The Short Version
We collect your email and account information to provide the Partsemble service. We don't sell your data. We don't share it except with the services needed to run Partsemble. You can ask us to delete your information at any time by emailing support@partsemble.com.
What We Collect
Depending on how you interact with Partsemble, we may collect:
- Email address — required to create an account
- Name and company name — optional, helps us personalize communication
- Use case details — optional information about how you plan to use Partsemble
- IP address — collected automatically for security and fraud prevention
- Product usage data — when you have an active account, we collect information about how you use the product to improve it
- Billing information — when you subscribe to a paid plan, payment details are collected and processed by Stripe. We do not store your credit card number
- Accounting system data — when you connect QuickBooks Online or another accounting system, we access inventory items, account information, and company details via OAuth to provide the sync and export features
- Session recordings — we use LogRocket to record user sessions (clicks, scrolls, page navigation) to identify bugs and improve the product. Recordings do not capture passwords or payment fields
- Cookies and local storage — we use cookies and browser local storage for authentication tokens, theme preferences, and analytics
How We Use Your Information
- Provide access to Partsemble and keep your account working
- Send transactional emails (account confirmations, billing notifications, trial reminders) and occasional product updates
- Understand how people use the product so we can improve it
- Detect and prevent fraud, spam, and abuse
- Respond to support requests and questions
We will never sell your information or use it for purposes beyond what is described here.
Third-Party Services
We use the following third-party services to operate Partsemble. Each has its own privacy policy:
- Stripe — processes payments and manages subscriptions. Stripe receives your billing information when you subscribe to a paid plan
- Intuit QuickBooks Online — accounting system integration. When you connect your QBO account, Partsemble accesses your inventory and account data via OAuth 2.0. You authorize this connection and can revoke it at any time
- Xero — accounting system integration. When you connect your Xero organisation, Partsemble accesses your items, accounts and related records via OAuth 2.0. You authorize this connection and can revoke it at any time
- Google — we use Google Analytics (GA4) for anonymous usage analytics, Google Sign-In for optional authentication, and Google Places API for address autocomplete. Google may set cookies in your browser
- SendGrid — delivers transactional emails (account confirmations, billing notifications, trial reminders) on our behalf
- Sentry — captures error reports when something goes wrong in the application, and performance data for a sample of requests. Both include your user ID, email address, IP address and browser information, to help us diagnose issues
- LogRocket — records user sessions to help us identify usability issues and bugs. Recordings capture page interactions but not passwords or payment fields
- Railway — hosts our backend application servers and PostgreSQL database
- Vercel — hosts our frontend website and application
We share only the minimum data each service needs to function. We do not authorize them to use your data for their own purposes.
AI Assistants
If you connect Partsemble to an AI assistant such as Claude (by Anthropic) or ChatGPT (by OpenAI) through the Partsemble AI connector:
- You approve it on a Partsemble page and choose one business. The assistant then acts as you in that business, with your role, and can do only what you can do in Partsemble.
- When you ask the assistant something, it requests data from Partsemble: products, stock, BOMs, builds, conversions and transfers in that business, the names of the team members who made them, ran them or were assigned them (their email address when no name is set), and costs and prices if your role lets you see them. It can also create planned builds and draft transfers for someone to finish in Partsemble. It cannot run a build or a transfer, or send anything to your accounting system.
- The data the assistant receives is then processed by the assistant's provider under that provider's own terms and privacy policy. Anthropic and OpenAI receive Partsemble data only when you connect their assistant and ask it something.
- For each connected assistant we store which assistant it is, the person and business it belongs to, when it was connected and last used, and the tokens that let it reach Partsemble. The tokens stop working as soon as it is disconnected; we keep the rest, for as long as your Partsemble account and the business's account exist, so that records it created still show where they came from.
- We log each request the AI connector serves (the time, the action, and your user and business). When a request fails, and for a sample of all requests, we send your user ID, email address and IP address with the request's details to our error-reporting service. Both are for security and troubleshooting, and both are kept for up to 90 days. We do not receive or store your conversations with the assistant.
- You can disconnect an assistant at any time in Settings → Profile → AI connector. Removing a person from a business, or resetting a password through "Forgot your password?", also disconnects that person's assistants.
Cookies & Tracking
Partsemble uses cookies and similar technologies for:
- Authentication — keeping you signed in across sessions
- Preferences — remembering your display settings (such as theme preference)
- Analytics — Google Analytics (GA4) uses cookies to collect anonymous usage data, such as pages visited and session duration. This helps us understand how the product is used and where to improve
- Session recording — LogRocket uses local storage and cookies to associate session recordings with your visit
You can manage cookie preferences through your browser settings. Disabling cookies may affect your ability to use Partsemble (for example, you will not be able to stay signed in).
We do not use advertising cookies or share tracking data with advertisers.
Data Security
We take reasonable steps to protect your information:
- All data is transmitted over SSL/TLS encryption
- Passwords are hashed with Argon2 — we cannot recover them
- Access to production data is restricted to authorized personnel only
- OAuth tokens for accounting system connections are encrypted at rest
- Payment information is processed by Stripe and never touches our servers
- Session recordings exclude sensitive form fields (passwords, payment details)
No system is completely secure. If you believe your account has been compromised, please contact us immediately at support@partsemble.com.
Your Rights
You can, at any time:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data
- Unsubscribe from marketing emails at any time using the link in any email we send
- Export a copy of your data
To exercise any of these rights, email support@partsemble.com and we'll respond within 5 business days.
Data Retention
We keep your data for as long as your account is active or as needed to provide the service. If you request account deletion, we will delete your personal information within 30 days, except where we are required by law to retain it (for example, billing records). Records about connected AI assistants and AI connector request logs are kept as described under AI Assistants.
Children's Privacy
Partsemble is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from someone under 18, please contact us and we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. For significant changes, we will notify users by email or by posting a prominent notice on the site. The “Last updated” date at the top of this page always reflects the most recent revision.
Contact Us
Questions, requests, or concerns about this policy? Get in touch: