Privacy Policy

ContractorOS helps contractors and project teams organize workspaces, customers, projects, schedules, field updates, photos, files, and related work information. This policy describes the information processed by the current open beta.

Information We Process

Depending on the features you use, ContractorOS may process:

• Account and profile information, such as your email address, name, username, avatar, contact details, bio, authentication records, and profile-sharing choices.
• Business and workspace information, including workspace membership, roles, customers, projects, areas, stages, tasks, schedules, preferred vendors, updates, photos, files, and other content you or your team submit.
• Reliability and security diagnostics, such as platform, app version, timestamps, bounded event metadata, and error information. Optional product-usage information is collected separately when you choose to share it.
• Location and address information when you use address lookup, choose Use my location, or save a location for contractor or worker discovery.
• Information you submit through feedback, support, onboarding, or trade-suggestion features.

QuickBooks Online

Workspace owners and administrators can connect QuickBooks Online to preview and sync selected customer contact details, catalog items, estimates, invoices, and payment records in either direction. Supported records may be created or updated after you review and confirm a sync. Payment records describe money already received; ContractorOS does not charge customers, issue refunds, or transfer funds through this integration.

We store the connected company's identity, encrypted access credentials, imported records, links between synced records, and sync-operation history. Disconnecting removes saved credentials and stops access. Previously imported records and sync links remain after disconnection and are subject to the retention and deletion practices below.

Google Sign-In and Calendar

If you choose Google sign-in, ContractorOS receives the account identity and profile information needed to sign you in, such as your Google account identifier, name, email address, and profile image. Connecting Google Calendar is a separate, optional action available to authorized workspace managers. Visitors submitting a public project request or booking a consultation do not need to connect a Google account.

With your Calendar permission, ContractorOS lists calendars you can write to so you can choose a booking calendar, reads that calendar’s busy time intervals to avoid conflicting appointments, and creates consultation events for accepted website bookings. It may read back an event it created to verify delivery and prevent duplicate events after a retry. It does not import your full calendar history or expose existing event titles, descriptions, or attendees to public widget visitors.

We store encrypted Calendar access and refresh credentials, the selected calendar’s identifier, name and time zone, a refreshed availability cache of busy intervals, and booking records including event identifiers and delivery status. The integration sends the consultation title, which may include the requester’s name, appointment times, and an internal booking reference to your selected Google calendar. These events are visible according to that calendar’s sharing settings. The current booking integration adds no attendees and sends no Calendar invitations.

Google data is processed by our hosting and database providers to deliver these features and is available only through the applicable workspace and operator access controls. ContractorOS does not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine-learning models. ContractorOS’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect Calendar in Workspace settings → Widget calendar. Disconnecting removes the saved Calendar credentials and cached busy intervals and stops further Calendar access for that widget. The selected calendar metadata, existing workspace project and booking records, and delivery history may remain under the retention practices below. Disconnecting does not delete events already created in Google Calendar or revoke unrelated Google sign-in permissions. You can remove events in Google Calendar, revoke access in your Google Account’s third-party connections settings, or contact us for data-deletion assistance.

Profile Sharing

External profile sharing is off by default. If you explicitly enable it, you can separately choose whether a signed-in external viewer requesting your profile may receive your name, username, bio, email, phone number, or website. Turning external sharing off revokes that consent. Workspace members may still receive limited identity information needed to collaborate, subject to workspace authorization.

The current beta does not provide a customer portal. Marking a project update as customer-visible records the intended future audience but does not by itself create customer access.

Photos, Files, and Device Access

ContractorOS requests camera or photo-library access only when you choose to capture or attach project evidence or update your avatar. It uses the system file picker when you choose project documents. The current Expo product does not request location access for geofenced notifications.

Project media is stored in private cloud storage with authorization checks and scoped object paths. Sharing or downloading a project file is an explicit user action. Files saved to another app or provider are then governed by that destination's settings and policies.

Photos and documents you attach may contain embedded information, such as capture dates or location metadata recorded by the device that created them. ContractorOS uses available photo capture dates to help organize project evidence. Review the files you choose to share.

Location and Directory Lookups

Choosing Use my location requests foreground location permission and obtains your device's coordinates to help find a ZIP code or nearby contractors and workers. You can enter a ZIP code, city, or address manually instead, and change location permission in your device settings. The current product does not collect background location for this feature.

Address suggestions, place details, business searches, and coordinate-to-ZIP-code lookups use Google Maps Platform services. ContractorOS sends the relevant search text, selected place identifier, location hint, or coordinates to Google through its server endpoints to return those results. These requests also involve processing by our hosting provider. Google's processing is described in the Google Privacy Policy.

If you save a directory location and enable the relevant discovery setting, ContractorOS stores that location to support discovery and distance sorting. Public discovery results show your city or region and may show distance; the location editor explains the information made visible. Profile and contact visibility follow the sharing choices for the feature you enable. Turning off discovery does not itself delete your account or the location you saved.

