Privacy Policy | JobStack

This Privacy Policy explains how JobStack ("JobStack," "we," "us," or "our") collects, uses, shares, and protects information when you use our website at jobstackcrm.com, our application at my.jobstackcrm.com, and any related services (collectively, the "Service"). By using the Service, you agree to the practices described here.

Who we are

JobStack provides customer relationship management ("CRM") software and AI-powered automation tools for solo tradespeople and small crews — electricians, plumbers, handymen, lawn care operators, and similar businesses. The Service is offered to businesses and the people who use those businesses on behalf of an employer, contractor, or sole proprietorship ("Customers," "you," "your").

Information we collect

Information you provide directly

Account information. Name, business name, email address, phone number, password, billing address, and any profile details you add.
Customer data. Information you enter or import about your end customers — names, addresses, phone numbers, email addresses, job history, notes, photos, and any other details you store in JobStack. You are the controller of this data; JobStack processes it on your behalf.
Job and business data. Schedules, estimates, invoices, payment records, materials lists, pricing, and other operational data you enter or that the Service generates.
Voice and AI inputs. Voice notes, dictated messages, and other content you submit to AI features (for example, voice-to-estimate). We send these inputs to AI providers to generate the requested output and may retain them to improve service quality and troubleshoot issues.
Communications. Messages you send to our support team, feedback, and any other communications you direct to us.

Information collected automatically

Usage data. Pages and features you visit, actions you take, timestamps, referring URLs, and similar event data.
Device data. IP address, browser type and version, operating system, device identifiers, language, and time zone.
Cookies and similar technologies. We use cookies and similar technologies for authentication, preference storage, security, and analytics. You can control cookies through your browser; disabling cookies may impair certain features.

Information from third parties

Payment processors. When you subscribe or accept payments on behalf of your customers, our payment processor (currently Stripe) collects card and bank details and shares limited transaction metadata with us. We do not store full payment card numbers.
Integrations you authorize. If you connect QuickBooks, calendar providers, lead sources, telephony providers, or other third-party services, we receive data those services share with us in accordance with the scopes you authorize.

How we use information

To operate, maintain, and improve the Service.
To create and manage your account, authenticate you, and process payments.
To send messages, estimates, invoices, reminders, and other communications to your end customers on your behalf when you direct us to.
To deliver AI features, including drafting estimates and replies, transcribing voice notes, and generating reminders.
To provide customer support and respond to your requests.
To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms.
To send service-related notices and, where permitted, marketing about JobStack. You can opt out of marketing email at any time.
To comply with legal obligations and enforce our agreements.

How we share information

We do not sell your personal information or your customers' personal information. We share information in the following limited circumstances:

Service providers and subprocessors. We use vendors to host infrastructure, send emails and SMS, process payments, provide AI capabilities, monitor errors, and run analytics. These providers are contractually limited to processing data on our instructions. Categories include cloud hosting, payment processing, SMS and email delivery, AI model providers, error monitoring, and analytics.
At your direction. When you instruct us to send a message, estimate, invoice, or reminder to one of your customers, we transmit that content to the intended recipient through the relevant channel.
Integrations. When you connect a third-party service (for example, QuickBooks), we share the data necessary to operate the integration based on the permissions you grant.
Legal and safety. We may disclose information if required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect rights, property, safety, or to investigate fraud or abuse.
Business transfers. If JobStack is acquired, merged, or sells assets, information may transfer to the new owner subject to this Privacy Policy or a successor notice to you.

SMS and email sent on your behalf

JobStack lets you send appointment confirmations, reminders, follow-ups, and other messages to your customers via SMS, email, and other channels. You are responsible for ensuring you have a lawful basis to contact each recipient under applicable laws — including the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, state-level SMS consent rules, and any analogous foreign laws. You must provide opt-out mechanisms and honor opt-out requests promptly. JobStack provides tools to help you comply but does not assume responsibility for the content or legality of messages you initiate.

Your rights

Depending on where you live, you may have rights with respect to your personal information:

Access and portability. Request a copy of the personal information we hold about you.
Correction. Ask us to fix inaccurate or incomplete information.
Deletion. Ask us to delete your personal information, subject to legal or operational retention requirements.
Objection or restriction. Object to certain processing or ask us to restrict it.
Withdraw consent. Where processing is based on consent, withdraw consent at any time.
Non-discrimination. We will not discriminate against you for exercising any of these rights.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know the categories of personal information we collect, the categories of third parties with whom we share it, and the right to opt out of any sale or sharing of personal information (note: we do not sell personal information). Residents of the European Economic Area, the United Kingdom, and Switzerland have rights under the General Data Protection Regulation (GDPR) and analogous laws.

To exercise any of these rights, email us at hello@jobstackcrm.com. We may need to verify your identity before fulfilling your request. If you are an end customer of a JobStack user (for example, a homeowner whose information was added to a tradesperson's account), please contact that business directly; JobStack acts as a processor on their behalf for that data.

Data retention

We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. When information is no longer needed, we delete it or anonymize it. You can request earlier deletion subject to the limits above.

Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, access controls, and audit logging. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted to or stored on the Service. You are responsible for keeping your account credentials confidential and notifying us promptly of any suspected unauthorized access.

International data transfers

JobStack is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms.

Children

The Service is intended for businesses and adults over the age of 18. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions that apply that threshold). If you believe we have collected information from a child, please contact us so we can delete it.

Third-party links and services

The Service may include links to third-party websites or integrations with third-party services. Their privacy practices are governed by their own policies, and we are not responsible for them.

Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service before the changes take effect. The "Effective" date at the top reflects the latest version.

Contact us

Questions or requests about this Privacy Policy? Email hello@jobstackcrm.com.