How Baton protects your data.

• Photographs and generated handover files are saved in your own Google Drive.
• Baton asks Google only for the narrow drive.file permission, so it can see only files it created, never the rest of your Drive.
• A photo reaches Baton's servers only on its way to your Drive. The copy there is deleted once it lands.
• You can disconnect Drive in Settings at any time.

The equipment rows (manufacturer, model, serial, ratings and notes) are held in Baton's database, hosted in Ireland (EU). The privacy notice lists each item and why it is kept.

• Office accounts are confirmed by a six-digit code sent to the email address before a session is issued.
• An invitation can only be accepted by the address it was sent to.
• Admins decide who sees which project.

• Crew phones join with a project code or QR and need no account.
• Repeated wrong codes are locked out, by device and by network address.
• A project code can be revoked or replaced at any time. Revoking cuts every connected phone.
• A phone can change or delete only the captures it took itself.

• Everything is served over HTTPS.
• The site cannot be framed by other sites, and other browser protections are set on every page.
• Nameplate photographs sent to the AI models are not used by the provider to train models.

Baton has no formal security certification or independent audit, and it makes no uptime guarantee. It is run by one person. If your company needs a security questionnaire answered, email hello@hustleworld.app and the answers will be honest ones.