Privacy & Terms

Privacy policy

1. Scope and contact

This notice concerns the Watchmakers Bench browser app, not the separate website or iPhone/Mac apps. The operator and controller for account and support information is Mats Petter Wilke, trading as Watchmakers Bench.

2. Your local workshop

The app reads and writes workshop records and attachments in the folder you explicitly select and allow the browser to access. They are encrypted there and decrypted in the browser while the workshop is unlocked. Normal workshop use does not send those records or attachments to our account database or support service.

Your workshop passphrase is separate from your account password. We do not receive or store it. An account-password reset cannot recover it or decrypt your workshop. Keep the passphrase safe and maintain separate backups.

A folder synchronized by iCloud, OneDrive or another service may copy encrypted files to that service. Printing, exports, email drafts and files you share may contain readable customer information. You control these actions and any third-party services you use.

3. Account and technical information

Supabase provides account authentication. Account information includes your email address, account identifier, authentication and session records, profile information where supplied, and licence access status. We use this information to invite you, sign you in, restore account access and verify app access.

Vercel hosts the app and its server endpoints. Hosting and authentication providers may process IP addresses, request times, browser information and security logs when you connect. Account-level timestamps and counters are used to limit feedback abuse; the feedback message is not stored in that rate-limit table.

When you accept the terms, we record your account identifier, the document version and the server-recorded acceptance time in Supabase. Account-linked invitation acceptance and the dates of complimentary Pro access are also stored there to administer the gift; workshop files are not used to decide eligibility. This records your agreement and acknowledgement of this privacy notice, not blanket consent to personal-data processing. No workshop files, passphrase or additional IP/browser fields are included in that acceptance record. We use it to administer the agreement and, where necessary, establish or defend legal claims under the legal bases and limited retention rules below. It is kept while your account exists and removed with account deletion, subject to the limited legal-claim and provider-backup exceptions described below.

4. Feedback, email and optional requests

When you select Send feedback in Settings, the app sends your message, feedback type, account email, app version and browser type to support through STRATO email. Workshop records and attachments are not added automatically. Do not include customer details, passwords or a workshop passphrase. Any information you type into the message is included.

Account invitation and recovery messages use the configured account email service. Customer updates are different: they open as drafts in your own mail application and are not sent automatically by Watchmakers Bench. Exchange-rate updates and any available public-reference searches make separate online requests; a search can disclose the search text you choose to enter.

5. Cookies and browser storage

Essential cookies support account sign-in and sessions. Browser storage is also used for interface preferences, version notices and a shortcut to the last workshop folder. These references do not replace the workshop folder or its backups. No advertising or behavioural-analytics integration is included in the current app code.

Clearing browser data can remove preferences, sign-in state and folder shortcuts, but does not itself delete your workshop folder. You may need to choose the folder and grant access again.

6. Why we process information, how long we keep it, and our providers

Purposes and legal bases

• Account access and account support. We use the information necessary to create and manage your account, authenticate you, recover account access and provide the service you request. The legal basis is performance of our agreement with you, or steps you request before entering it (GDPR Article 6(1)(b)). Where you act for a business rather than being the contracting party, the basis is our legitimate interest in providing and administering that business’s access (Article 6(1)(f)).
• Feedback and product enquiries. We use messages you choose to send to answer questions, investigate problems and improve the app. Where this is not necessary to fulfil our agreement with you, the basis is our legitimate interest in supporting users and maintaining a useful, reliable product (Article 6(1)(f)). Sending product feedback is optional and is not a condition of using the app.
• Security and misuse prevention. Authentication checks, limited technical records and feedback-rate counters help protect accounts, users and the service. The basis is our legitimate interest in preventing unauthorized access, fraud and abuse (Article 6(1)(f)). This does not authorize advertising profiles or automatic collection of workshop content. You may object to processing based on legitimate interests.
• Legal obligations. Where an applicable law requires us to retain or disclose particular information, or respond to a data-protection request, the basis is compliance with that obligation (Article 6(1)(c)). This applies only to information needed for the specific obligation.

Your email address and necessary authentication information are required for online account access. If you do not provide them, we cannot create or authenticate your account. Your local workshop records are not required for these account functions.

Retention and deletion

• Account information. Account, profile and access records are retained while needed to provide and administer your account. You can request account closure and deletion by contacting us. When self-service deletion is available in Settings, it requires confirmation and identity verification. Deleting the account removes access to the app; it does not delete your local workshop files.
• Support correspondence. Our retention rule is to delete or anonymize support messages, including feedback, no later than 12 months after the case is closed. Messages needed for an unresolved case remain while that case is being handled.
• Security and technical records. Limited records are retained for operating the service, detecting misuse and investigating incidents. Provider-managed logs follow the relevant service’s retention settings and documented operational, security and legal purposes. Their retention depends on the purpose and service involved and is separate from the retention of your account or support messages.
• Limited exceptions. Relevant information may be retained longer where required by law or necessary to establish, exercise or defend a legal claim. Such retention is limited to the information and period needed for that purpose, not a reason to keep the entire account or all correspondence indefinitely.

Account deletion is not immediate erasure of every provider-held log or backup. Residual copies may remain subject to the provider’s separate retention and deletion arrangements. You can contact us for information about the records involved and applicable deletion options. Keep independent backups and readable exports before closing your account.

Service providers and international processing

We use Supabase for authentication and account records, Vercel to deliver the app and operate its server endpoints, and STRATO for account and support email. These services receive information needed for their functions, not an automatic copy of your workshop. Providers may use authorized sub-processors to operate their services.

STRATO describes its hosting infrastructure as located in Germany. Supabase and Vercel operate international services: online account and technical information may be processed outside the EEA, including in the United States and, for Supabase-related operations, Singapore. Selecting a European database or server region does not by itself mean that all support, security, network and administrative processing stays in that region.

Transfers subject to GDPR require a valid transfer mechanism. Supabase’s and Vercel’s published data-processing terms include the European Commission’s Standard Contractual Clauses for relevant transfers. An adequacy decision may apply to a qualifying recipient and transfer; otherwise contractual safeguards and any necessary supplementary measures must be assessed. These mechanisms do not make a non-European location European or guarantee absolute protection. Contact us for information about applicable safeguards or to request a copy, subject to necessary redactions.

Provider information: Supabase data-processing terms, Vercel data-processing terms, and STRATO data-protection information.

You control retention of your local workshop files, exports and backups. Deleting an online account does not delete those files. Identity verification may be needed before we handle a request about online personal information.

7. Information you choose to store

Depending on the modules you use, your local workshop can contain:

• Customer names, contact details and customer numbers.
• Watch, movement, calibre, serial-number and ownership information.
• Intake details, estimates, approvals, service steps, measurements, status and work history.
• Parts, suppliers, orders, inventory and storage locations.
• Photos, documents, notes, templates and your workshop’s company profile.
• Prices, costs, payments, time records and saved exchange-rate information.

You choose what to enter. Only include information relevant to your work and protect it according to your business’s obligations. When handling customer information, your business normally determines why that information is used and who may access it. Our account and support processing is separate from that local work.

8. Files, backups, restoration and deletion

Photos and documents are added when you select them through the browser’s file picker. The app does not scan unrelated folders or automatically collect files elsewhere on your computer. Attached files become part of the local workshop and are included in a complete encrypted backup where supported.

An encrypted workshop backup is different from a report or other export. Reports, printed PDFs and exported documents can contain readable business or customer information. Treat them as confidential and check the destination before saving or sharing them. Password protection of the workshop does not automatically protect every exported file.

Archiving a job is not deletion. Records in the app’s Trash remain recoverable until permanently removed. Older backups, downloaded files, emails and copies held by another person may still contain deleted information. Restoring an older backup can bring that information back. Deletion inside the app does not erase separately saved copies.

For a move to another computer, retain the original folder, create a current backup and verify the restored records and attachments before removing the old copy. A backup stored only on the same disk does not protect against loss of that disk. We cannot retrieve a local file that we never received.

9. Exchange rates and other online requests

Exchange-rate updates request public European Central Bank reference rates through the app’s server endpoint. The rate request does not include your customer records, entered amounts, watch information, images or notes. In the current web implementation the app server contacts the ECB; the browser is not making the native app’s direct ECB Data API request.

Automatic fetching happens only if you enable it in Settings, and you can disable it again there. Previously saved rates can remain in browser storage. Original amounts and saved job rates are not automatically rewritten by a new daily rate. Reference rates and derived conversions are informational, not a guarantee of the rate available for a payment or an accounting decision.

When a public-reference lookup is available and you deliberately use it, the search information you enter may be sent to the lookup service. Do not include customer details in public searches. Future online modules will need their own clear disclosure before any workshop information is published or synchronized; the current app does not offer automatic workshop synchronization.

10. Security, disclosure and incident reporting

The app uses encrypted local workshop storage, authenticated account access and access controls on online account information. Workshop locking closes the active workshop view, but is not a replacement for locking the operating system. No browser application can promise immediate erasure of every memory copy, screenshot or exported file.

The current app has no advertising network or behavioural tracking integration and does not automatically attach workshop content to error or feedback reports. Account-access checks evaluate sign-in and access status; they do not use workshop records to profile your customers. We do not use local workshop data for advertising.

Online information may need to be disclosed to a competent authority when legally required, or handled by contracted providers to operate and protect the service. Any disclosure should be limited to the relevant purpose. If you suspect unauthorized access or accidental disclosure, contact support promptly without sending passwords, invitation tokens or customer files in the initial message.

11. Requests concerning local and online information

We can handle requests about information we receive, such as account information and support correspondence. We cannot remotely search, correct or delete customer records in your workshop folder. Use the app’s local editing, export and deletion tools to manage those records and address requests from your own customers.

For a privacy request, tell us which account or interaction it concerns and what you would like us to do. We may ask for proportionate identity verification, but you should not send a full identity document unless we have explained why it is necessary and agreed a suitable channel. Requests are handled within applicable legal deadlines; GDPR requests normally require a response within one month, subject to permitted extensions.

12. Children and policy changes

Watchmakers Bench is a professional workshop tool and is not directed to children. Do not create a child’s account or send unnecessary information about children to support.

This notice may change as the app, its providers or legal requirements change. A dated version identifies the text being reviewed or in effect. Material changes should be communicated appropriately where required. A privacy notice explains processing; reading it is not blanket consent to new purposes, optional tracking or future uploads.

Terms of Use

1. Account access and agreement

Your account is personal. Do not share credentials, transfer access or let another person use your account. A free account or complimentary Pro period does not create a paid subscription. Any paid order requires a separate, explicit choice with the price, billing interval and purchase terms shown before payment.

Before continuing under a new terms version, you must explicitly agree to the Terms of Use and acknowledge the Privacy Notice using the unticked checkbox provided. We record your account identifier, the document version and the acceptance time. Earlier use is not acceptance of changed terms.

Keep your credentials private and use the app lawfully. Do not attempt to access another person’s account, bypass access controls or interfere with the service.

2. Working with your own records

You may use the app for your everyday workshop work, including real jobs where you have the right to use the information. You remain responsible for lawful handling of your customer information, appropriate device access and copies you share. Local storage does not remove our responsibility for the personal information we process or for our own legal obligations.

3. Backups and reliability

Software can contain errors, change unexpectedly or be unavailable. Data may be damaged or lost. Keep separate backups, verify that they can be restored and retain another copy of essential records. Do not rely on the app as the only copy of important business information.

Encryption helps protect stored files but cannot guarantee protection against every attack, an infected computer or someone using an unlocked device. Lock your computer when you step away.

4. Compatibility and updates

Workshop access currently requires desktop Chrome or Edge on Windows or macOS, with permission to access your selected folder. Phones and tablets are not supported. Browser permissions may need renewal. Offline access is not guaranteed.

Save your work before applying an update. Reloading or updating can lock the workshop and require its passphrase again. A software rollback does not itself restore changed local data; backups remain important.

5. Complimentary Pro and your records

Invited participants who accepted their invitation and completed a verified account before 24 October 2026 at 00:00 in Sweden receive three calendar months of complimentary Pro from that date. Invitations that have not been accepted do not qualify. No review, feedback, purchase or payment information is required. The period is fixed and is not restarted by signing in again.

This gift does not create a paid subscription or renew automatically. When it ends, Free access applies unless you separately choose and purchase a paid plan. Your existing paid access, if any, is not replaced by the gift. Closing an account or ending Pro does not transfer ownership of your records or delete your local files. Keep usable independent backups and exports.

These terms do not remove mandatory rights or create a blanket waiver of our responsibilities.

6. Licence and permitted use

Subject to these terms and valid account access, you may use the browser app for your own lawful workshop or business work on supported computers. It does not give you ownership of the software or permission to resell access, distribute a modified service as Watchmakers Bench, or bypass account and security controls.

Do not use the service to distribute malicious files, infringe another person’s rights, gain unauthorized access or intentionally disrupt the app. These restrictions do not remove permissions or exceptions granted by applicable law. Module activation changes the tools shown in your workspace; hiding a module does not itself delete its local records.

