Fabora Privacy Policy

Last updated: 6 October 2026

This page explains, in plain English, how Fabora handles information on the public Fabora website at faboraplatform.com, in the Fabora Steel Tools mobile app (see section 10), in LEV Ready, our extraction records service on the web and on the phone (see section 12), and in Fabora RAMS, our risk assessment and method statement service on the web and on the phone (see section 13).

1. The short version

We keep data collection to a minimum. We don't sell your details, we only run analytics if you agree to it, and the only personal information we actively gather is what you choose to send us when you get in touch or start a trial.

2. What we collect, and when

When you use the contact form: we receive what you type, usually your name, company, email address, the type of enquiry and your message.
When you email us at info@faboraplatform.com, we keep your message and address so we can reply.
When you start a paid trial: our payments provider, Stripe, handles your card and billing details. We never see or store full card numbers ourselves.
When you browse, only if you agree: we use analytics to see which pages get visited. It is aggregated and is not used to identify you personally.
On the contact form: a quick spam check runs in the background to confirm the request is from a real person, not a bot.

3. Why we use it

We use this to reply to your enquiry, set up a trial when you ask for one, keep the site and form free of spam, and work out which pages are useful so we can improve them. That is the lot. We don't sell it or use it for anything else.

4. The providers we rely on

Running a website takes a few specialist services. Each one only gets the data it needs to do its job:

Vercel: hosts the website
Resend: sends and delivers our contact emails
Stripe: handles trial checkout and payments
Google Analytics and Ahrefs: website analytics, used only if you accept analytics cookies
Cloudflare Turnstile: the spam check on the contact form

5. Cookies

A couple of essential cookies keep the site working and remember your cookie choice. Analytics cookies only load if you say yes in the banner. Say no and the site still works exactly the same. You just won't show up in our analytics.

6. Our lawful basis (UK GDPR)

Where we handle personal data, we rely on your consent for analytics cookies, our legitimate interest in answering enquiries and protecting the site, and, for trial sign-ups, taking steps you have asked for before any contract.

7. How long we keep it

We hold enquiry emails and form messages only as long as we need them to deal with your query and keep sensible business records, then we remove them. Stripe keeps billing records for as long as tax and accounting rules require.

8. Your rights

Under UK data protection law you can ask to see the data we hold about you, have it corrected or deleted, or object to how we use it. Email us and we'll sort it out.

9. Asking us about privacy

For anything about your data, or a message you sent through the website, email us at info@faboraplatform.com.

10. The Fabora Steel Tools app (mobile)

Fabora Steel Tools is our offline calculator and reference app for steel fabrication, available on the App Store and Google Play. It is separate from this website and works very differently: your calculations, saved jobs, photos and preferences stay on your device. Every calculation runs offline on your device. The app has no accounts or logins, no advertising, and does not track you across other apps or websites. It sends four things and nothing else: an anonymous count of which tools get opened, which you can switch off, a subscription check if you buy or restore Fabora Pro, an access code if you enter one, and a sign-in link if you use your subscription on a computer. All four are described below. The website analytics, cookies and providers described above do not apply to the app.

On-device storage: everything you enter or save (calculations, quotes, bend jobs, pipe offsets, photo markups, your company details and logo, and your unit and region preferences) is stored only on your device. None of it is uploaded, synced or shared, and deleting the app removes it.
Camera and photos:the Photo Markup tool lets you take a photo or pick one from your library to add measurements and notes, and you can save the marked-up image to your camera roll or share it yourself. Quotes can include a logo you pick from your library. From version 1.0.15 a job on the Jobs tab can hold photos you take or pick, kept in the app's own storage on your device and removed with the job. From version 1.0.16, Use Pro on a computer uses the camera to read the sign-in code the web version shows on your computer screen; the picture is not saved or sent anywhere, and the app reads only the text inside the code. Any image is used only on your device. The app never scans, indexes or uploads your photo library, and only receives the single image you choose or capture.
Notifications: from version 1.0.15, while a job timer runs the app can show a notification on your lock screen with the running time and a Pause button. It is created on your device; the app asks for permission the first time you start a timer, works without it, and sends no push notifications from a server.
Files you export(PDF and DXF) are created on your device and handed to your phone's share sheet; where they go next is your choice.
Anonymous usage data, from version 1.0.8, and you can switch it off. So we can see which tools are worth building on and where people get stuck, the app records a small fixed list of events: the app was opened; a tool screen was opened, and which tool; the subscription screen was shown, and which locked tool led to it; the subscription screen was closed; a purchase or free trial was started, and which plan; a purchase or free trial completed; and, from version 1.0.15, a purchase or free trial that was cancelled at the store's checkout, and which plan, and one the store refused, with the plan and the store's error code and message (a billing response, never anything about you); and, also from 1.0.15, that a job was created on the Jobs tab and that a job timer was started, only that each happened, since the job's name, customer, hours and photos stay on your device. That list does not grow without this policy changing. Alongside each event we record the app version, whether you are on a phone or a desktop browser, and your screen size.

