Privacy Policy

Last updated: June 29, 2026

This Privacy Policy explains what information SupersDeck collects, how we use it, how long we keep it, and the safeguards we apply.

Data we collect

We collect building operational data, work orders, staff profiles, GPS timestamps, push notification subscriptions, and payment information.

How we use it

We use this information for building operations management and staff coordination.

Data retention

Operational data is retained while your subscription is active and for one year after cancellation. Payment records are retained in accordance with Stripe's policy.

Third parties

We share data with the following service providers as needed to operate SupersDeck:

Supabase (database)
Stripe (payments)
Twilio (SMS)
Vercel (hosting)

Security & the NY SHIELD Act

In accordance with the NY SHIELD Act, data is encrypted at rest (AES-256) and in transit (TLS).

Breach notification

We will notify affected customers within 72 hours of a confirmed breach.

Contact

For privacy questions, contact us at privacy@borodesk.com.

Note: SupersDeck's emergency and operational notifications are supplementary to a building's required FDNY-mandated posted emergency notices and do not replace them.

SupersDeck is operated by BoroDesk.