Except for normal authorized app use, our written permission, applicable third-party licences or rights that cannot lawfully be restricted, you must not copy, modify, republish, sell, sublicense, redistribute or make available the app, its protected code, original graphics, texts or other protected materials, including as part of another product or service. Normal browser operation and permitted technical copies are not prohibited. You may back up, export and share your own workshop records and documents where you have the right to do so.

You must not reverse engineer, decompile or disassemble the software except to the extent permitted by applicable law. These terms do not restrict mandatory rights to observe, study or test a lawfully used program, make necessary backup copies or obtain interoperability information where the law permits it. They do not give us ownership of general ideas, principles or your independent work.

7. Professional responsibility and calculations

The app organizes and documents work. It does not replace professional inspection, diagnosis, repair judgement, quality control or customer approval. Check service templates, measurements, estimates, reports and status indicators before relying on them.

You are responsible for verifying entered prices, tax treatment, payment records, costs and exchange-rate calculations for your business. Watchmakers Bench is not legal, tax, accounting, valuation or financial advice. Review customer communications before sending them and ensure you have permission to use or share any included photos and documents.

8. Your content, our software and feedback

You retain your rights in the workshop records, photos and documents you enter. Selecting a folder or using the app does not transfer ownership of that content to us. Third-party materials remain subject to their owners’ rights.

The software, original design, branding and app content belong to the provider or their respective licensors. Your right to use the app does not transfer those intellectual-property rights.

Feedback is voluntary and may be used to investigate faults and improve the product. Only submit information you may lawfully share. Sending a suggestion does not promise its implementation, a particular release date or compensation, and does not transfer ownership of unrelated workshop content.

You may not use the Watchmakers Bench name, logo or other branding as the name or identity of your own app, product, service, domain or business, or in a way that suggests our endorsement or an official relationship, without our written permission. Do not remove ownership notices from our protected materials. Truthful references to the app, honest reviews and uses permitted by applicable law are not prohibited. Use of the app is not subject to a blanket confidentiality or non-disparagement obligation.

9. Third-party services and external copies

Online account access depends on Supabase, app delivery on Vercel, and account or support email on the configured mail provider. Optional rate information comes from the ECB. These providers have their own technical limits, availability and privacy terms.

Your own mail application, file-sharing service, operating-system sync and backup destinations are separate services you choose. Review their terms and protect copies stored outside the workshop folder. The web app does not use Apple StoreKit for its access and does not provide the native apps’ Nearby Transfer or Today’s Work workflows.

10. Availability, access restrictions and changes

We aim to make the app useful and reliable, but cannot promise uninterrupted access, complete accuracy or permanent compatibility with every browser or operating-system version. Security fixes and product changes may alter available functions. Planned modules are not commitments to deliver particular features or schedules.

Access may need to be restricted to address misuse, a security threat, a material breach or a legal requirement. Where practical and lawful, an explanation should be provided. Access restrictions do not give us ownership of your local data. Because continued unlocking and export after account loss have not been guaranteed for the app, keep current independent copies of essential records.

Any future paid subscription, renewal, cancellation or refund arrangement must be presented separately before purchase. Complimentary access does not automatically convert into an App Store purchase or another paid plan.

Watchmakers Bench evolves as we improve the app and learn from your feedback. Both small adjustments and larger changes to features, layout and workflows may be made. Features may be added, revised or removed. This does not authorize silent uploads of workshop data, remove your mandatory rights or override the safeguards described in this notice. Material changes to these terms will be identified with a new version and presented for agreement before continued workshop entry; they are not accepted merely by opening this document.

11. Questions and disputes

If something goes wrong, contact us with a description of the issue and the app version, without attaching customer files unless a suitable support process has been agreed. We will seek to understand and resolve the issue. Data-protection complaints may also be made to the relevant supervisory authority.

These terms do not establish a monetary liability cap, exclude responsibility for negligence, or select an exclusive court. Nothing here prevents a claim or remedy available under mandatory law.

These terms concern the browser app only. Separate website and native-app terms are not automatically part of this agreement. Simply opening this page does not accept a new licence or waiver. Any material changes will be communicated as required by applicable law.

Contact & your rights

For account closure, privacy questions or requests about your personal information, email info@watchmakersbench.com. Do not send workshop files or passwords with your request.

Where applicable under data-protection law, you may request access, correction, erasure, restriction or portability of your personal information, and object to certain processing. You may withdraw consent where processing relies on consent. These rights can be subject to legal conditions.

You may complain to your local data-protection authority. In Sweden this is Integritetsskyddsmyndigheten (IMY). This does not affect your right to contact another competent authority.