Privacy Policy

1. Introduction

Slate Canyon Technology LLC ("we", "us", or "our") operates RunSheet Pro. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Our Privacy-First Approach

RunSheet Pro is designed with privacy at its core. We are a transportation scheduling platform, not a medical records system.

• ✓We store only the minimum information necessary to coordinate transportation — a resident's name, appointment, destination/provider, and driver assignment. Because this identifies a resident together with their care, we treat it as protected health information (PHI) and handle it as a HIPAA Business Associate
• ✓We host PHI on HIPAA-covered Google Cloud infrastructure under a signed Business Associate Agreement (BAA), encrypted in transit and at rest
• ✓We sign a Business Associate Agreement with every facility we serve
• ✓The Service is not designed to store medical diagnoses, treatment details, or clinical records
• ✓We do not sell your data to third parties
• ✓We do not serve advertisements

3. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile photo. This is used to identify you within the Service and manage your account.

Organization Data

Organization administrators enter information necessary for transportation scheduling:

• Organization name and address
• Resident/patient names and room locations
• Driver names, phone numbers, and vehicle information
• Medical provider names and addresses
• Appointment dates, times, and transportation details

Location Data

With driver consent, we collect real-time location data from drivers' devices during active transportation. This data is used for real-time dispatch tracking and is not retained beyond the active session. Location tracking can be disabled at any time.

Usage Data

We collect anonymized usage analytics and error reports to improve the Service. This includes page views, feature usage patterns, and technical error data. We use Sentry for error monitoring, which may collect browser type, operating system, and device information when errors occur.

4. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Authenticate users and manage organization access
• Enable transportation scheduling and real-time dispatch tracking
• Generate reports and compliance documents
• Process subscription payments through Stripe
• Send transactional communications (account notifications, billing)
• Diagnose technical issues and improve the Service

5. Data Sharing

We share your information only with the following third parties, solely to operate the Service:

• Google Firebase — Authentication, database, and file storage. Data is stored in Google Cloud's US data centers. Firebase Privacy Policy
• Stripe — Payment processing. We do not store credit card numbers; Stripe handles all payment data. Stripe Privacy Policy
• Sentry — Error monitoring and performance tracking. Collects technical error data to help us fix bugs. Sentry Privacy Policy
• Vercel — Application hosting. Vercel Privacy Policy

We will not sell, rent, or share your data with any other third parties except as required by law (e.g., in response to a valid subpoena or court order).

6. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS/HTTPS)
• Data at rest is encrypted using Google Cloud's default encryption
• Access to organization data is restricted by role-based permissions
• Authentication is handled through Google's OAuth 2.0 infrastructure
• Firestore security rules enforce data isolation between organizations

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account or subscription is active. Appointment and activity data is retained to support reporting and compliance needs.

Upon subscription cancellation, data is retained for 30 days to allow for re-activation. After 30 days, data may be permanently deleted.

Demo accounts and their associated data are automatically deleted after 7 days.

8. Your Rights

You have the right to:

• Access your data through the Service's reporting and export features
• Correct inaccurate data through the Service's editing tools
• Delete your data by contacting us or canceling your subscription
• Export your data using the Service's PDF and CSV export features
• Opt out of location tracking by disabling it in your device settings

To exercise any of these rights, contact us at support@runsheetpro.com.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, and the right to request deletion of your personal information. We do not sell personal information.

To exercise your CCPA rights, contact us at support@runsheetpro.com.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: