Privacy Policy
The formal policy is with counsel ahead of commercial launch. What follows is an accurate plain-English statement of how the product actually behaves today; the technical detail lives in the data handling docs.
What is collected
- Account data: the people who sign in, their roles and their authentication details.
- Business data you enter: clients, properties, jobs, quotes, invoices, time entries, photos and notes. This is yours; we are processing it on your behalf.
- Operational logs: requests, errors and audit entries, kept to run and secure the service.
How AI features use it
The assistant answers your account’s questions using your account’s data, as the person asking. An MCP key reaches a narrower set of tools: no sends, no payments, and no access notes or leave reasons at all. In neither case is your data used to train models.
Who it is shared with
Named sub-processors only: payment processing (Stripe, on your own connected account), email delivery, file storage and AI inference. Each is listed with the region it runs in. Nothing is sold, and nothing is shared for advertising.
Your rights
Export everything at any time, free. Records you delete are soft-deleted for 30 days and then removed, except where financial record-keeping law requires retention, which is stated before you confirm. Closing an account removes everything within 30 days.
Contact
[email protected] for any question about this, including a data request on behalf of one of your own customers.