Privacy notice

What we collect and why

• Account details — name, email address, company name, phone number and login credentials. Used to create and secure your account and to provide the service. Legal basis: performance of our contract with you.
• Business data you enter — client names and addresses, quotes, certificates, job records, photos, timesheets and materials. Used only to provide the service to you and store it on your behalf. Legal basis: performance of our contract.
• Team member data — names, emails, roles, hours worked, pay rates and, where you turn the feature on, job location data for clocking in. Used to provide the scheduling and timesheet features you have chosen. Legal basis: performance of our contract; you are responsible for telling your staff how you use these features.
• Usage and technical data — IP address, device and browser type, pages visited, error reports. Used for security, fraud prevention, diagnosing faults and improving the product. Legal basis: our legitimate interest in running a secure, reliable service.
• Support messages — anything you send us through the support form or by email. Used to answer you and to improve our help material. Legal basis: legitimate interest and contract performance.
• Marketing preferences — where you opt in to product emails. Legal basis: consent, which you can withdraw at any time.

Who we share it with

• Service providers that host and run the platform for us — cloud hosting and database, email delivery, mapping and address lookup, and error monitoring. They act on our instructions only.
• Paddle, our Merchant of Record, who handles the sale of subscriptions, payments, tax compliance, invoicing and subscription management.
• Professional advisers such as our accountants and lawyers, where needed.
• Authorities, where we are required to disclose information by law.

We do not sell personal data, and we do not share it for third-party advertising.

International transfers

Our systems are hosted in the UK and EEA. Where a supplier processes data outside the UK or EEA, we rely on UK adequacy decisions or the International Data Transfer Addendum to the EU Standard Contractual Clauses to protect it.

How long we keep it

We keep your account and business data for as long as your subscription is active, and for 30 days after it ends so you can export your records. After that it is deleted or anonymised. Some records — invoices and tax records in particular — are kept for up to six years where the law requires it. Support messages are kept for two years.

Your rights

Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive a portable copy, and withdraw consent where we rely on it. Contact us and we will respond within one month. If you are not happy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

We use appropriate technical and organisational measures to protect your data: encryption in transit and at rest, strict per-account access rules so one firm can never see another's records, role-based permissions inside your account, optional two-factor authentication, and audited support access that requires your explicit approval.

Cookies

We use essential cookies and local storage only — to keep you signed in, remember your preferences and keep the app secure. We do not use advertising or third-party tracking cookies. You can clear or block cookies in your browser, but the app will not stay signed in if you do.