Privacy policy

What we collect

Account details: your name, email address and a one-way hash of your password (we cannot read the password itself), plus the names and emails of people you invite.

Business records you enter: your business details and logo, your clients’ names and contact details, estimates, invoices, change orders, payments, notes, schedules and settings.

Connection settings you choose to add: a Gmail app password for sending your documents from your own address, and a restricted Stripe key for taking card payments into your own Stripe account. Both are encrypted in our database with a key held only by the server.

Technical records: the time and network address of sign-ins and other account actions, kept in an audit log so you can see who did what.

Billing: your plan and payment status. Your card number goes directly to Stripe and never reaches us.

How we use it

To provide the service: show you your records, produce PDFs, send the emails you ask us to send, take payments you set up, and bill your subscription.

To keep the service safe: detect abuse, investigate problems and keep backups.

To contact you about your account: receipts, failed payments, password resets, invitations and notices about changes to the service or these terms. We do not send marketing email without asking first.

Your clients’ data

The details of your clients are entered by you and belong to your business. We process them only on your instructions, as the service needs, and we do not contact your clients ourselves. You are responsible for telling your clients how you handle their details, and for honouring their requests about it; export and deletion from Settings help you do that.

Who else sees it

The companies that run parts of the service for us, each under their own privacy terms and only for that purpose: [hosting provider] (runs the application), [database provider] (stores the data, encrypted at rest, with daily backups), Stripe (subscription billing), and [email provider] (sends password resets and invitations). Documents you email to clients go through your own Gmail account.

We disclose data if the law requires it, or to protect the service or someone’s safety. If the business that runs the service is ever sold, your data goes with it under this same policy, and we will tell you.

We do not sell personal information, and we do not share it with advertisers.

Cookies

The service sets one cookie, which keeps you signed in for up to 30 days. There are no advertising or tracking cookies.

How we protect it

All traffic uses HTTPS. Each business’s data is separated from every other’s inside the service, and a signed-in person can only ever reach their own business. Passwords are stored as slow salted hashes. Connection secrets are encrypted. Sign-in attempts are limited. The database is backed up daily.

No system is perfectly secure. If we learn of a breach that affects your data we will tell you without undue delay.

How long we keep it

For as long as your account is open. After it is closed we delete its data within 90 days, except what we must keep for tax or legal reasons, and backups age out on their own schedule after that.

Your choices

You can see and change your records in the app, export everything from Settings, and ask us to correct or delete your account’s data. You can remove your Gmail and Stripe connections at any time.

To make a request, email [support email] from the address on your account.

Children and changes

The service is for businesses and not directed at children under 16; we do not knowingly collect their information.

We may update this policy. We will email the account owner about any material change before it takes effect.