Your information

Privacy Policy

StarS.H.A.R.K. is a private workspace for internal property-management operations.

Effective date: October 28, 2026

1. Information we handle

Depending on your role and how your organization uses the app, information may include:

• Account information, including your email address, account identifier, membership, assigned properties and role.
• Property and business records, including building addresses, tenant and vendor names, contact names, phone numbers, email addresses and operational notes.
• HVAC equipment details, service entries, maintenance dates, equipment identifiers, maps, photographs and uploaded documents.
• Sensitive property-access information, such as alarm and other access codes, available only through authorized features.
• Operational audit records, such as who performed an action, which property or record was involved and when it occurred.
• Device-local preferences, such as appearance, favorites, recent buildings and a limited offline snapshot.
• Technical information needed to operate and protect the services, such as IP addresses, request times, device or browser information and service error records.

Records are supplied by authorized users and their organization. Please upload only information you are authorized to use and avoid unnecessary personal or sensitive information in notes and documents.

2. How information is used

Information is used to authenticate individual users, enforce workspace permissions, display property records, support field maintenance, process authorized updates and imports, provide support, maintain audit records, and protect the service against misuse. We do not use workspace records for advertising, sell personal information or use it for cross-app advertising tracking.

3. Accounts and access controls

Access is by authorized invitation only. Your organization decides who can access its workspace and which actions each role permits. Administrators, technicians and assigned viewers can have different permissions. Sensitive access-code viewing is permission-controlled and audited. This website has no public account-registration form and provides no access to app records.

4. Service providers and disclosures

The mobile app uses Clerk for authentication and Supabase for database, file-storage and server-function services. This website is prepared for hosting on Cloudflare Pages. These providers process information needed to deliver their services. Provider infrastructure may process information outside your state or country.

Information may be available to authorized members of your organization, service providers supporting the app, or others when required by law or reasonably necessary to protect people, enforce rights or address security incidents. Information you deliberately export, copy or share is handled by the destination app or recipient under their own practices. If you email support, your message and contact information are processed to respond to your request.

5. Website privacy

This static website does not include analytics, advertising trackers, account forms or app-backend connections. Its JavaScript only updates the copyright year. It does not set cookies or store visitor information in browser storage. When hosted, Cloudflare may process connection and security information, including IP addresses and request information, to deliver and protect the website. Following an email link opens your chosen mail application. External services have their own privacy practices.

6. Device storage and permissions

On iOS, authentication tokens are stored through the operating system's secure storage. The app may store preferences and a limited snapshot of previously authorized property, contact and equipment information locally for up to 24 hours to support offline viewing. This snapshot does not persist access codes, private file URLs, document metadata, free-text notes, roles, service history or audit records. Signing out clears the data snapshot; favorite and recent-building identifiers may remain on the device. Local preference and snapshot storage is distinct from secure token storage.

Offline information may remain visible until the snapshot expires or the device reconnects and updates authorization. Removing access remotely cannot immediately erase a disconnected device. Protect your device with a passcode and notify your administrator promptly if it is lost.

Photo-library access is used when you choose photos to upload. File selection and sharing use device interfaces. You can decline or manage permissions in device settings. Content you choose to share may leave the app's controls.

7. Retention and deletion

Your organization retains workspace records according to its operational, security and legal needs. Account information is retained as needed to manage authorized access. Audit records may need to be retained after an account or operational record is removed. Deletion from active systems may not immediately remove copies in backups or records subject to legal retention requirements; those copies remain subject to provider retention processes and access restrictions.

To request account closure, correction or deletion, contact your administrator or support@starsharkapp.com. We may verify your identity and coordinate with your organization before acting. Removal of an account does not necessarily remove business records your organization must keep. Do not send passwords, sign-in codes, access codes or confidential tenant documents in an initial support request.

8. Security

The app uses authenticated connections, server-enforced permissions, private file storage and protected handling of access codes. No system can guarantee absolute security. Keep your sign-in codes private, use a secured device and report suspected unauthorized access to your administrator and support.

9. Your choices and rights

You can ask about information associated with you and request access, correction or deletion. Depending on applicable law and the relationship with your organization, you may also have rights to restrict or object to processing, receive a copy, or complain to a privacy regulator. Some requests must be handled by your organization or may be limited by legal, security or recordkeeping requirements. Use the contact below to make a request.

10. Children

StarS.H.A.R.K. is intended for authorized adult personnel and is not directed to children under 13. If you believe a child has provided account information, contact support so the situation can be reviewed and addressed.

11. Beta testing and third-party services

If you use a TestFlight version, Apple may collect beta testing information, including crash and feedback information, under its own terms and privacy notices. Other apps you open for email, maps, document viewing or sharing operate under their own policies.

12. Changes and contact

We may update this policy when the service or its practices change. The effective date above identifies the current version. Material changes will be communicated through an appropriate channel, such as the app, your administrator or email.

Privacy and support: support@starsharkapp.com. You can also contact the property-management organization that invited you to the workspace.