Your business data.

Your workspace

The app stores your verified account identifier, business settings, products, pricing, customers, quotes, invoices, recorded payments, sharing activity, and notification email preferences. Each signed-in business has a separate record namespace. The app does not collect card numbers or process payments.

Sign-in and invitations

Supabase provides email-code, Apple, and Google authentication when configured. The server verifies your login before allowing private data access. New businesses require an invitation restricted to their sign-in email. The app administrator can see invitation email addresses, business names, and acceptance status. An invitation creates a separate workspace; it does not give the administrator access to that business's documents through the app. Infrastructure operators may have administrative access to storage.

Cloudflare Access

Cloudflare Access may provide an additional login gate on the primary or a business-specific hostname. Its allow policies are configured separately from the app's account permissions. Customer document links can operate without login only where the hosting policy allows them.

Shared quotes and invoices

Anyone with a valid customer document link can view that saved document's customer details, job location, prices, terms and invoice payment totals. Links expire after 30 days or when revoked. Opening a document records the time and a random per-tab identifier; it does not prove who read it. The business can enable a first-open email alert to its chosen private notification address.

Providers and devices

Cloudflare Workers and D1 host the app and business records. Supabase and the selected identity provider process sign-in information. Resend processes document alerts when connected. Infrastructure providers may retain logs and backups under their policies. The app does not add advertising trackers. Login sessions use server-managed cookies. The installed web app caches a generic offline message without business records.

Export and deletion

Account controls export your workspace data and remove active invoicing records, shared links, events, notification preferences, queued emails, and workspace membership. Redeemed invitation contact details are cleared. A minimal deletion marker remains to block stale requests. This does not delete your Supabase, Apple, or Google login account. Contact support about provider-account removal and any pending invitation details. Copies already downloaded, provider logs, accepted emails and backups are outside immediate active-data deletion. Backup retention and restore procedures must be verified before launch.

Contact

info@dustpods.com is the public support and privacy contact.