Privacy Policy

FieldOps Pro ("we," "us," or "our") provides a field operations management platform designed for construction companies and field-based workforces. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and mobile applications, website, and related services (collectively, the "Service").

By using FieldOps Pro, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

We collect information you provide directly, information generated by your use of the Service, and information from third-party integrations that power specific features:

• Account data — name, email address, company name, role, and password (stored as a secure hash)
• Workforce data — employee names, roles, and work schedules entered by account administrators
• Location data — GPS coordinates captured only during employee clock in and clock out events
• Usage data — log data, IP addresses, device identifiers, browser type, and pages accessed
• Payment data — billing details processed and stored by Stripe; we never store full card numbers
• Communications — messages sent through our support system and any content you upload (photos, reports)

Location data is used exclusively to:

• Verify that a clock-in event occurs within the authorized GPS radius of a job site
• Generate attendance and workforce reports for account administrators
• Detect and flag anomalies such as clock-ins from unexpected locations

Employees are notified within the app that location is captured at clock in/out. Location data is stored securely in our database and is accessible only to authorized administrators within your organization. We do not sell or share location data with third parties for advertising or profiling purposes.

On mobile devices, location permission is requested at the time of the first clock-in attempt. You may revoke this permission in your device settings at any time, though doing so will prevent the clock in/out feature from functioning.

When you create a FieldOps Pro account, we collect your name, email address, company name, and a password. Passwords are never stored in plain text — they are hashed using industry-standard cryptographic methods before being stored.

Account information is used to:

• Authenticate you and your team members
• Associate your data with the correct organization
• Send transactional emails (e.g., demo confirmations, password resets)
• Provide customer support

You can update your account information at any time from the Settings section of the application.

All application data — including account information, employee records, project data, schedules, photos, and GPS clock-in records — is stored in a Supabase-managed PostgreSQL database. Supabase provides enterprise-grade security including:

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Row-level security policies that ensure organizations can only access their own data
• Automated daily backups with point-in-time recovery
• SOC 2 compliant infrastructure hosted on AWS

Our servers and application infrastructure are hosted on reputable cloud providers within the United States. We employ firewalls, intrusion detection, and regular security audits to protect the integrity of your data.

All subscription billing and payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. When you enter payment details, that information is transmitted directly and securely to Stripe — FieldOps Pro never receives, stores, or has access to your full card number, CVV, or bank account details.

We receive from Stripe only:

• A tokenized payment method reference
• Billing address and cardholder name (if provided)
• Transaction status and invoice records
• Subscription status and renewal dates

For questions about payment data, please review Stripe's Privacy Policy.

Transactional emails — including demo request confirmations, account notifications, and support correspondence — are delivered using Resend, a transactional email infrastructure provider.

When you submit a demo request or trigger an email notification, Resend processes your email address, name, and the content of the email. Resend does not use this data for advertising. We use Resend solely to reliably deliver messages you have requested or that are necessary for account operation.

We do not send unsolicited marketing emails. If you receive a transactional email you did not expect, please contact us immediately at support@fieldopspro.com.

The FieldOps Pro mobile application uses Expo's push notification service to deliver real-time alerts to your device. These notifications may include:

• Shift reminders and scheduling updates
• Project status changes and task assignments
• Clock-in/out confirmations
• Safety alerts from administrators

To send push notifications, Expo generates a device-specific push token that identifies your device. This token is stored securely in our database and is associated with your account. It is never shared with third parties for advertising purposes.

You can disable push notifications at any time through your device settings or from within the FieldOps Pro app under Settings → Notifications.

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Active account data — retained for the duration of your subscription
• GPS clock-in records — retained for up to 2 years, then automatically purged
• Financial records — retained for 7 years to comply with applicable tax and accounting laws
• Support communications — retained for 3 years
• Deleted account data — fully purged within 30 days of account deletion request

After retention periods expire, data is permanently deleted from our systems and from Supabase backups on their next rotation cycle.

To delete your account:

• Navigate to Settings → Account → Delete Account within the application, or
• Send a deletion request to support@fieldopspro.com from the email address associated with your account

Upon receiving a verified deletion request, we will permanently remove your account, employee records, project data, GPS logs, uploaded photos, and all other personal data within 30 days. Financial records required for legal compliance may be retained for up to 7 years as described above.

Deleting your account will immediately cancel any active subscription. No refunds are issued for unused portions of annual plans unless otherwise required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request permanent erasure of your personal data
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain types of processing
• Restriction — request that we limit how we use your data

To exercise any of these rights, email us at support@fieldopspro.com. We will respond within 30 days. We may ask you to verify your identity before processing sensitive requests.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on file) and by posting a prominent notice in the application at least 14 days before the changes take effect.

The updated policy will always be available at fieldopspro.org/privacy-policy. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to our team.