What the usage data never includes: your name, your email, your company, anything you type into a calculator, any dimension, material, price, quote, photo or file name, your street or precise location, and any advertising identifier from Apple or Google. Events are attached to a random identifier generated on your device, which is not linked to you and is not used to build a profile of you.

This is processed on our behalf by PostHog, on servers in the European Union. As with any internet request the server receives your IP address. It is used to work out which country you are in and is then discarded, never stored, and the finer location an IP can suggest, meaning your city, region, postcode, timezone and approximate coordinates, is deliberately deleted the moment the event arrives. Country is the level of detail we keep. None of it is used for advertising, sold, or combined with data from any other app or website.

To switch it off:open Settings in the app, find "Usage data", and turn off "Help improve the app". That stops collection immediately and it stays off. Because the events are anonymous we cannot tell which ones are yours, so we cannot retrieve or delete them individually; switching it off stops any further collection, and everything else the app holds is on your device, where deleting the app deletes it.

Apart from the anonymous usage data above and the subscription flow in section 11, the app gathers nothing. Because none of it tracks you across other companies' apps or websites, and the app uses no advertising identifier, it shows no tracking-permission prompt. It is a professional utility suitable for all ages. Questions about the app's privacy? Email us at info@faboraplatform.com.

11. Fabora Pro subscriptions in the app

Fabora Steel Tools offers an optional paid subscription, Fabora Pro, bought through Apple's App Store or Google Play. Payment is taken by Apple or Google, not by us. We never see your card details.

To unlock your subscription across reinstalls and devices, the app uses RevenueCat, a subscription management service. RevenueCat processes your purchase history for this app, a randomly generated anonymous user ID, and basic device information needed to validate purchases. This identifier is not your name, email address or Apple or Google account, and we do not link it to you. The one exception is a phone code from a web subscription, described below, which links the phone to that subscription.

This information is used only to make your subscription work: starting your free trial, unlocking Pro features, restoring purchases and handling renewals and refunds. It is not used for advertising, it is not used to track you across other apps or websites, and it is never sold.

RevenueCat's own privacy policy is at revenuecat.com/privacy. You can manage or cancel your subscription at any time in your App Store or Google Play account settings.

On the web version of Steel Tools, checkout is handled by RevenueCat and Stripe using the email address you give at checkout, and your access is tied to the browser you bought it in. A web subscription also comes with one phone code for the app. The web version asks our phone code service, hosted by Vercel, for it, and RevenueCat keeps it with your web subscription. When a phone redeems it, that phone's anonymous identifier is recorded against your web subscription, so Pro on the phone renews and ends with it, and RevenueCat tells our service when the web subscription renews. If you enter an access code in the app, the app sends that code and its anonymous RevenueCat identifier to our redeem service, hosted by Vercel, so the code can be honoured on one device. Nothing else is sent, and nothing about you is stored there.

From version 1.0.16 you can use a subscription bought in the app on your computer. The web version shows a sign-in code; when you scan it with Use Pro on a computer, the app sends its anonymous RevenueCat identifier and the scanned code to our sign-in service, hosted by Vercel. The service checks with RevenueCat that your subscription is active and hands the identifier to that browser, which then uses the same subscription. The browser proves it showed the code with a secret that never leaves it, so a photo of the code is not enough to collect anything. The link is kept with RevenueCat, can only be collected within ten minutes, and is deleted when the browser collects it. Nothing else is sent.

