Privacy Policy

Information you provide

When you create an account, we receive your email address, owner name, and company name. Supabase Auth processes your password and account authentication. Your contractor profile can include your company name, owner name, phone number, timezone, and an uploaded business logo.

You can add lead and customer names, phone numbers or email addresses, job types, estimated values, statuses, notes, and follow-up dates and times. Only enter information you are entitled to use. Avoid putting passwords, payment-card details, government identifiers, or sensitive health or financial records in lead notes.

If you contact us, we receive the information you choose to include in the request.

How the information is used

We use this information to create and authenticate accounts, display and update profiles and leads, determine subscription access, schedule follow-ups, send account and reminder emails, troubleshoot problems, and respond to support or data requests.

The reminder worker checks due follow-ups and subscription eligibility. Resend receives the contractor’s recipient email address and reminder content, including the lead’s name, job type, due time, and timezone. These reminders go to the contractor, not automatically to the contractor’s customers. Delivery records, prepared email content, delivery identifiers, and retry status support reliable processing and duplicate prevention.

The current app does not provide AI-generated replies, automatic customer texts, or marketing campaigns. The JobFlow AI name does not mean your lead records are currently sent to an AI model.

Service providers and sharing

• Supabase: account authentication, confirmation and recovery emails, profile and lead database storage, reminder records, and business-logo storage.
• Stripe: hosted Checkout and Customer Portal for subscriptions and payment handling. Payment details entered in Stripe are processed by Stripe. JobFlow stores Stripe customer and subscription identifiers, subscription status, current period end, and scheduled cancellation status; the app does not store full card numbers or card security codes.
• Resend: transactional follow-up reminder delivery to contractors. Account confirmation and password-recovery emails currently use Supabase’s authentication email service separately.
• Vercel: website hosting and server functions, including billing endpoints and the scheduled reminder worker. Requests may produce operational logs such as request time, IP address, browser information, route, and response status.
• jsDelivr: serves the Supabase browser library on account and app pages; loading it sends normal connection information to the CDN.

Providers process information under their own terms and privacy practices and may process it in countries other than yours. Their policies are available from Supabase, Stripe, Resend, Vercel, and jsDelivr.

We may also disclose information when required by law or reasonably necessary to address fraud, security issues, or protect rights. The current app has no advertising data-sale or cross-site advertising integrations.

Browser storage and sessions

The app’s Supabase authentication client uses browser local storage to persist your login session. The password-reset page uses a separate session held in memory and removes recovery credentials from the visible URL. The current JobFlow code does not set advertising cookies or run analytics trackers. Stripe’s hosted pages and other providers may use cookies or similar technologies under their own policies.

You can sign out or clear site data through your browser. Clearing local storage can sign you out; it does not delete your account or server records.

Security

The service uses HTTPS, authenticated access, database access policies that restrict contractor records, and server-side billing and subscription checks. Business logos are accessed through authenticated storage requests. These measures reduce risk, but no service can promise absolute security or uninterrupted access. Keep your login details private and contact us if you suspect unauthorized access.

Retention, deletion, and your requests

Account, profile, lead, billing, and reminder records remain stored as needed to operate the service. There is no published fixed automatic retention period. You can edit your profile and manage or delete leads through the app when your access permits. Canceling a subscription does not delete the account or its records.

For access, correction, deletion, or other privacy requests, use Support & Contact. We may need to verify your identity and authority over the records. Some information may need to be retained for billing records, legal obligations, fraud prevention, or resolving disputes; backups, provider logs, and previously sent emails may not be removed immediately. We do not promise immediate or complete deletion from every provider.

If a contractor entered information about you, contact that contractor about their use of your information. You can also use our support path for questions about JobFlow’s handling of it. Email support: support@myjobflowai.com.

Children and policy changes

JobFlow is intended for adult business users, not children. Do not create an account if you are under 18. We may update this policy as the service changes and will post the updated version and date here. Material changes will be brought to users’ attention through the service or account email where appropriate.