Privacy Policy

For visitors to our public website, Resalute is the data controller. For data submitted inside the application by a customer organization, that organization is the controller and Resalute acts as a processor on its behalf and under its instructions.

• Account information — name, work email address, organization, assigned role and authentication metadata.
• Operational content — the records your team creates: contracts, compliance items, work orders, assets, inspections, purchase orders, vendors, invoices and related notes and attachments.
• Location data — when a technician uses mobile clock-in/clock-out or completes a field inspection, we record a coarse GPS stamp with the time entry. This is collected only at the moment of the action, not continuously in the background.
• Photos and signatures — images and signature captures uploaded from the field, stored in private, access-controlled storage.
• Push notification subscriptions — browser push endpoints and keys, only if you opt in.
• Billing information — subscription tier, status and billing history. Card details are entered directly with Stripe and never stored on our systems.
• Technical and usage data — page views, feature usage, error reports, IP address, browser and device type. We use this to keep the platform working and to diagnose problems.
• Support communications — messages you send to us and our responses.

• To provide, secure and support the Service.
• To authenticate users and enforce role-based access.
• To send transactional messages such as work order assignments, compliance alerts, emergency notifications and account emails.
• To process subscriptions and payments.
• To monitor performance, detect abuse and investigate errors.
• To meet legal, tax and contractual obligations.

We do not sell personal information, and we do not use customer operational content to train third-party AI models.

We use strictly necessary cookies and local browser storage to keep you signed in, remember preferences and support offline field use. Product analytics are collected in our own database — we do not run third-party advertising trackers or sell audience data.

We share information only with service providers that help us run the platform:

• Cloud hosting, database, authentication and file storage infrastructure.
• Stripe, for subscription billing and payment processing.
• Our email delivery infrastructure, for transactional and account email.
• Push notification delivery services provided by the user's browser vendor.

We may also disclose information when required by law, to enforce our terms, or in connection with a merger or acquisition (with notice to affected customers).

Data is encrypted in transit using TLS and at rest by our infrastructure provider. Access to customer records is enforced at the database level with row-level security scoped to each organization, layered with application role checks. Administrative and compliance actions are written to an audit log. Access to production systems is limited to personnel who need it. No system is perfectly secure; we work to remediate issues promptly and will notify affected customers of a confirmed breach without undue delay.

• Operational records are retained for the life of your subscription.
• After termination, customer data is retained for 30 days for export, then deleted.
• Audit and compliance logs may be retained longer where required by contract or law.
• Billing records are retained as required for tax and accounting purposes.

If you are an end user of a customer organization, please direct requests to that organization; we will assist them in responding as their processor. Otherwise, contact us at ops360@resalutecoreservices.com and we will respond within 30 days (extendable by 45 additional days where permitted, with notice).

GDPR / UK GDPR

For website visitors and prospects, Resalute is the controller. For data entered into the application, the customer organization is the controller and Resalute is the processor acting only on documented instructions. Our lawful bases are performance of a contract (providing and billing for the Service), legitimate interests (securing the Service, preventing abuse, improving reliability), consent (marketing communications) and legal obligation (tax and accounting records).

Where GDPR or UK GDPR applies, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete personal data.
• Erasure of personal data where no overriding basis for retention applies.
• Restrict processing while a dispute about accuracy or basis is resolved.
• Data portability in a structured, commonly used, machine-readable format.
• Object to processing based on legitimate interests or to direct marketing.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your supervisory authority (or the UK Information Commissioner’s Office).

CCPA / CPRA (California)

In the preceding 12 months we have collected the following categories of personal information: identifiers (name, email, phone, account ID), commercial information (subscription and billing records), internet or network activity (log, device and usage data), geolocation data where you enable GPS clock-in or field features, and professional or employment-related information (role, employer, work assignments). These are collected from you, your organization and your use of the Service, and are used for the business purposes described in section 3.

We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes beyond those permitted under the CPRA.

California residents have the right to:

• Know the categories and specific pieces of personal information collected.
• Delete personal information, subject to legal and contractual exceptions.
• Correct inaccurate personal information.
• Opt out of sale or sharing (not applicable, as we do neither).
• Limit the use of sensitive personal information.
• Non-discrimination for exercising any of these rights.

You may submit a request yourself or through an authorized agent with written permission and verifiable identity. We verify requests against the account information we hold.

Our infrastructure is operated in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. For transfers of personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (including the UK International Data Transfer Addendum where applicable), together with supplementary technical measures such as encryption in transit and at rest and role-based access controls. A copy of the relevant clauses is available on request.

Much of the data in the Service is processed on behalf of government contractors, federal agencies, and state and local government customers. For that data the customer organization is the controller and remains responsible for its lawful collection and use.

• The Service is not authorized for classified information, ITAR-controlled technical data, or any data requiring an accreditation Resalute has not represented in writing.
• Customers are responsible for determining whether the Service is suitable for Controlled Unclassified Information (CUI) under their contract requirements, and for configuring access controls accordingly.
• We will notify the affected customer organization without undue delay after confirming a security incident involving its data, and will cooperate with contractually required agency notifications.
• We support records-retention and public-records obligations through export, audit-log retention and legal-hold requests submitted to ops360@resalutecoreservices.com.

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

We will post updates to this policy on this page and revise the effective and “last updated” dates. Material changes will be communicated in-app or by email.

Resalute Core Services LLC · Austin, TX
Email: ops360@resalutecoreservices.com
Phone: (254) 599-7015