12. The LEV Ready app

LEV Ready is our record keeping service for local exhaust ventilation, used on the web at lev.faboraplatform.co.uk and through the LEV Ready phone app. It works differently from Steel Tools: it keeps your records for you, so it needs an account and it stores what you enter on our servers.

What we store: your name, email address and workspace name; your sites, areas and extraction assets; routine check, service and thorough examination records; corrective actions; and any photos and documents you attach to them.
Where it is stored: in the European Union. Records sit in a database hosted by Render in Frankfurt, and the files you upload sit in Cloudflare R2 storage under its EU jurisdiction. Account and reminder emails go out through Resend. Those three companies process the data for us under contract, and for nothing else.
Camera and photos: the app uses your camera only to scan the QR labels you print for your own assets, and to take photos you choose to attach to a record. It never scans, indexes or uploads your photo library.
Your team:a workspace owner can add colleagues as users. Everyone in a workspace can see that workspace's records, which is the point of it. Nobody outside it can.
No adverts, no tracking.The app carries no advertising and no advertising identifier, and nothing is sold or shared for anyone else's purposes. So we can see which parts of LEV Ready get used, our server records a few steps, such as a workspace being created or a check being recorded, with PostHog, an analytics service, on its servers in the EU. Those records carry a random workspace ID and no names, email addresses, record contents or device details, and nothing is stored on your device for it.
Paid plans:these are bought on the web version only, through Stripe. There is no purchasing inside the phone app, and we never see your card details. So we can follow how LEV Ready is doing, each subscription is also recorded with RevenueCat, a subscription management service: we send it a random workspace ID and the Stripe subscription reference, and it reads the plan, trial, payments and any cancellation from Stripe. It never receives the records you keep in LEV Ready. RevenueCat's own privacy policy is at revenuecat.com/privacy.
How long we keep it: for as long as your workspace exists, because the records are the point of the service. Thorough examination records in particular are ones you may need to produce for several years. When you delete your account, see below, we delete them.

Deleting your LEV Ready account

You can delete your account yourself at any time. Sign in, open the Account page (in the phone app that is the Account tab) and use Delete account. It removes your user record, and where you are the only owner of a workspace it removes that workspace too, with its sites, areas, assets, check, service and examination records, corrective actions, photos and documents. The confirmation step tells you which of those will happen before you commit, and any paid plan on the workspace is cancelled at the same time. Deletion cannot be undone.

If you would rather we did it for you, email info@faboraplatform.com from the address on the account and we will delete it within 30 days.

13. The Fabora RAMS app

Fabora RAMS is our risk assessment and method statement (RAMS) service, used on the web at app.faboraplatform.co.uk and through the Fabora RAMS app for iPhone, iPad and Android. Like LEV Ready, it keeps your records for you, so it needs an account and it stores what you enter on our servers. Company accounts are created when a company signs up on faboraplatform.com; the app only signs in to an account that already exists.

