Privacy Policy

1. Information we collect

• Account information — name, email, phone number, password, role, business details, and your language preference. If you sign in with Google, we receive your name and email from Google. If you sign in with Apple, we receive your name and email from Apple — or, if you chose to hide your email, an Apple private relay address that forwards to it.
• Business data you enter — customers, properties, quotes, jobs, schedules, invoices, payments, messages, notes, photos and videos, reviews, and website content.
• Voice input and microphone (optional) — Crew Chief, our in-app assistant, can take spoken input. If you choose to use it and allow microphone access, the clip you record is sent to our transcription provider (OpenAI) to be turned into text, and that text is then handled like any other Crew Chief message, including being kept in your Crew Chief history. We do not store your voice recordings — Conduit relays the clip for transcription and does not keep it; the transcription provider may retain it for a limited time under its own API data policy (for example, to monitor for abuse). The microphone is used only while you are actively recording a voice turn, never in the background, and you can deny or revoke access at any time in your device settings. Where transcription through our provider is not available, the app can use your browser’s built-in speech recognition instead; in that case your browser handles the audio, and most browsers send it to their maker (for example Google or Apple) to be transcribed under that company’s own terms. Voice is entirely optional — every Crew Chief feature also works by typing.
• Photos, videos, and camera (optional) — you can attach images and video to jobs, checklist items, inventory items, chemical logs, estimates and invoices, and your business profile and website. On mobile, the app asks for camera and photo-library access the first time you attach a file so you can either take a new photo or pick an existing one; you can deny or revoke that access in your device settings and still use the rest of the Service. Files you attach are stored as your business data and shown to the people you share the related record with.
• Crew location (workers only, and only if you turn it on) — if the business you work for enables crew location and you agree to share, Conduit records your device’s location while you are clocked in, so that business’s owner and admins can see where the crew is and the route driven between jobs. What this means in practice:
  • Collection runs in the background — including while the app is closed and while the phone is locked — because workers drive between sites with the phone in a pocket or a mount.
  • It runs only while you are clocked in. It starts when you clock in and stops when you clock out. Nothing is recorded off the clock.
  • Each worker opts in individually. A business cannot turn it on for you, and you can stop sharing at any time from the app or by revoking location access in your device settings — either one stops collection.
  • Only the owner and admins of that business can see it. Other workers cannot, and it is never shared with other businesses.
  • Records are deleted automatically 30 days after they are collected.
  • While it is running, the app shows a continuous notification on Android and your phone shows its own system location indicator, so it is never collecting without a visible sign.
  • If a position is reported by a mock-location app, we record that fact and show it to the business rather than presenting it as a genuine reading.
• Electronic signatures — when a document (such as an estimate) is accepted or signed in the Service, we store the typed name, an image of the drawn signature, and the time of signing, and display them on the related documents (for example, the estimate, invoice, and their PDF versions).
• Payment information — processed by our payment provider (Stripe). We receive limited details such as payment status, amounts, method, and the last four digits or card brand. We do not store full card numbers. Payments a business records as received outside the Service (for example, cash or check) are stored as business data.
• Usage and device information — log data, approximate location derived from addresses you enter, device and browser type, and product analytics about how the Service is used. Precise location from your device is collected only through the crew location feature described above, and only from workers who have turned it on. If you turn on notifications we store what is needed to deliver them: on the web, your browser’s push subscription (a delivery address and keys issued by your browser); in our mobile apps, a push token issued by Apple or Google for that device, along with the platform and when the token was last seen. You can revoke either at any time in your browser or device settings.
• Business-website visitor data — when someone visits a website a business hosts through Conduit, we record limited analytics for that business (the page viewed, how long it was viewed, and a hashed identifier derived from the visitor’s connection and browser — we do not store the raw IP address with the visit). Contact details a visitor submits through a website form are delivered to that business as its business data.
• Support communications — emails and reports you send us are stored so we can respond.

2. How we use information

• To provide, operate, secure, and improve the Service, including product analytics about how it is used.
• To process payments and software fees (including charging saved payment methods for accrued software fees), and to prevent fraud and abuse.
• To send operational emails, SMS messages, and browser push notifications you or your customers have asked for, and — when a business uses Conduit’s marketing tools — that business’s promotional emails and text messages to its customers, which each customer can opt out of at any time.
• To display content you choose to publish — for example, a business’s public profile and website, and reviews customers post on them.
• To show a business where its crew is while they are clocked in, and the route driven between jobs — only where that business has turned the feature on and the worker has separately agreed to it.
• To provide customer support and respond to your requests.
• To comply with legal obligations and enforce our Terms.

