Privacy
policy.

1. Information We Collect

We collect information you provide directly and information generated through your use of the platform:

• Account Information: Name, email address, company name, and password when you register.
• Business Data: Project details, client information, estimates, invoices, time entries, and pipeline data you create within the app.
• Billing Information: Payment method details processed securely through Stripe. We do not store full card numbers.
• Usage Data: Pages visited, features used, and actions taken within the app to improve product quality.
• Device & Technical Data: IP address, browser type, and operating system for security and performance monitoring.
• GPS & Location Data: If you enable GPS clock-in (Crew+ feature), we collect latitude/longitude at clock-in time. Location is never tracked continuously without your active use of the feature.
• QuickBooks Data: If you connect QuickBooks, we receive and store invoice and payment data via the Intuit API to sync with your account.
• Google Account Data (Gmail): If you connect Gmail, we access email threads, message content, labels, and metadata in your connected Gmail inbox. We also store encrypted OAuth tokens (access token and refresh token) using AES-256 encryption.
• Google Account Data (Calendar): If you connect Google Calendar, we access calendar events, titles, dates, times, attendees, and calendar metadata to display your schedule and sync project appointments.
• Google Sign-In: If you sign in with Google, we access your name, email address, and profile photo for account authentication.
• Microsoft/Outlook Data: If you connect Outlook, we access email threads, message content, and calendar events from your connected Outlook account. Microsoft OAuth tokens are stored encrypted.
• Email Marketing Data: Contact email addresses used for broadcast campaigns. Email engagement data: open events (via tracking pixel), click events (via link tracking). Unsubscribe preferences and opt-out records.
• AI Processing Data: Content you submit to AI-powered features (AI Quote generation, AI email drafting, AI contract generation, AI template builder) is sent to Anthropic's Claude API for processing. AI features process your business data to generate requested content — we do not use your data to train AI models.
• Phone Number & SMS Data: Your mobile phone number provided during registration for identity verification via SMS. We send one-time verification codes through Twilio's Verify API. SMS verification codes are generated and managed entirely by Twilio — we do not store SMS message content. Delivery metadata (phone number, timestamp, verification status) is retained by Twilio per their data retention policy.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the JobSite Viewer platform
• Process payments and manage your subscription
• Sync data with connected third-party services (QuickBooks)
• Display your Gmail and Outlook inbox within the app and send emails to clients on your behalf
• Sync Google Calendar and Outlook Calendar events with your project schedules and deadlines
• Process content through Anthropic Claude AI to power AI-assisted features (quotes, emails, contracts, templates) \u2014 strictly limited to generating requested outputs
• Send marketing emails and broadcast campaigns to your contacts (only contacts you manage as clients)
• Track email engagement (opens, clicks) for broadcasts you send through the platform
• Honor unsubscribe requests from your contacts
• Send SMS verification codes during registration to confirm phone number ownership
• Send transactional SMS notifications (invoice payments, contract signatures, security alerts)
• Send transactional emails (receipts, password resets, onboarding)
• Respond to support requests
• Monitor for fraud, abuse, and security threats
• Comply with legal obligations

We do not sell your data. We do not use your data for advertising.

3. Data Sharing

We share data only with the following categories of third-party service providers necessary to operate the platform:

We do not share your data with any other third parties except as required by law.

4. Google API Services \u2014 Limited Use Disclosure

JobSite Viewer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Accessed via Google APIs

When you connect your Google account, we access:

Limited Use Commitment

We use Google user data exclusively to provide JobSite Viewer's features directly to you. Specifically, we:

• Do NOT use Google data for advertising, including targeted, personalized, or retargeted advertising
• Do NOT sell or transfer Google user data to third parties, data brokers, or information resellers
• Do NOT use Google data to train AI or machine learning models
• Do NOT use Google data for creditworthiness determinations, lending decisions, or insurance underwriting
• Do NOT allow humans to read your Google data except as required for security purposes, to comply with applicable law, or with your explicit consent
• Only use data to provide features that are visible and prominent in the JobSite Viewer interface

Revoking Google Access

You can revoke access at any time by:

1. Going to Settings → Integrations → Disconnect Gmail or Disconnect Google Calendar
2. Or visiting Google Account Permissions and removing JobSite Viewer

Upon disconnection, we immediately revoke your OAuth token with Google and permanently delete all stored Google credentials from our database.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, all your data — including any Google user data (OAuth tokens, cached Gmail messages, and synced Calendar events) — will be permanently deleted within 30 days, except where we are required to retain it for legal or tax compliance purposes.

• Google OAuth tokens: Deleted immediately upon disconnecting your Google integration in Settings. Token revocation is sent to Google at time of deletion.
• Google Calendar and Gmail data: Synced calendar events and email metadata are cached in our database solely to provide in-app display. This data is refreshed periodically while your integration is active. Upon disconnecting your Google integration, all cached Google Calendar events and Gmail data are permanently deleted within 7 days. Upon account deletion, all Google user data including tokens, cached emails, and calendar events is permanently deleted within 30 days.
• Email marketing engagement data: Retained for up to 2 years to provide campaign analytics, then aggregated or deleted.
• AI-processed content: We do not store the content sent to AI APIs beyond the immediate processing request. AI-generated outputs (quotes, emails, etc.) that you save are stored as part of your business data.
• SMS & communication data: SMS verification codes are generated and managed by Twilio — we do not store SMS message content. Delivery metadata (phone number, timestamp, verification status) is retained by Twilio per their data retention policy. Portal messages and email communications sent through the platform are stored in our database and can be deleted upon request. Your phone number is retained as long as your account is active and deleted within 30 days of account deletion.

6. Security

We use industry-standard measures to protect your data including encrypted connections (HTTPS/TLS), encrypted storage of sensitive credentials, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

• Google and Microsoft OAuth tokens are encrypted at rest using AES-256 encryption before storage
• OAuth tokens are never logged or exposed in error messages
• We use HTTPS/TLS for all data transmission including all Google and Microsoft API calls

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Disconnect third-party integrations (QuickBooks, Gmail, Google Calendar, Outlook) at any time

To exercise any of these rights, contact us at support@jobsiteviewer.com.

8. Email Marketing & Communications

Broadcasts you send through JobSite Viewer:

• You are responsible for ensuring you have obtained proper consent from your contacts
• You are responsible for compliance with applicable email laws including CAN-SPAM (US), CASL (Canada), and GDPR (EU) as applicable to your business
• Every broadcast email sent through our platform includes an unsubscribe link as required by law
• We honor all unsubscribe requests immediately and automatically exclude unsubscribed contacts from future broadcasts

Transactional emails from JobSite Viewer:

We send transactional emails to you (the contractor) for account operations: password resets, billing receipts, team invitations, and security alerts.

9. SMS Communications & Phone Data

10. Cookies

We use session cookies to keep you logged in and functional cookies necessary for the platform to operate. We do not use advertising or tracking cookies.

11. Children's Privacy

JobSite Viewer is a business tool not directed at children under 13. We do not knowingly collect personal information from children under 13.

12. International Users & GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following applies:

Lawful Basis for Processing:

• Contract performance: processing necessary to provide the JobSite Viewer service you have subscribed to
• Legitimate interests: security monitoring, fraud prevention, product improvement
• Consent: email marketing communications, optional integrations (Google, Microsoft)
• Legal obligation: tax records, legal compliance

Your Additional Rights (EEA/UK):

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with your local supervisory authority

Data Transfers:

Your data is stored and processed in the United States. We use Standard Contractual Clauses (SCCs) where required for international data transfers.

Contact for EU inquiries: privacy@jobsiteviewer.com

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Continued use after changes constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy, contact us at: