Privacy Policy

Nameplate (“the service”) is operated by Valor Automation LLC (“we”, “us”). If you are a contractor using Nameplate, you are our customer. If your details are in a contractor’s Nameplate account because they service your equipment, they are the controller of that record and we process it on their behalf — contact them first, and us at support@valor-automation.com if you cannot reach them.

Three categories, and nothing else:

• Account data. Your name, email address, and a hashed password. We never see your password in readable form.
• Business data you enter. Customers, sites, equipment records, maintenance agreements, visits, checklist readings, photographs, deficiencies, quotes, invoices, and the signatures captured on quotes and visit sign-offs.
• Billing data. Your subscription status and Stripe customer identifier. Card numbers go directly to Stripe and never reach our servers or our database.

We do not run advertising trackers, we do not sell data to anyone, and we do not use your business data to train machine-learning models.

To provide the service you are paying for: storing your equipment history, generating visits from agreements, producing quotes your customers can sign, and billing your subscription. We also use your email address to send transactional messages — invites, quote links, service reports, and notices about your account. These are not marketing emails and cannot be unsubscribed from without closing the account, because they are the product working.

We use a small number of subprocessors. Each one holds data only to perform its function:

• Supabase — database, authentication, and file storage. Data is held in the United States (us-east-2).
• Vercel — application hosting and content delivery.
• Stripe — subscription billing and card processing.
• Resend — delivery of transactional email.

We will update this list before adding a subprocessor that handles customer data.

Every record in Nameplate carries the identifier of the organization that owns it, and access is enforced by row-level security in the database itself rather than by application code. That means a query from one contractor’s account cannot return another contractor’s rows even if the application asked it to. Files — photographs, signatures, reports — are stored privately and served through short-lived signed links.

Captured checklist readings are append-only: once a technician records a measurement it cannot be edited or quietly removed, which is what makes the service history trustworthy as a record.

No system is perfect. If we become aware of a breach affecting your data we will tell you promptly and describe what happened in plain language.

Your data stays for as long as your account is open. If you cancel, we retain it for 30 days so you can change your mind or export it, then delete it. Billing records are kept longer where tax and accounting rules require it. Backups roll off on their own schedule and are not indefinitely retained.

You can view and correct everything in your account directly in the application. Write to support@valor-automation.com to request an export of your data or the deletion of your account, and we will action it. Depending on where you live you may have additional rights over your personal data; we will honour those requests regardless of where you live rather than checking whether we are obliged to.

Nameplate sets one category of cookie: the session cookie that keeps you signed in. There are no advertising or analytics cookies, so there is no consent banner to dismiss.

If this policy changes in a way that materially affects you, we will email account owners before it takes effect rather than silently updating the date at the top.

Valor Automation LLC — support@valor-automation.com. A real person reads it.