Hardpoint privacy notice
1 Who handles your information
Hardpoint is operated by Bryan Genthe. This notice covers hardpoint.tools, app.hardpoint.tools and private-beta communications. Northmen Electric is an internal beta company, not the operator or owner of Hardpoint. Contact support@hardpoint.tools for privacy questions and requests.
For account administration, billing and business communications, Hardpoint determines the information needed to operate its service. For company records submitted by a customer, Hardpoint generally handles the information to provide that company’s workspace and follow its authorized instructions. If your employer or another company supplied information about you, contact that company’s Owner as well as Hardpoint when appropriate.
2 Information we receive
Account and company details: names, business email addresses, optional phone numbers, company names and logos, assigned roles, invitations and sign-in records. Planning information: balances and assumptions, receivables, expenses, debt, workforce names and compensation or benefit amounts, payroll timing, scenarios and reconciliation decisions entered by authorized users.
CSV imports: transaction identifiers, dates, amounts, directions and memos, plus import metadata such as filename, file hash and reconciliation status. Memos and names may identify employees, customers or suppliers. Provide only the supported planning data and remove unnecessary sensitive information before importing.
Communications and operations: consultation requests, onboarding arrangements, support messages, feedback and records of authorized changes. Technical information may include IP addresses, browser or device information, request timing, authentication activity and error or uptime diagnostics.
Payment information: Stripe processes checkout information, including payment-method details. Hardpoint receives or can review billing contact information, payment amount and status, transaction references, receipts, refunds and limited payment-method information through Stripe. The Hardpoint application does not collect full card numbers or bank-login credentials. Stripe and a selected wallet or payment method also process data under their own terms and privacy notices.
3 How we use information
We use information to approve fit, establish and protect accounts, operate the company workspace, calculate and reconcile plans, deliver invitations and account emails, collect and administer payment, arrange onboarding, provide support, investigate errors and improve reliability. We also use appropriate records to resolve disputes, prevent misuse and comply with applicable law.
The beta does not include public user profiles, advertising features or AI recommendations. Product feedback can inform improvements. Customer planning records are not licensed for advertising or AI-model training under these terms. Hardpoint does not sell personal information or use it for targeted advertising.
4 Your company users
Your company’s active Owner and Admin can access its planning records according to their roles. Other beta companies are not authorized to access that workspace. The Owner controls the second-seat invitation. Hardpoint’s operator may access relevant information to provision, support, secure or recover the service, handle your request or meet a legal obligation.
5 Service providers and external services
Hardpoint uses Cloudflare for website and application delivery; Supabase for the application database and authentication; Resend for transactional email; Google Workspace for business email; Stripe for payments; Sentry for error diagnostics; and Better Stack for uptime monitoring. Each receives information relevant to its service. Uptime monitoring checks the public health endpoint and is not an instruction to send company financial records to the monitoring provider.
The public landing page loads Google Fonts, causing your browser to request font resources from Google. Stripe-hosted checkout, Link and other selected payment methods have their own browser-storage and privacy practices. Their notices apply to those services in addition to this notice. Providers may process information in the United States and other countries; the production application database is currently in the United States. This is not a promise that every provider processes every record only in one location.
6 Browser storage and diagnostics
The application uses browser session storage to maintain sign-in within a browser tab. Sign-in links are sensitive; avoid forwarding them. Infrastructure and payment services may use technical cookies or related storage for delivery, security and payment functions. Blocking necessary storage can affect sign-in or checkout.
Sentry error-reporting filters are configured to reduce included user, request and error-message content. Diagnostic services may still receive technical metadata, including IP or device information. These filters are not a promise that all incidental personal information is excluded. The current application does not configure session replay or advertising trackers.
7 Retention and requests
We retain information while needed to provide the workspace, support agreed data-return requests, maintain relevant security and audit history, administer billing, resolve disputes and meet legal obligations. After a company closes, retained information should be limited to those purposes and reviewed as part of handling the closure. There is no automatic company-data purge schedule currently configured.
The verified Owner may request a manual company-data copy within 30 days after paid access ends. For access, correction or deletion questions, email support@hardpoint.tools. We verify identity and authority, coordinate with the company where appropriate, and explain the action, timing and any records we must retain. Applicable legal rights are not limited by this contractual request window. Do not send passwords or full banking credentials with a request.
Archiving or removing a record from active screens does not necessarily erase its audit history or backups. Backup copies expire through their retention process; restoring an older backup may require reapplying a previously approved deletion or access restriction. Billing, security, dispute and legally required records may be retained separately. We will not represent archiving alone as permanent deletion.
8 Safeguards changes and contact
We use company-scoped access controls, invitation-based accounts, protected delivery, backups and operational controls to reduce risk. No service can guarantee absolute security. We will address security incidents and provide notices as applicable law requires. The service is intended for business use by authorized adults, not children as account holders.
This notice may change as the service or its handling of information changes. We will update its effective date and communicate material changes affecting existing beta customers. Contact support@hardpoint.tools for privacy, access and support questions, or billing@hardpoint.tools for billing and cancellation.