Privacy Policy

Overview

This policy describes what data Bearing Systems LLC ("Bearing", "we") collects, why we collect it, and how you can control it. It applies to the Bearing web application and this website. Bearing Systems LLC is the controller of the personal data described here.

Data We Collect

Account data: your name, work email, company name, and authentication identifiers when you create an account, and, for field members, an optional mobile phone number, entered by the member and used by their company to reach them.

Project data: the schedules, budgets, documents, photos, and related records that you and your team create in the product.

Usage data: counts of which features are opened, and error reports. Inside the product these are counters only — no project data and no text you have typed — and you can switch them off in Settings.

How We Use Data

We use your data to operate the service, sync your projects across devices and teammates, process payments, provide support, and improve Bearing. We do not sell your data, and we do not use your project data for advertising.

Where Data Lives

Bearing is local-first: a working copy of your project data is stored in your browser (IndexedDB) so the product works offline. When connected, data syncs to Google Firebase (Firestore, Authentication, Storage) on Google Cloud infrastructure.

Payments are processed by Stripe; card numbers never touch our servers. When you use AI features, the relevant content is sent to Google's Gemini API to generate the response.

Crash reports go to Sentry, with project data stripped out before they are sent. Traffic measurement for this public website is provided by Cloudflare Web Analytics, which sets no cookies and builds no profile of you across sites; Web Analytics does not run inside the signed-in application. When an account is created, we store a short record with Cloudflare, on our behalf, holding only the date, the sign-up method (for example, email and password, or Google) and the domain of the email address (for example, gmail.com or your company's domain), never the address itself or the account id. We use it to count new accounts and see which companies sign up; it cannot be switched off in Settings, is not removed when an account is deleted, and expires automatically after 90 days. Outbound email — invitations, portal links, and notifications — is delivered through Resend.

Retention & Deletion

Your data is retained while your account is active. To delete your account and its associated data, email [email protected] and we will complete the deletion within 30 days.

Security

Data is encrypted in transit (TLS) and at rest on Google Cloud. Access within workspaces is controlled by role-based permissions.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Depending on where you live (for example, the EU/EEA under GDPR or California under CCPA), you may have additional statutory rights; contact us to exercise them.

Changes & Contact

We will post any changes to this policy on this page and update the date above. Questions: [email protected]. Written inquiries and data-protection requests may also be sent to Bearing Systems LLC, 8401 Mayland Dr, Ste A, Richmond, VA 23294, USA.