Privacy Policy

1. Who We Are

Hairspring is operated by Westmoreland Creative LLC. If you have questions about this policy, contact us at support@westmorelandcreative.com.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• —Email address — used for authentication and account communications
• —Password — stored as a one-way cryptographic hash; we never store your password in plaintext

2.2 Profile Information

You may optionally provide:

• —Display name (shown on your public profile if enabled)
• —Biography
• —Subdomain preference for your public profile page
• —Public/private visibility setting for your profile

2.3 Watch & Repair Data

The core purpose of the Service is to help you track watch repair projects. This includes data you enter about:

• —Watches: make, model, reference number, year of manufacture, serial number, acquisition and sale dates, purchase and sale prices, repair status, condition, hours spent, notes, and listing URLs
• —Photos: images you upload of watches at various repair stages (before, during, after, listing), along with optional captions
• —Repair posts: titled journal entries with rich-text repair notes, session dates, and associated images
• —Timegrapher readings: rate, amplitude, and beat error measurements before and after service
• —Parts & inventory: part names, categories, quantities, unit costs, supplier names, and notes
• —Parts used: records of which parts were applied to which watches, quantities, and dates
• —Equipment: tools and capital equipment with names, costs, acquisition dates, and supplier information

2.4 Usage Data

We collect standard server-side metadata generated by your use of the Service, including IP addresses, browser type, and request timestamps. This data is used solely for security monitoring and service operation. We do not use any third-party analytics platforms or advertising networks.

2.5 Waitlist

If you submitted your email to join the waitlist, we stored that email address for the sole purpose of notifying you when access was available.

3. How We Use Your Information

• —Provide, operate, and maintain the Service
• —Authenticate your identity and secure your account
• —Display your data back to you and compute financial summaries and statistics
• —Respond to support requests and communications
• —Detect and prevent unauthorized access or abuse
• —Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage & Security

Your data is stored on servers operated by Fly.io in their Chicago (ord) region. Fly.io provides infrastructure-level security including encrypted storage and network isolation. Data is transmitted over TLS/HTTPS.

Access to your data within the application is enforced through row-level security rules: you can only read or modify records that belong to your account.

We implement reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data, watch records, photos, inventory, and all associated records are permanently deleted from our systems. Residual copies in backups are removed on a rolling basis within 30 days.

6. Your Rights

• —Access — request a copy of the personal data we hold about you
• —Correction — update or correct inaccurate information via the Service
• —Deletion — request deletion of your account and all associated data
• —Portability — request an export of your data in a machine-readable format

To exercise any of these rights, email us at support@westmorelandcreative.com. We will respond within 30 days.

If you are a resident of the European Economic Area (EEA) or United Kingdom, you may also have rights under GDPR or UK GDPR, including the right to lodge a complaint with your local supervisory authority.

7. Cookies

The Service uses a session cookie to maintain your authenticated login state. We do not use tracking cookies, advertising cookies, or third-party cookies.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Third-Party Services

The Service is built on infrastructure provided by Fly.io (hosting). Fly.io's own privacy practices apply to the infrastructure layer and are described at fly.io/legal/privacy-policy.

We do not integrate with third-party analytics, advertising networks, or social media platforms.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by email. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact: