Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, phone number, business name, address
• Customer data: Contact details, job history, invoices, and notes you enter about your customers
• Payment information: Billing details processed securely through Stripe (we do not store full card numbers)
• Communications: SMS messages, call logs, and support requests
• Photos: Images you capture using the in-app camera for job documentation
• Team data: Technician names, emails, phone numbers, and assigned jobs

1.2 Information Collected Automatically

• Device information: Device model, operating system, browser type, unique device identifiers
• Location data: Precise GPS location (only when you grant permission) for job routing and technician tracking
• Usage data: Pages visited, features used, timestamps, crash reports
• Network information: IP address, internet connectivity status
• Push notification tokens: Device tokens for delivering notifications

1.3 Information from Third Parties

• Google Authentication: Name, email, and profile picture when you sign in with Google
• Stripe: Payment confirmation and subscription status
• QuickBooks: Accounting data when you connect your QuickBooks account

2. Data Safety Summary

The following table summarizes what data we collect, why, and whether it is shared — formatted to align with Apple App Store and Google Play data safety requirements.

We do not sell any personal data to third parties. We do not use personal data for advertising.

3. Device Permissions (Mobile App)

The Fieldz AI mobile app may request the following device permissions. Each is optional and only activated when you grant access:

4. How We Use Your Information

• Provide the Service: Manage jobs, customers, invoices, team, and communications
• Process payments: Handle subscriptions, account balance top-ups, and invoice payments via Stripe
• Send communications: Deliver SMS notifications, appointment reminders, and job updates via Twilio
• AI features: Power automation workflows and AI-assisted responses using OpenAI (no personal data is used to train AI models)
• Push notifications: Send timely alerts about jobs, messages, and account activity
• Improve the Service: Analyze usage patterns, fix bugs, and develop new features
• Security: Detect fraud, prevent abuse, and protect user accounts
• Legal compliance: Meet regulatory obligations and respond to legal requests

5. Third-Party Services & Data Sharing

We share data with the following third-party service providers only as necessary to operate the Service:

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

6. Data Security

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest
• Authentication: Passwords are hashed using bcrypt; JWT tokens for session management
• Secure storage: Sensitive credentials (tokens, API keys) stored in encrypted secure storage on mobile devices
• Access controls: Role-based permissions for team members and technicians
• Payment security: Payment processing handled entirely by Stripe (PCI DSS Level 1 certified); we never store full card numbers
• Infrastructure: Hosted on secure cloud infrastructure with regular security updates

While we implement industry-standard protections, no system is 100% secure. We encourage you to use strong passwords and enable available security features.

7. Data Retention & Deletion

Retention

• Account data is retained for as long as your account is active
• Usage logs and analytics data are retained for up to 24 months
• Payment records are retained as required by tax and financial regulations
• SMS and call logs are retained for 12 months unless you delete them earlier

Account Deletion

You may request deletion of your account and associated data at any time by:

• Going to Settings > Account > Delete Account in the app
• Emailing privacy@fieldzai.com with your account email

Upon receiving a deletion request, we will permanently delete your personal data within 30 days, except where retention is required by law. Customer data you entered (jobs, invoices, etc.) will also be deleted. This action is irreversible.

8. Your Privacy Rights

For All Users

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request permanent deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails; disable push notifications
• Withdraw consent: Revoke any previously granted permission at any time through your device settings

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information

European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access, rectify, erase, and port your data
• Right to restrict or object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal bases for processing: contract performance, legitimate interest, consent, and legal obligation.

To exercise any of these rights, contact privacy@fieldzai.com. We will respond within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and third-party service providers are located. These countries may have different data protection laws.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) where required by GDPR, and ensuring third-party providers maintain adequate security standards.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@fieldzai.com.

11. Cookies & Tracking Technologies

Our web platform uses:

• Essential cookies: Required for authentication and core functionality (session tokens)
• Analytics: PostHog for anonymized product usage analytics
• Local storage: To persist your login session and preferences

Our mobile app does not use cookies. It uses secure on-device storage (Expo SecureStore) for authentication tokens.

We do not use third-party advertising cookies or cross-app tracking. We respect "Do Not Track" browser signals.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notification via email or in-app alert for significant changes
• Post the updated policy on our website and within the app

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy. We encourage you to review this page periodically.