Privacy Policy

1. Scope

This policy applies to contracktor.app, the conTRACKtor web and mobile applications, and related support communications. It does not govern third-party websites or services that have their own policies.

2. Information we collect

Account and profile information

When you create an account, we collect your email address, password credentials handled by our authentication provider, name, and optional company name. You may also add invoice contact details such as a business address, phone number, website, default payment terms, and invoice email.

Job and business records

We store the records you choose to create, including jobs, customer and crew details, budgets, quotes, tasks, hours and timer records, expenses, shopping needs, payment ledger entries, notes, receipts and receipt line items, invoice drafts, and reports. conTRACKtor records payments you report; it does not currently process customer card or bank payments.

Photos and submissions

We collect receipt images, job-note photos, Tell conTRACKtor text and photos, and the information extracted or proposed from those submissions. Photos may incidentally include names, addresses, transaction details, or other information visible in the image.

Usage and technical information

Our hosting and analytics providers may process IP address, request and error logs, approximate location derived from IP address, browser and device type, operating system, pages viewed, referrer, timestamps, and performance measurements. We use Vercel Web Analytics for aggregated traffic reporting and do not intentionally send names, email addresses, job IDs, or form contents in analytics events.

Device permissions

If you grant permission, conTRACKtor can use your camera or photo library so you can attach receipt and job photos. You can change those permissions in your device or browser settings.

3. How we use information

We use information to:

• create and secure accounts, restore sessions, and provide the service;
• organize job records, produce invoices and reports, and keep devices in sync;
• extract receipt details and prepare records from Tell conTRACKtor submissions;
• respond to support requests and communicate service, security, or policy updates;
• monitor reliability, prevent abuse, investigate errors, and protect users and the service;
• understand aggregate website and product usage and improve conTRACKtor; and
• comply with law and enforce our agreements.

4. AI processing

When you submit a receipt for extraction, conTRACKtor sends the receipt image to the OpenAI API. When you use Tell conTRACKtor, we may send your submitted text and photos together with limited relevant job context—such as visible job names—to the OpenAI API. The resulting output is returned to conTRACKtor so the app can prepare proposed records for your review.

AI output can be incomplete or wrong. You should review proposed vendors, dates, amounts, job assignments, hours, notes, and shopping items before relying on them. According to OpenAI’s current business data commitments, API inputs and outputs are not used to train its models by default. OpenAI processes that information under its own service terms and data controls.

Do not include sensitive information that is unnecessary for job tracking. In particular, avoid submitting Social Security numbers, full payment-card details, health information, or account passwords.

5. How we share information

We do not sell personal information. We disclose information only as needed for the service, including to:

• Supabase, which provides authentication, database, private file storage, and server-side functions;
• OpenAI, which processes receipt and Tell conTRACKtor inputs as described above;
• Vercel, which hosts the web experience and provides aggregated web analytics and performance measurement;
• Google Fonts, which delivers font files to browsers visiting the marketing website;
• professional advisers or support providers under appropriate confidentiality duties;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or respond to valid legal process; and
• a successor in a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.

If you export or share an invoice, report, receipt, or other record, you direct conTRACKtor and your device to provide that file to the recipient or app you select.

6. Cookies and local storage

The app stores authentication information in browser or device storage so you can remain signed in. The website also uses two first-party cookies that contain only the value 1: ct_known remembers that the browser has previously signed in for up to about two years, and ct_session helps the marketing site show the right return link while a session is active for up to about 30 days. These cookies do not contain a token, name, email address, or user ID and are not treated as proof that you are authenticated.

Vercel Web Analytics is designed to report aggregated usage without third-party tracking cookies. You can clear conTRACKtor cookies and local storage through your browser, but doing so may sign you out or reset returning-visitor messaging.

7. Retention

We generally retain account information and job records while your account is active so the service can work. If you request deletion, we will delete or de-identify information associated with your account when reasonably possible, subject to time needed for secure backups, fraud prevention, dispute resolution, and legal or accounting obligations. Aggregated information that no longer identifies you may be retained.

8. Your choices and privacy rights

You can review and update profile information in Account Settings and can edit or delete many job records inside the app. You may also request access, correction, export, or deletion of personal information by emailing support@contracktor.app. We may need to verify your identity before completing a request.

Depending on where you live, you may have additional rights to know about, correct, delete, or obtain a copy of personal information, or to appeal a denied request. conTRACKtor does not sell personal information or use it for cross-context behavioral advertising.

9. Security

We use safeguards intended to protect information, including authenticated access, database row-level access controls, and private storage buckets for uploaded files. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Keep your password confidential and contact us if you believe your account has been compromised.

10. Other provisions

Children

conTRACKtor is a business tool and is not directed to children under 18. We do not knowingly collect personal information from children.

International processing

Our providers may process information in the United States and other countries. Those locations may have privacy laws different from those where you live.

Changes

We may update this policy as the service changes. We will post the revised version here and change the “Last updated” date. If a change materially affects how we use information, we will provide additional notice when required.

Contact

Questions or privacy requests can be sent to support@contracktor.app.