Privacy Policy

1. Information we collect

• Account information — name, email, phone number, password, role, business details, and your language preference. If you sign in with Google, we receive your name and email from Google.
• Business data you enter — customers, properties, quotes, jobs, schedules, invoices, payments, messages, notes, photos and videos, reviews, and website content.
• Voice input and microphone (optional) — Crew Chief, our in-app assistant, can take spoken input. If you choose to use it and allow microphone access, the clip you record is sent to our transcription provider (OpenAI) to be turned into text, and that text is then handled like any other Crew Chief message. We do not store your voice recordings — the clip is relayed for transcription and discarded. The microphone is used only while you are actively recording a voice turn, never in the background, and you can deny or revoke access at any time in your device settings. Where your device or browser offers its own built-in speech recognition, the app can use that instead, in which case the audio does not leave your device. Voice is entirely optional — every Crew Chief feature also works by typing.
• Photos, videos, and camera (optional) — you can attach images and video to jobs, checklist items, inventory items, chemical logs, estimates and invoices, and your business profile and website. On mobile, the app asks for camera and photo-library access the first time you attach a file so you can either take a new photo or pick an existing one; you can deny or revoke that access in your device settings and still use the rest of the Service. Files you attach are stored as your business data and shown to the people you share the related record with.
• Electronic signatures — when a document (such as an estimate) is accepted or signed in the Service, we store the typed name, an image of the drawn signature, and the time of signing, and display them on the related documents (for example, the estimate, invoice, and their PDF versions).
• Payment information — processed by our payment provider (Stripe). We receive limited details such as payment status, amounts, method, and the last four digits or card brand. We do not store full card numbers. Payments a business records as received outside the Service (for example, cash or check) are stored as business data.
• Usage and device information — log data, approximate location derived from addresses you enter, device and browser type, and product analytics about how the Service is used. We do not collect precise or background location from your device. If you turn on notifications we store what is needed to deliver them: on the web, your browser’s push subscription (a delivery address and keys issued by your browser); in our mobile apps, a push token issued by Apple or Google for that device, along with the platform and when the token was last seen. You can revoke either at any time in your browser or device settings.
• Business-website visitor data — when someone visits a website a business hosts through Conduit, we record limited analytics for that business (the page viewed, how long it was viewed, and a hashed identifier derived from the visitor’s connection and browser — we do not store the raw IP address with the visit). Contact details a visitor submits through a website form are delivered to that business as its business data.
• Support communications — emails and reports you send us are stored so we can respond.

2. How we use information

• To provide, operate, secure, and improve the Service, including product analytics about how it is used.
• To process payments and platform fees (including charging saved payment methods for accrued platform fees), and to prevent fraud and abuse.
• To send operational emails, SMS messages, and browser push notifications you or your customers have asked for.
• To display content you choose to publish — for example, a business’s public profile and website, and reviews customers post on them.
• To provide customer support and respond to your requests.
• To comply with legal obligations and enforce our Terms.

3. How we share information

We do not sell your personal information. We share information only as needed to run the Service:

• With your direction — for example, a business’s messages, quotes, and invoices are shared with the customers they’re sent to.
• Service providers — vendors that process data on our behalf under contract: application hosting (Vercel), database and file storage (Supabase), payment processing (Stripe), email delivery (Resend), SMS delivery (Twilio), push-notification delivery (Apple and Google for our mobile apps; your browser’s push service on the web), maps, address lookup and geocoding (Google), bot and abuse protection (Cloudflare), product analytics (PostHog), and the AI providers behind features such as estimate drafting, the Crew Chief assistant, and voice transcription (OpenAI). These vendors may only use the data to provide their service to us.
• Integrations you connect — if a business links a third-party account such as QuickBooks Online, we exchange the relevant business data (for example customers, invoices, and items) with that service at the business’s direction; disconnecting the integration stops the exchange.
• Legal and safety — when required by law, to enforce our Terms, or to protect the rights, property, or safety of Conduit, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Mobile information & SMS consent

Text messaging originator opt-in data and consent are not shared with any third parties or affiliates for marketing or promotional purposes. We do not sell your personal information. Phone numbers collected for messaging are used solely to communicate with you about your service requests — such as quotes, appointment and job updates, invoices with payment links, and receipts — and are shared only with the service providers that help us operate the platform (such as our SMS and payment processors) under confidentiality obligations. You can opt out of text messages at any time by replying STOP; see the SMS Messaging Terms in our Terms & Conditions.

5. Data retention and deleting your account

We keep information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

You can delete your account and its data yourself, at any time. Two ways: in the app under Settings, or from our account deletion page — a web page that works without installing the app and without signing in first (you confirm with your email and password). Deleting your account deletes or de-identifies your personal information and your business data, except where we must retain records by law (for example, payment and tax records). You can also email support@conduitapp.net and we will handle it for you.

6. Security

We use reasonable technical and organizational measures to protect your information, including access controls and tenant isolation so each business only sees its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

• Access and update your account information in the app.
• Opt out of non-essential messages using the controls in your settings or the messages themselves.
• Control microphone, camera, photo-library and notification access for our mobile apps in your device settings, and notification access on the web in your browser settings. Denying any of them still leaves the rest of the Service usable.
• Delete your account and its data at any time from Settings in the app or from our account deletion page, or request a copy of your personal information by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

8. Cookies and similar technologies

We use cookies and similar technologies (including local storage, and their equivalents inside our mobile apps) that are necessary to sign you in, keep you signed in, remember your language and theme, and keep the Service secure, and we use analytics technologies (PostHog) to understand how the Service is used so we can improve it. We do not use advertising cookies or third-party ad tracking. You can control cookies through your browser, but some features may not work without them.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. Your continued use of the Service after the changes take effect means you accept the updated Policy.

11. Contact

Questions about this Policy or your information? Contact us at support@conduitapp.net.