbook for elevator mechanics, operated by the Elevators app team. Teams record the buildings and units they service and what happened on each visit, so the next mechanic arrives knowing the equipment.

This policy describes what the app collects, where it goes, and what you can do about it.

What we collect

Your email address. It is the only account identifier; there are no passwords. We use it to send sign-in codes, team invitations, role-change notices, and, when a building in the building portal is set up for you or shared with you, a note saying so.

What you and your teammates log: buildings (name, address, notes, machine room locations, access instructions, and building contacts you enter, which may include other people's names and phone numbers), units and their specifications and serial numbers, and service visits (type, problem, cause, resolution, fault codes, parts, tools, notes, how the unit was left, and a test or inspection result).

If you own a building we set up for you in the building portal: the building's name and address, and your email address as its owner, entered by our staff; and the email addresses of the people you add to it.

Jobs on a building in the building portal: what the job is and any details the building's people enter. Reports a technician posts through a job's link: their note, whether the job is in progress or done, and when, linked to their account.

Photos you take or choose to attach to a unit or a visit.

If you use "Tell me what you did" on a visit, the note you dictate or type. It is used once, to fill in that visit's form, and is not stored by us: only the answers you check and save become part of the visit. Dictation itself is done by your phone's keyboard, under its maker's terms.

Files you upload to your personal library, such as equipment manuals and wiring diagrams, with the names, folders, and tags you give them.

Location, only while the app is open and never in the background. Kept with your team's records: a building's pin, from the address you pick or from "Use my location", and, if you turn on "Attach my location" when logging a visit, one fix taken when you save. The position your browser shares to sort your buildings by distance stays in your browser. If you have already allowed location, your approximate position is sent along while you type an address, so suggestions start near you; it is not stored.

If you email us for support: your message and the address you send it from, used to answer you.

Technical data needed to run the service: the time of sign-in requests, request logs with method, path, status and timing, and rate-limit counters keyed by a truncated hash of your network address.

Page-view statistics through Vercel Web Analytics: which pages are opened, the referring site, and your browser, operating system, device type, and approximate location, collected without cookies. We do not use advertising trackers.

Where it is stored

In your browser: the cookie that keeps you signed in, a cookie with your time zone (for example America/Los_Angeles), which the server reads to show times in your own time and does not store, whether you last signed in as a building owner or a technician, the list of buildings you opened recently, and the appearance (Day, Night or Auto, and a colour) you choose in Settings. Copies of the pages you open, and of the units and Log visit forms those pages link to, are kept here too, so they open with no signal; they are deleted when you sign out, delete your account, or another account signs in on this browser. A new visit you save with no signal is also kept in this browser until it sends or you discard it; it stays there if you sign out, and only your account can send it. Clearing this site's data in your browser removes all of it.

On our servers: records in a PostgreSQL database hosted by Supabase; photos and library files in Amazon S3; the app runs on Vercel, which also provides the page-view statistics. Emails are sent through Resend. These providers process data on our behalf and do not use it for their own purposes.

A note you write with "Tell me what you did" is sent to Anthropic, with your team's recent fault codes, parts, and tools, to suggest the visit's answers. Anthropic processes it on our behalf, does not use it to train its models, and may keep it for a limited time for safety and abuse monitoring.

Addresses you type into a building's address field, with your approximate position when you have shared it, are sent to Mapbox to suggest matching addresses and to place the building's pin.

Who can see it

Everyone on the same team sees everything logged under that team, including who logged each visit (by email address). Different teams never see each other's data, even for the same building.

A building in the building portal is visible to the email address registered as its owner, to the people the owner adds (who see the owner's and each other's email addresses), and to our staff who manage the portal. It is separate from the mechanics' records: owners never see a team's buildings, units, or visits, and teams never see the portal.

A job's details are visible to the building's people and to anyone signed in who opens the job's link. Reports posted through a job's link are visible to the building's owner, the people they added, and our staff, with the email address of the technician who posted each one; a technician sees their own reports, not other technicians'.

Your library is visible only to you. It is not shared with your teams, and it stays yours when you join or leave one.

Photos and library files are private objects; the app fetches them with short-lived signed links.

We do not sell personal data and do not share it with third parties other than the processors above, or when required by law.

Teams and leaving

Records belong to the team, not to the person who logged them. If you leave a team or a team removes you, what you logged stays with that team. Team owners and admins can export a team's data.

Your choices

Permissions: your browser asks before it shares your location, first when the building list sorts by distance, and you can change that in the browser's site settings. The camera and photo library open only when you choose to add a photo. The app works without any of them.

Deleting your account removes your personal team's records and your library, revokes your sessions, and anonymizes your identity. Records you logged on company teams remain with those teams, no longer linked to your email. A building set up for you in the building portal stays, no longer linked to your email, and your email is taken off any building someone else added you to. Reports you posted through a job's link stay with that building, no longer linked to your email.

Questions or requests: contact us through the Support page linked from Settings.

Retention

Records stay until deleted by a team member with permission or until the team is deleted. Sign-in codes expire after ten minutes; sessions after thirty days. A visit kept in your browser because it was saved with no signal is removed from the browser once it sends or you discard it. A saved copy of a page is replaced each time you open the page with signal, and deleted after thirty days, or sooner when you sign out, delete your account, or another account signs in on this browser.

Changes

When a feature changes what the app collects, this policy is updated in the same release, and the date above changes.