Privacy Policy
Last updated: August 12, 2026
This Privacy Policy explains how [Legal entity name] ("RW Fab," "we," "us") collects, uses, and shares information when you use SteelQMS at steelqms.app, including the installable web app (the "Service").
SteelQMS is a business tool. Most information in the Service is entered by a company (our customer) to run its quality management system, and that company controls it.
1. Information we collect
Account information. Your name, email address, role, and login credentials (passwords are handled by our authentication provider; we never see them in plain text).
Workspace content. Information your company enters into its workspace: quality records, documents, projects, equipment and calibration data, personnel records (such as names, job titles, welder qualifications, and training history), uploaded files and photos, notes, and electronic signature events (name, timestamp, and what was signed).
Billing information. Payments are processed by Stripe. We receive subscription status, seat counts, and invoice details; we never store your card numbers.
Usage and log data. Sign-in events, basic device/browser information, notification preferences, and AI feature usage counts. The Service uses cookies and similar browser storage only to keep you signed in and to make the installable app work — not for advertising.
2. A note about employee information
If your employer uses SteelQMS, your employer decides what personnel information is entered (for example, qualification and training records) and who in the workspace can see it. We process that information on your employer's behalf. If you want to access, correct, or delete information about you, start with your workspace admin; we support them in fulfilling those requests.
3. How we use information
We use information to provide and operate the Service; authenticate users and enforce workspace roles and permissions; process subscription payments; send service notifications (in-app, and by email if your workspace enables it); provide support; maintain security, prevent abuse, and audit access; and improve the Service.
AI features. When someone in your workspace uses an optional AI-assisted drafting feature, the relevant record text is sent to our AI service providers to generate the draft. AI features can be turned off by your workspace admin. We do not use your workspace content to train AI models.
We do not sell your personal information, and the Service shows no ads.
4. How we share information
We share information only with:
- Service providers (subprocessors). Cloud hosting, database, storage, and authentication (Lovable Cloud, built on Supabase); payment processing (Stripe); transactional email delivery (Resend, if your workspace enables email); and AI model providers (only when AI features are used). These providers process data only to provide their services to us.
- People your workspace authorizes. Members of your workspace see data according to their role. If your admin invites an external auditor, that auditor gets temporary, view-only access that your admin can revoke.
- Legal and safety. If required by law, or to protect the rights, safety, or security of the Service, our customers, or others.
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.
Each customer's workspace is isolated: one company's data is never visible to another company.
5. Data retention
We retain your information while your workspace is active. If your subscription lapses, your workspace becomes read-only and your data is retained so you can export it or resubscribe — we do not automatically delete it. Retention and disposition of individual quality records inside your workspace are controlled by your company through the Service's retention tools. A workspace admin can request deletion of the workspace and its data by contacting us; we will delete it within a reasonable period, except where we must retain records to meet legal obligations.
6. Security
We use industry-standard measures to protect information, including encryption in transit, database-level tenant isolation (row-level security), role-based access controls, and tamper-evident signature logs. No system is perfectly secure; please use a strong, unique password and remove workspace members who should no longer have access.
7. Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can see and update most account information directly in the Service, and export workspace data using the built-in export tools. For anything else, contact your workspace admin (for workspace content) or us at the address below. We will not discriminate against you for exercising your rights.
8. Children
The Service is a workplace tool and is not directed to children. It is not intended for anyone under 16, and we do not knowingly collect information from them.
9. Where data is processed
The Service is hosted in the United States. If you use it from elsewhere, you understand your information is processed in the United States.
10. Changes to this policy
We may update this policy from time to time. If a change is material, we will give notice through the Service or by email before it takes effect. The "Last updated" date above shows the current version.
11. Contact
Privacy questions or requests: nick@rwfab.com
[Legal entity name], d/b/a SteelQMS