1. Introduction

Fieldkit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our field service management software and related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, phone number, business name, and address
Payment Information: Credit card details (processed securely by Stripe)
Business Data: Customer records, job details, estimates, invoices, and communications
Communications: Messages you send through the Service or to our support team

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the Service
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, referring URLs
Call Tracking Data: Call recordings, duration, and phone numbers (when enabled)

2.3 Information from Third Parties

Advertising Platforms: Campaign performance data from Google Ads and Meta
Payment Processors: Transaction status and payment confirmations from Stripe
Communication Providers: SMS delivery status from Twilio

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process transactions and send related information
Send administrative messages, updates, and security alerts
Respond to your comments, questions, and support requests
Monitor and analyze usage patterns and trends
Detect, prevent, and address technical issues and fraud
Personalize and improve your experience
Send marketing communications (with your consent)

4. How We Share Your Information

We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf (e.g., Stripe for payments, Twilio for communications, Vercel for hosting)
Business Transfers: In connection with a merger, acquisition, or sale of assets
Legal Requirements: When required by law or to protect our rights
With Your Consent: When you have given us permission to share

We do not sell your personal information to third parties. Mobile phone numbers and SMS opt-in data will not be shared with or sold to third parties or affiliates for marketing or promotional purposes.

5. Data Processors

We use the following third-party service providers (sub-processors) to operate and improve the Service. Each processor only receives data necessary to perform their specific function:

Infrastructure & Hosting

Vercel: Application hosting and content delivery
Supabase: Database hosting and authentication
Upstash: Rate limiting and caching
Inngest: Background job processing and task scheduling

Payments & Accounting

Stripe: Payment processing and subscription management
QuickBooks Online: Accounting integration and invoice synchronization

Communications

Resend: Transactional email delivery
Twilio: SMS messaging and call tracking

Marketing & Advertising (Pro Plan)

Google: Google Ads, Local Service Ads, Business Profile, and Places API
Meta: Facebook and Instagram advertising

Monitoring & AI

Sentry: Error tracking and performance monitoring
Anthropic: AI-powered recommendations and content assistance

All sensitive credentials and OAuth tokens are encrypted before storage. We regularly review our sub-processors to ensure they maintain appropriate security standards.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. After account termination, we retain your data for 30 days to allow for data export, after which it is permanently deleted.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Regular security assessments and penetration testing
Access controls and authentication requirements
Secure data centers with physical security measures
Employee training on data protection practices

8. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Portability: Request a copy of your data in a portable format
Opt-Out: Unsubscribe from marketing communications at any time
Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at support@gofieldkit.com

9. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information about your use of the Service. You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

11. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

13. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

14. SMS Messaging Program

When home services contractors use the Fieldkit platform to send text messages to their customers, the following applies to the message recipients:

Fieldkit facilitates transactional SMS messages sent by home services contractors to their customers, including appointment reminders, missed call follow-up notifications, estimate and invoice delivery notifications, and job completion follow-ups. Messages are sent only to individuals who have provided consent to the contractor to receive text messages.

Mobile phone numbers and SMS opt-in consent data collected through the Fieldkit messaging program will not be shared with or sold to third parties or affiliates for marketing or promotional purposes at any time. This restriction applies to all mobile information collected in connection with Fieldkit's SMS messaging services.

Message frequency varies based on service activity, typically 2-8 messages per service engagement. Message and data rates may apply depending on your mobile carrier and plan. Recipients may opt out at any time by replying STOP to any message. Reply HELP for assistance or contact support@gofieldkit.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Fieldkit
Email: support@gofieldkit.com