Privacy Policy

RunSheets is used by production companies and studios (each an “Organization”). Whether Lean6 is the party responsible for personal information, or acts on an Organization’s behalf, depends on the data:

• Your account information. When you create an account, Lean6 is the organization responsible for the personal information that identifies you (your name, email, and similar details).
• An Organization’s operational data. The information a studio enters to run its productions — including personal information it records about its crew, drivers, and vendor contacts — is controlled by that Organization. Lean6 processes it as a service provider, on the Organization’s instructions and to deliver the Service.

If your personal information appears in an Organization’s records and you want to access, correct, or delete it, please contact that Organization directly. We will support them in responding to your request.

Information you provide

• Account & identity. Your name, email address, phone number (optional), profile photo (optional), and password. If you sign in with Google or Apple, we receive basic profile details from that provider. Passwords are handled by Firebase Authentication and are not visible to us in plain text.
• Organization & production data. Studio name, office address and phone, productions, sets, and settings you configure.
• People & vendor records. Crew and contact rosters (names, phone numbers, email addresses, roles) and vendor details (names, addresses, phone numbers, email addresses, notes) that Organization members enter.
• Item & workflow data. Items, purchase requests, run sheets, custody hand-offs, condition grades, dispositions, loss-and-damage cases, comments, cost codes, purchase-order numbers, and payment records (payment method and amounts — we do not collect cheque or bank account numbers, and cash and cheque handling happens outside the Service).
• Photos, signatures & files. Photos of items and their condition, receipt images, hand-off signatures, and organization logos that users upload or capture. Photos may contain metadata (such as the time captured and, where enabled, location).

Information collected automatically

• Location. With your device’s permission, we capture a best-effort GPS location to stamp custody hand-offs and condition photos in the field. Location is optional — if you decline the permission, or it is unavailable, the Service still works and the hand-off simply proceeds without a location.
• Device & notification data. To deliver push notifications, we store a device messaging token (via Firebase Cloud Messaging and, on iOS, Apple Push Notification service).
• Log & usage data. Standard technical information such as IP address, device and browser type, app version, timestamps, and diagnostic or error logs.
• Cookies & local storage. We use cookies and browser local storage to keep you signed in, remember preferences, and enable offline use.

Payment information

When paid plans are purchased, payments are processed by our payment provider, Stripe. We receive limited billing details (such as a subscription identifier and plan status) but do not collect or store full payment card numbers.

We use personal information to:

• Provide, operate, and maintain the Service, and sync data across your devices;
• Authenticate you and secure your account and your Organization’s data;
• Enable core features — dispatching run sheets, tracking custody, recording condition and location, managing purchase requests, and wrap reporting;
• Send transactional and push notifications (for example, when a run sheet is assigned or a request needs approval);
• Process subscriptions, billing, and related communications;
• Provide support and respond to your requests;
• Monitor, troubleshoot, prevent fraud and abuse, and improve the Service;
• Comply with legal obligations and enforce our Terms of Service.

We rely on your consent and on the reasonable necessity of processing to provide a service you have requested. Location collection is opt-in through your device’s permission and can be turned off at any time in your device or browser settings. We do not use your data to serve third-party advertising, and we do not sell personal information.

• Within your Organization. Data you enter is visible to other authorized members of your studio and production, according to their role (for example, admins, buyers, decorators, and drivers see different views).
• Service providers. We share information with vendors who process it on our behalf to run the Service, under agreements that limit their use of it (see the sub-processors below).
• Legal & safety. We may disclose information if required by law, or to protect the rights, property, or safety of Lean6, our users, or the public.
• Business transfers. If Lean6 is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Sub-processors

The Service is hosted on Google Cloud infrastructure. Your information — including photos and files — may be stored and processed in the United States and other countries where our service providers operate. As a result, it may be subject to the laws of those countries, including lawful access by their courts, law enforcement, and government authorities. We take steps to ensure a comparable level of protection wherever your information is processed.

We retain personal information for as long as your account and your Organization’s account are active, and as needed to provide the Service. When an account or production is closed, we delete or anonymize the associated information within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling basis.

We use technical and organizational safeguards to protect personal information, including encryption in transit and at rest, authenticated access, and database and storage rules that isolate each Organization’s data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us at hello@runsheets.ca.

Subject to applicable law, you may:

• Access the personal information we hold about you and request a copy;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information;
• Withdraw consent to processing (which may limit your ability to use the Service);
• Turn off location collection and push notifications through your device or browser settings;
• Ask a question or make a complaint about how we handle your information.

To exercise these rights, email us at hello@runsheets.ca. We may need to verify your identity before responding. If your information is held within an Organization’s records, we will direct your request to, or coordinate with, that Organization. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

RunSheets is a workplace tool intended for users who are 18 or older. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

For privacy questions, requests, or complaints, contact our privacy contact at hello@runsheets.ca. RunSheets is a product of Lean6 Technology.