Privacy Policy

Privacy Policy

Watchborg Inc. (“Watchborg”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and safeguard your personal information when you use the Watchborg platform, including our mobile applications (iOS and Android), web-based recording interface, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Authentication credentials (managed securely through Google OAuth and our authentication provider. Watchborg does not store your Google account password.)
• Account preferences and settings

Property and Inspection Data

When you use the Service, we collect:

• Property details you provide (address, name, section definitions)
• Video recordings captured during inspections
• Images uploaded as part of property documentation
• Inspection metadata (timestamps, section progress, completion status)

Billing Information

When you purchase credits or subscriptions, we collect:

• Payment method details (processed securely by our payment providers; we do not store full card numbers)
• Transaction records (amounts, dates, credit quantities)
• Billing account identifiers

Technical Information

We automatically collect:

• Device type, operating system, and browser version
• IP address
• Usage patterns and feature interactions
• Error logs and performance data

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process inspections and deliver recordings to designated recipients
• Process payments and manage your credit balance
• Send transactional communications (inspection notifications, receipts)
• Provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your inspection videos or property data for advertising purposes.

3. Google API Services & YouTube Data

Data Accessed

When you sign in to Watchborg using your Google account or connect your YouTube account, we may access the following Google user data:

• Email address associated with your Google account
• Display name associated with your Google account
• OAuth authorization allowing Watchborg to upload videos to your YouTube channel on your behalf using the YouTube Data API. Videos uploaded by Watchborg are created with a visibility setting of either Private or Unlisted.

Watchborg requests only the following Google OAuth scopes:

• openid
• email
• profile
• https://www.googleapis.com/auth/youtube.upload

We do not access your Google contacts, Google Drive files, browsing history, or any other Google data beyond what is listed above.

Data Usage

Watchborg uses your Google user data solely for the following purposes:

• Authentication: Your Google email address and profile name are used to create and identify your Watchborg account and to authenticate your sessions.
• YouTube Video Delivery: When you explicitly request it, Watchborg uses your authorized YouTube access to upload completed inspection videos to your YouTube account using the YouTube Data API. Uploaded videos are created with a visibility setting of Private or Unlisted and are not made publicly visible unless you later change their visibility in YouTube. This upload occurs only at your direction. Users maintain control over sharing permissions and may choose to share videos with inspection recipients or change visibility settings through their YouTube account separately.
• Account Communications: Your email address may be used to send transactional notifications related to your account, such as inspection completion confirmations or billing receipts.

We do not sell Google user data, use it for advertising, create user profiles for advertising purposes, or use Google user data to train generalized AI or machine learning models.

Data Sharing

Watchborg does not sell, rent, or trade your Google user data to any third party.

Your Google user data may be shared only with the following categories of service providers, solely to operate the Services:

• Authentication and Database Provider (Supabase): Your email address and profile name are stored in our authentication and database system to manage your account and sessions. Supabase acts as a data processor on our behalf.
• Payment Processor (Stripe): Your email address may be shared with Stripe solely to associate payment transactions with your account. Stripe processes this data under its own privacy policy.
• Cloud Infrastructure (Google Cloud Platform): Your data is hosted on Google Cloud Platform infrastructure in the United States. GCP acts as a data processor under its Data Processing Terms.
• YouTube (Google): When you authorize video uploads, your inspection videos are uploaded to YouTube via the YouTube Data API. Once uploaded, those videos are governed by the YouTube Terms of Service and Google’s Privacy Policy.

We do not share your Google user data with data brokers, advertisers, analytics companies, or any other third party not listed above.

Data Storage and Protection

Watchborg implements the following measures to protect your Google user data:

• Encryption in Transit: All data transmitted between your device, our servers, and third-party services is encrypted using TLS (HTTPS).
• Encryption at Rest: Data stored in our database and cloud storage systems is encrypted at rest using industry-standard encryption provided by our infrastructure providers (Google Cloud Platform and Supabase).
• Access Controls: Access to user data within our systems is restricted to authorized services and personnel on a need-to-know basis. Authentication tokens and API keys are stored securely and never exposed to client applications.
• OAuth Token Security: Google OAuth refresh tokens are stored securely in our authentication provider (Supabase Auth) and are never exposed to client-side code or logged in plain text.
• Infrastructure Security: Our backend services run on Google Cloud Run with managed security patching, network isolation, and audit logging.

We do not store your Google account password. Authentication is handled entirely through Google’s OAuth 2.0 protocol.

Data Retention and Deletion

Retention:

• Your Google email address and profile name are retained for as long as your Watchborg account remains active.
• OAuth access tokens are short-lived and refreshed as needed. Refresh tokens are retained only while your account is active and your YouTube access remains connected.
• Uploaded inspection videos are temporarily stored during processing and are deleted from Watchborg systems after successful upload to YouTube.

Deletion:

• Account Deletion: You may delete your Watchborg account at any time through the mobile application (Settings > Delete Account). Deleting your account permanently removes your Google profile information, OAuth credentials, inspection records, and other personal account data from Watchborg systems, except where retention is required by applicable law (such as financial transaction records).
• Deletion Requests: You may also request deletion of your data by contacting support@watchborg.com. We will process deletion requests within 30 days.
• Residual Data: After account deletion, limited anonymized records (such as aggregate billing totals) may be retained solely for legal, accounting, or fraud prevention purposes, as required by law. These records do not contain identifiable Google user data.

Disconnecting Google Account

Users may disconnect their Google account at any time from within the Watchborg application or by revoking Watchborg’s access through their Google Account Permissions page.

Once disconnected, Watchborg immediately loses access to future Google API data. Previously stored account information is handled according to this Privacy Policy.

YouTube API Terms

By connecting a YouTube account, users also agree to be bound by the YouTube Terms of Service.

Google user data is also subject to Google’s Privacy Policy.

4. Data Sharing

We share your information only in the following circumstances:

• Service Providers — We use third-party services for hosting, payment processing, authentication, and video processing/delivery.
• Inspection Recipients — When you send an inspection, the designated recipient receives access to the inspection recording and associated property information you have chosen to share.
• Legal Requirements — We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

Watchborg is a temporary processing platform. We retain your data according to the following principles:

• Account data — Retained for the duration of your active account. Deleted upon account deletion, subject to legal retention requirements.
• Inspection videos — Stored temporarily during processing and delivery. Not retained permanently after successful delivery. See our Data Retention Policy for specific timelines.
• Billing records — Retained as required by applicable tax and financial reporting laws.
• Metadata — Inspection IDs, timestamps, and transaction records may be retained for audit and support purposes.

For full details on our data retention practices, please review our Data Retention Policy.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete information.
• Deletion — Request deletion of your personal information, subject to legal retention obligations.
• Portability — Request your data in a structured, machine-readable format.
• Restriction — Request restriction of processing in certain circumstances.
• Objection — Object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@watchborg.com. We will respond to verified requests within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential cookies — Required for authentication, security, and basic service functionality. These cannot be disabled.
• Analytics — We may use analytics tools to understand how the Service is used and to improve performance. Analytics data is aggregated and not used to identify individual users.

We do not use advertising cookies or cross-site tracking technologies. We do not participate in ad networks or sell data to advertisers.

8. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure authentication with industry-standard protocols
• Access controls limiting data access to authorized personnel
• Regular security assessments

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children’s Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, by email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Watchborg Inc.
Email: support@watchborg.com