Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, use the Service, or contact us for support. This includes:

• Account information: name, email address, and password
• Business profile: business name, phone number, address, logo, and service area
• Job data: customer names, job notes, photos, and AI-generated report content
• Precise location (optional): on Solo-tier plans and above, GPS coordinates and accuracy are recorded only when you or a team member taps the "Stamp this job's location" button on a specific job — there is no automatic or background location tracking. This is visible only to your account and (for Business-plan team workspaces) teammates with access to that job; it is never included on the public customer report link. We reverse-geocode the coordinates into an approximate street address using OpenStreetMap's Nominatim service — see "Data Sharing" below.
• Payment information: processed securely by Stripe (we never store card numbers)
• Usage data: how you interact with the Service, browser type, and device information

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the WorkReceipt Service
• Process your subscription payments through Stripe
• Generate AI-powered service reports using the notes and data you provide
• Send you transactional emails (account confirmations, receipts)
• Respond to your support requests
• Measure first-party product usage — such as page views, feature usage, and plan changes — to understand how the Service is used and improve it. This is our own analytics; we do not use it for advertising or share it with third-party ad networks.
• Monitor for fraud and enforce our Terms of Service

3. AI Processing

WorkReceipt uses Anthropic's Claude AI to generate report summaries from the notes and photos you provide. Your job notes, job site/receipt photos, and customer information may be sent to Anthropic's API for processing. We do not use your data to train AI models. Anthropic's data handling practices are governed by their privacy policy at anthropic.com. The mobile app shows an in-context notice the first time you generate a report and asks you to agree before any data is sent.

4. Data Storage and Security

Your data is stored securely using Supabase, hosted on infrastructure protected by industry-standard security measures. Photos and files are stored in encrypted cloud storage. We use HTTPS for all data transmission. While we take reasonable steps to protect your data, no system is completely secure and we cannot guarantee absolute security.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe for payment processing
• Anthropic for AI report generation
• Retell — if your business uses the optional Call Desk (AI Receptionist) add-on, caller phone numbers, call audio, and call transcripts are sent to Retell, our third-party voice-AI vendor, so it can answer your calls and route leads to you. This only applies to businesses that have purchased the Call Desk add-on — it has no effect on any other WorkReceipt feature. Retell's handling of this data is governed by their own privacy policy.
• Supabase for database and file storage
• Netlify for hosting and delivery
• Google Maps Geocoding API — if you use the optional Day Planner feature (Solo-tier plans and above), the job addresses you schedule are sent server-side (from WorkReceipt's own servers, not directly from your device) to Google's Geocoding API to plot map pins and calculate drive times and distances between stops. Only the address text is sent — never your account credentials or other job details. Google's handling of this data is governed by their own privacy policy.
• OpenStreetMap (Nominatim) — if you use the optional GPS check-in feature, the captured coordinates are sent server-side (from WorkReceipt's own servers, not directly from your device) to this free, keyless reverse-geocoding service to produce an approximate street address. Your device's IP address, browser, and account information are never sent to Nominatim — only the coordinates, from our server. As with any web request, those coordinates are included in the request address and could appear in Nominatim's own server logs; those logs are outside our control and governed by OpenStreetMap's own policies.
• Law enforcement or legal authorities when required by law

6. Public Report Links

When you share a customer report link, the report becomes accessible to anyone with that link. Public reports display your business information and job details but never include your internal notes, account credentials, the customer's email address, or precise GPS coordinates — a shared report may note that a visit was verified on-site, but never the exact coordinates captured by the GPS check-in feature. You can control which reports are shared and revoke access by contacting support.

7. Data Retention

We retain your data for as long as your account is active. When you request account deletion, we permanently delete your jobs, photos, business profile, and other account data from our active database and file storage immediately — this happens when you submit the request, not on a delay. Residual copies may briefly persist in routine backups maintained by our database provider until those backups are rotated out in the normal course of business; we have no way to instantly purge an individual account from an already-created backup snapshot. Billing and tax-related records are retained longer where required by law (see our Notice at Collection for retention periods by data category).

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can update your information in Settings, or contact us at support@workreceipt.app to request data export or deletion.

9. Cookies

We use cookies and similar technologies to maintain your login session and improve the Service. We do not use cookies for advertising or tracking across other websites.

10. Children's Privacy

WorkReceipt is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at support@workreceipt.app.