Data protection & hosting
What WissTrack stores, where it is kept, who can see it and how you stay in control — describing the product as it is built today.
What we store
- Accounts: name, email address, a generated username and your role in the lab. Passwords are held by Firebase Authentication — WissTrack never stores them.
- Inventory: the samples, reagents, supplies and storage units your lab records, with their locations, quantities, owners and notes.
- Audit log: who added, moved, used or changed what, and when — so a lab can always answer “who took the last vial?”.
- Requests: what you send us from the pilot and demo form or the support form — name, email, lab name and your message.
Where it is kept
The database and sign-in run on Google Firebase (Cloud Firestore and Firebase Authentication), located in the EU.
The website is served by Netlify, and its server code runs in the USA.
Encryption
Every connection to WissTrack uses HTTPS (TLS), so data is encrypted on its way between your device and our servers.
Google Cloud encrypts the database at rest.
WissTrack is not end-to-end encrypted: the server has to read your inventory to search it, raise alerts and produce exports.
Who can see your data
Every record belongs to exactly one lab, and every request is checked against the signed-in person’s lab — one lab can never read another lab’s inventory.
Within a lab, roles decide who can do what: the admin manages accounts, sub-admins manage storage and settings, members do bench work.
Signing in sets a signed, httpOnly session cookie. Scripts on the page cannot read it, and it cannot be edited to impersonate someone else.
Label photos
When you photograph a label to fill in an item, the photo is sent to Groq, an AI inference service, only to read the label. WissTrack does not store the photo.
Where no Groq key is configured, the label is read on your device instead and the photo never leaves it.
Your data, your control
Export your whole inventory and the activity log at any time from Export & reports, as Excel files that import straight back.
Deleted items stay in Recently deleted so a mistake can be undone; clearing them removes them for good.
To delete an account or your whole lab, email contact@wisstrack.com from the lab admin’s address and we will remove it.
Services that process your data
- Google Firebase — database and sign-in
- Netlify — website hosting and server code
- Groq — label reading, only when you photograph a label
We never sell your data or use it for advertising.
Questions
Write to contact@wisstrack.com with any question about your data.