Privacy Policy

Who we are

Squared Away is a cloud-based checklist and operations management platform that helps businesses manage recurring tasks, improve accountability, and streamline daily operations.

This Privacy Policy explains how we collect, use, and protect your information when you use our website and services.

What we collect

We collect only what's needed to run the service. Depending on how you use Squared Away, this may include:

• Account information — your email address, name, and a securely hashed password when you sign up.
• Subscription and billing data — your subscription plan, status, and billing period. Payment details (card number, billing address) are handled entirely by Stripe and never touch our servers.
• Checklist and operations data — the checklists, items, schedules, and completion history you create within the app.
• Team data — if you use the Pro plan, staff member accounts, role assignments, and time clock entries.
• Basic visit data — our hosting provider logs standard technical info (browser type, pages visited, approximate region). We use this only to monitor site health.
• Contact messages — if you email us or use the contact form, we receive whatever you choose to share and use it only to respond.

We do not sell, rent, or trade your information. Ever.

How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Squared Away service
• Process your subscription and manage your account
• Authenticate your sessions and keep your account secure
• Respond to your support requests and feedback
• Monitor for abuse and ensure the platform's reliability

We process your information only as necessary to provide the service, fulfill our contractual obligations, comply with legal requirements, and protect the security of the platform.

Cookies and sessions

Squared Away uses cookies that are necessary to run the product securely:

• connect.sid — an HTTP-only session cookie that keeps you logged in. It expires after 7 days and contains only a session identifier — no personal data.
• csrfToken — a non-HTTP-only cookie used to protect forms and API requests against cross-site request forgery. JavaScript in the app reads this cookie only to attach it to authenticated requests.

We do not use advertising cookies. Clearing cookies in your browser will log you out and may require you to sign in again. See our Cookie Policy for details.

Analytics

When analytics is enabled for our marketing site, we use a lightweight first-party analytics beacon (Polsia) that stores a random visitor identifier in your browser's localStorage and loads a tracking pixel. This helps us understand aggregate page visits. It is not used for advertising and does not identify you by name or email.

Authenticated app pages rely on server-side session data for product use; analytics on marketing pages is separate from your account login.

Third-party services

We use a small number of trusted services to operate Squared Away. Each has its own privacy policy:

• Stripe — processes all payments and manages subscriptions. Stripe's privacy policy.
• Vercel — hosts the application and may process standard request information necessary to deliver the service.
• Neon — hosts our PostgreSQL database where account, checklist, and session data are stored.
• Polsia — optional marketing analytics beacon described above (when configured).

We do not sell your personal information.

Data security

We take reasonable measures to protect your information: passwords are hashed with bcrypt (never stored in plain text), sessions use HTTP-only cookies, forms are protected with CSRF tokens, production traffic is encrypted using HTTPS where supported, and access to production systems is restricted.

No system is 100% secure. If you believe your account has been compromised, contact us immediately.

Data retention

We retain your account and checklist data for as long as your account is active. If you cancel your subscription, your data remains accessible during any remaining paid period. You may request full deletion of your account and data at any time by contacting us.

Some billing records may be retained for legal, accounting, or tax purposes where required by law.

Children

Squared Away is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it promptly.

Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to update inaccurate information.
• Deletion — ask us to delete your account and all associated data.

To exercise any of these rights, reach out using the button below.

Changes to this policy

If we change how we handle your data, we'll update this page and change the "last updated" date at the top. Significant changes will be noted clearly.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, we're happy to help.