3. How we share information

We do not sell your personal information. We share information only as needed to run the Service:

• With your direction — for example, a business’s messages, quotes, and invoices are shared with the customers they’re sent to.
• With the business you work for — if you are a worker who has turned on crew location, the positions recorded while you are clocked in are shown to that business’s owner and admins. They are not shown to other workers, to other businesses, or to your customers.
• Service providers — vendors that process data on our behalf under contract: application hosting (Vercel), database and file storage (Supabase), payment processing (Stripe), email delivery (Resend), SMS delivery (Twilio), push-notification delivery (Apple and Google for our mobile apps; your browser’s push service on the web), maps, address search and geocoding (Google; the OpenStreetMap Foundation, for Nominatim geocoding and OpenStreetMap map tiles; Komoot, for Photon address search; and Esri, for satellite map imagery), bot and abuse protection (Cloudflare), product analytics (PostHog), and the AI providers behind features such as estimate drafting, the Crew Chief assistant, and voice transcription (OpenAI). These vendors may only use the data to provide their service to us. The map providers receive the addresses being searched for or located and, when a map is shown, the area being viewed along with your device’s IP address. Komoot processes address searches in Germany and the OpenStreetMap Foundation is based in the United Kingdom, so that information may be transferred to and processed outside the United States.
• Integrations you connect — if a business links a third-party account such as QuickBooks Online, we exchange the relevant business data (for example customers, invoices, and items) with that service at the business’s direction; disconnecting the integration stops the exchange.
• Legal and safety — when required by law, to enforce our Terms, or to protect the rights, property, or safety of Conduit, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Mobile information & SMS consent

Text messaging originator opt-in data and consent are not shared with any third parties or affiliates for marketing or promotional purposes. We do not sell your personal information. Phone numbers collected for messaging are used to send you the text messages you agreed to: service messages about your requests and work — such as quotes, appointment and job updates, invoices with payment links, and receipts — and, from businesses you work with through Conduit, occasional promotional offers. They are shared only with the service providers that help us operate the platform (such as our SMS and payment processors) under confidentiality obligations. You can opt out of all text messages at any time by replying STOP to any of them; to stop only one business’s promotional texts, use the preferences link in that business’s marketing emails. See the SMS Messaging Terms in our Terms & Conditions.

5. Data retention and deleting your account

We keep information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Crew location records are an exception to the above and are deleted automatically 30 days after they are collected, whether or not your account stays active and whether or not anyone asks. Crew Chief conversation history is likewise deleted automatically 30 days after each message.

You can delete your account yourself, at any time. Two ways: in the app under Settings, or from our account deletion page — a web page that works without installing the app and without signing in first (you confirm with your email and password). Deleting your account removes your login and your profile (name, email, phone, address and photo), along with your posts on the job board. What is kept, and why: the records a business keeps about its own work — its customers, estimates, jobs, invoices, payments, messages, notes and photos — stay with that business, no longer linked to your account, because they are that business’s records and some of them (for example, payment and tax records) must be retained by law. If you own a business, deleting your account closes it: its website and custom domain, its connected integrations (such as QuickBooks Online) and its contact details are removed, its campaigns and reminders stop, and its workers are released — but its customer, job and invoice records are kept, so its customers keep their history. If you are a customer of a business on Conduit, you can ask that business to erase your details: it can remove your name, contact details, addresses, messages and uploads while keeping its invoices and payments. You can also email support@conduitapp.net and we will handle it for you.

6. Security

We use reasonable technical and organizational measures to protect your information, including access controls and tenant isolation so each business only sees its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

• Access and update your account information in the app.
• Opt out of non-essential messages using the controls in your settings or the messages themselves.
• Control microphone, camera, photo-library, location and notification access for our mobile apps in your device settings, and notification access on the web in your browser settings. Denying any of them still leaves the rest of the Service usable.
• If you are a worker sharing location, stop sharing at any time from the app — you do not need to ask your employer, and collection stops on the next update. Revoking location access in your device settings stops it too.
• Delete your account at any time from Settings in the app or from our account deletion page (see “Data retention and deleting your account” above for what is removed and what is kept), ask a business you are a customer of to erase your details, or request a copy of your personal information by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

8. Cookies and similar technologies

We use cookies and similar technologies (including local storage, and their equivalents inside our mobile apps) that are necessary to sign you in, keep you signed in, remember your language and theme, and keep the Service secure, and we use analytics technologies (PostHog) to understand how the Service is used so we can improve it. The only advertising technology we use is the Google tag on our ad landing pages, described below. You can control cookies through your browser, but some features may not work without them.

Measuring our ads — When you reach Conduit from one of our Google ads, the link carries Google’s ad click ID (gclid). We keep it with the account you create, and we use the Google tag on our ad landing pages (conduitapp.net/start) to tell Google which ads led to a signup and, later, which led to a first invoice. That is all we use it for. We don’t share your customers’ details, or what’s on your invoices, with Google for this.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. Your continued use of the Service after the changes take effect means you accept the updated Policy.

11. Contact

Questions about this Policy or your information? Contact us at support@conduitapp.net.