Privacy Policy

Who is responsible

Information we collect

• Account: your email address, name, company name, and the workspaces and role you belong to. In your settings you may add a phone number, an address, a time zone and notification choices.
• Sign-in: your password, kept only as a salted one-way hash; optional two-step verification codes; and, if you sign in with Google, Microsoft or Apple, your name and email address from that provider.
• Work you do in SPW: work orders, properties, checklists, notes, bids, invoices and payments, client and vendor records, company documents, Team chat messages, and support requests.
• Photos, documents and 3D scans you upload. Photos are kept as uploaded, including details the camera saved in them, such as the time and the location.
• Location, only when you allow it: the phone's location when you check in at a property or take walkthrough photos, saved with that check-in or photo so the office can confirm where the work was done.
• Phone motion while you take walkthrough photos, so the camera knows when to take the next one. The direction the phone was facing is saved with each photo.
• Babu, the assistant: what you ask it to fill in, the files you give it, the choices you make about what it may use, and questions it could not answer.
• Records of important actions, such as sign-ins, approvals, changes to work orders and permission changes, kept so your company can see who did what.
• Technical information our hosting provider logs when you use the service, such as request times and addresses.

How we use it

• To run the service: sign you in, show you the work for your role, store and deliver your files, and send the emails you need, such as invitations, verification and password-reset links, and the notifications you turn on.
• To keep the service secure: limit repeated sign-in attempts, check uploads, and investigate misuse.
• To support you when you contact us.
• Babu can learn labels from your workspace's corrections. They stay in your workspace unless SPW adds them to Babu's general rules.

What we don't do

Services that receive information

• Render hosts the web app, the database and the service's logs. Uploaded files are kept with SPW's file-storage provider: a private hosting account, or Amazon Web Services if SPW moves them there.
• Our email provider sends the service's emails.
• Anthropic (Claude), only for Babu's photo review, and only if you allow it: the job's photos, resized and with their location and camera details removed, the room measurements, the work type and instructions, and the names of price-list items. Client and owner names, addresses, access codes and prices are not sent.
• Google (Gemini), only if you allow Babu's outside help and SPW has turned it on: a question Babu could not answer itself, with names, email addresses, phone numbers, amounts and reference numbers removed. No records or files are sent.
• Photon (komoot, using OpenStreetMap data) and the US Census Bureau's geocoder, to suggest and check property addresses you type. SPW's server sends them the address text.
• OpenStreetMap, which shows the map on a work order's check-in panel. Your browser loads the map directly, so OpenStreetMap receives your IP address and the map's location.
• Google, Microsoft or Apple, if you choose to sign in with them.
• ShieldHub, only if a contractor agrees to a background verification through SPW. No Social Security number or date of birth is collected by SPW.
• Other software your company connects to its workspace, under your company's direction.
• We may also disclose information if the law requires it, or to protect people or the service.

Choices about Babu

• The first time you use Babu it asks what it may use: full access, read only, or a custom set. You can change or withdraw that choice at any time under Access in Babu's chat, or in the mobile apps' Babu screens.
• What you don't grant is refused, even if your role would allow it. Babu's suggestions are drafts. Nothing is saved until a person confirms it.

The mobile apps

• The apps ask for the camera (walkthrough photos and 3D scans), location while you use the app (check-ins and photos) and, on iPhone, motion. You can refuse or turn these off in your phone's settings. The rest of the app keeps working.
• Your sign-in is kept in the phone's secure storage (the iPhone Keychain or the Android Keystore).
• Your recent jobs and any photos waiting to upload are kept on the phone, so you can work without a signal. Signing out removes them.

How long we keep information

• Workspace information is kept while your company uses SPW, unless your company deletes it sooner. Photos and documents in reports already sent to a client are kept as part of that record.
• When a company leaves SPW, its workspace and files can be deleted. A record that the workspace existed, and of SPW's own billing, is kept.
• Exported files are deleted after 7 days. Sign-in links expire after 30 minutes to 24 hours, and phone sign-ins after 30 days without use.
• Logs are kept for the period our hosting provider keeps them.

Your choices and rights

• You can view and update your name, contact details and notification settings in your account settings.
• To ask for a copy of your information, or to have your account corrected or deleted, email us at the address below. For information in your company's workspace, we will work with your company, which decides what it keeps.
• Depending on where you live, you may have further rights under the law, such as the right to know, correct or delete personal information. We will not treat you differently for using them.

Security

Children

Changes and contact