Offline and Local Data

ContractorOS caches workspace data and pending changes locally so supported workflows can continue through a weak or interrupted connection. Native builds use application-scoped SQLite and document storage; the web beta uses browser storage. Pending operations keep visible retry and failure state rather than being silently discarded.

Signing out may retain account-scoped local changes so unsynchronized work is not destroyed without warning. Self-service account deletion removes the signed-in account's local ContractorOS data after the remote deletion plan completes. Removing the app, clearing browser data, or using operating-system storage controls may also remove local copies.

How We Use Information

We use information to provide authentication, workspace collaboration, synchronization, project and schedule management, storage, support, security, diagnostics, and product improvement. ContractorOS does not sell personal information or use account content for behavioral advertising.

Access, Retention, and Deletion

Workspace records are available only through the authorization rules associated with the signed-in account and workspace. If you leave a retained shared workspace, content created for that workspace may remain available to its authorized members.

Self-service account deletion is available in Settings → Delete account. The app shows which workspaces will be deleted and which will remain. If you own a workspace with other members, you must first transfer ownership or remove those members. ContractorOS warns when unsynchronized changes may be lost and attempts to purge account-scoped local data after deletion, reporting cleanup failures if they occur. Shared workspace content may remain with its owner, and files that someone has exported or saved elsewhere are not removed by this action.

You can also request account and data deletion without installing the app. We may need to verify control of the account and clarify workspace ownership or the records covered by the request. Account deletion is different from disconnecting QuickBooks or leaving one workspace. Contact us to request access to your information, correction, or assistance with records retained in a shared workspace. The app does not apply one automatic expiration date to every account or workspace record.

Depending on applicable law, you may have rights to access, correct, export, or delete your information, object to processing, or request a restriction on processing. Contact craftsmannsoftware@gmail.com to make a request. We may need to verify your identity to protect the information involved. Requests about shared workspace records may require coordination with the customer or workspace administrator responsible for those records. You may also have the right to complain to the relevant data protection regulator.

Diagnostics and Feedback

When enabled in your app version, reliability and security diagnostics may be submitted automatically to help investigate errors and operate the service. This is separate from optional product-usage sharing. ContractorOS uses Craftsmann Signal, a bounded event catalog, and redaction rules intended to keep passwords, authentication tokens, contact details, and customer content out of diagnostic payloads. Hosting and authentication services also process operational information needed to deliver and secure requests.

Optional usage sharing starts only after you choose to enable it in Usage & privacy. It reports grouped feature and workflow totals, app version, and platform, without including account identifiers in those totals. Your choice applies to the current account on the current device. Turning it off stops further optional collection and clears usage that has not been sent. Contact us with questions about information already processed.

While you are signed in, ContractorOS records the days your account uses the app, with its release channel (beta or production) and platform, so we can count active accounts. Only totals are shared with Craftsmann Signal, without account identifiers. These day records are kept for about six months and are removed when you delete your account.

Feedback is a separate submission. It may include the text and screenshots you choose to send, your account and workspace context, app and device information, and support replies. Review screenshots before sending because they can show customer or project information. Authorized support and engineering staff use these reports to respond and investigate issues.

Content Reports and Public-Discovery Blocks

If you report content or a publisher, ContractorOS stores your account identity, the selected content or publisher, your reason and explanation, and relevant content context for authorized moderation review. Reports are private intake records; they are not posted to the discussion or a public issue tracker. A report does not automatically remove content or suspend an account.

Public-discovery blocks are saved with your account and can be managed in Settings. They affect public template and directory discovery while signed in. Shared company records and discussions remain visible, and public template links remain accessible when signed out.

Deleting the reporting account, the reported account, or the associated workspace clears the report’s stored identity references, text, content evidence, and review notes. A restricted administrative record remains without those fields. Deleting your account also removes your saved public-discovery blocks.

Service Providers and Integrations

ContractorOS uses Supabase for authentication, database, and file storage, Cloudflare for hosting and request delivery, Craftsmann Signal for configured diagnostics and optional usage, and GitHub for engineering issue tracking. Google Maps Platform supports the location and directory lookups described above. If you choose Google or Apple sign-in, that provider processes the sign-in request. Connecting Google Calendar authorizes the calendar-data exchange described above. Connecting QuickBooks authorizes the accounting-data exchange described above. These providers process the information needed for the features they deliver; their services and your accounts with them are also governed by their applicable terms and privacy policies.

Data Security

ContractorOS uses authentication, database row-level authorization, private object storage, scoped object paths, secure native authentication storage, and redacted diagnostics to reduce unauthorized access. Offline workspace data also relies on device and browser application isolation. No storage or transmission system can guarantee absolute security.

Beta Access and Payments

The current open beta does not offer a paid App Store, Google Play, or web subscription. ContractorOS will publish updated pricing, payment, and privacy terms before offering a paid plan.

Contact

ContractorOS is operated by Craftsmann Software in the United States.

For privacy questions or deletion assistance, contact craftsmannsoftware@gmail.com.