What we store: your email address, and your password as a one-way scrambled code (a hash), never the password itself. Your company details as they appear on your RAMS: company name, the signatory or contact name, address, postcode, phone, email, website, company registration and VAT numbers, and your logo if you upload one. The RAMS you write, including job and site details, method steps, hazards and risk scores, PPE, COSHH items and the names, roles and phone numbers of the operatives on the job, and the PDFs you issue. Your libraries of customers (with their sites and contacts), operatives, equipment, hazards, PPE, method steps and COSHH items. When your company signs up on faboraplatform.com, the website sends us your company name, email address and name so we can create the account and send your welcome email, and, if you told us, how you heard about us.
People you add: when you add operatives, customer contacts or RAMS authors, your company decides what goes in and is responsible for telling those people. We store it for you and use it for nothing else.
Activity in your account: we record a short list of events against your account in our own database: when you sign in, finish setting up your company, open the RAMS builder, save a new RAMS, issue a PDF or open checkout on the web, and your answer if you reply to the one-question prompt we show accounts that have not made a RAMS yet. We use them to see where people get stuck. Separately, we count the PDFs issued each month where a plan has a monthly limit. No analytics company receives any of it.
Signing in: sign-in codes and password links are emailed to you. A sign-in code works once, for 10 minutes, and we keep only a scrambled copy of it. You can also sign the phone app in by scanning a code shown on your computer while you are signed in there: that code works once, for 2 minutes, and we keep only a scrambled copy of it too. The app keeps you signed in with a cookie, the same way a web browser does, until you have not used it for 90 days.
Where it is stored:in the European Union. Records and issued PDFs sit in a database hosted by Render in Frankfurt, Germany, and uploaded logos in Render's storage in the same place. Account emails, such as sign-in codes and password links, go out through our email provider. These companies process the data for us under contract, and for nothing else.
Ask Fabora: in the phone app, Ask Fabora, the help assistant, answers from our own help articles only and sends nothing to anyone else. On the web it can use OpenAI to write its answers. When it does, we send OpenAI the question you type, the last few messages in the same help panel, the name of the screen you asked from and extracts from our help articles. We do not send your name, email address, company or your RAMS, but anything you type into a question goes with it, so please leave personal details out. OpenAI is a US company and handles this outside the UK and the EU.
On your phone:every PDF you export or print in the app is also saved on the phone, in the Issued tab, so it opens with no signal. Those copies stay on the phone until you remove them there or delete the app; deleting your account cannot reach them. App lock uses your phone's own Face ID, Touch ID, fingerprint or passcode check, and we never receive any biometric data. The app also remembers, on the phone, your light or dark theme and whether you last chose a site or workshop RAMS.
Camera: the app uses your camera only to scan the sign-in code on your computer, and to take a photo when you choose Take Photo to add your company logo. A scan is read on the phone: the picture is never kept or sent, only the code it finds is used to sign you in. A logo photo is uploaded as your logo.
App updates:when the app opens it asks Expo, the service we use to deliver updates to the app, whether a newer version of the app's code is ready. That request carries a random code the app creates when it is installed, the app's version and whether the phone runs iOS or Android. It is not linked to your account.
Your team and share links:everyone signed in to your company's account sees the same RAMS and libraries, and nobody outside it can, unless you send them a share link. A share link opens that RAMS as a PDF for anyone who has the link, without an account, until the link expires.
No adverts, no tracking.The app carries no advertising, no advertising identifier, and no third-party analytics or crash reporting. Nothing is sold, and nothing is shared for anyone else's purposes.
Paid plans:these are bought on faboraplatform.com through Stripe, never inside the app, and we never see your card details. Fabora RAMS keeps your plan, the status of your subscription and Stripe's reference numbers for it.
Technical logs: our hosting provider keeps short-lived logs of requests to the service, such as the time, the page asked for, and the network address and browser or app that asked, so we can keep it running and secure.
Why we use it: to provide the service your company signed up for, and, for the activity events and technical logs, our legitimate interest in keeping the service working, secure and useful.
How long we keep it:for as long as your company's account exists, because the records are the point of the service and you may need to show an old RAMS long after the job. Sign-in codes expire after 10 minutes and password links after 2 hours (72 hours for a new account's setup link). When you delete your account, see below, we delete the rest. Deleted records can stay in our hosting provider's backups for a short time before they are overwritten.

Deleting your Fabora RAMS account

You can delete your company's account yourself at any time. Sign in as the company's admin, open Company Settings (in the phone app, the Account tab), go to Delete this company account, type DELETE and confirm. That deletes the company and every user on it, all of its RAMS and issued PDFs, its libraries, its activity events and its logo, straight away, and any share links you sent stop working. It cannot be undone. If the company has a paid subscription, deleting the account sends us a notice and we cancel the subscription in Stripe. PDFs already saved in a phone's Issued tab stay on that phone until you remove them there or delete the app.

If you cannot sign in, or you are not your company's admin, email info@faboraplatform.com from the address on the account and we will delete it within 30 days. We keep the deletion notice (the company name, the admin's email address and Stripe's reference numbers) with our billing records.

14. Updates

If the website, the contact form or the providers above change, we'll update this page and change the date at the top.