This Privacy Policy explains how CraftBrief ("CraftBrief," "we," "us") collects, uses, and protects information in connection with this website and the CraftBrief and InspeQtion applications (together, the "Services"). CraftBrief is business software: most information in the Services is entered and controlled by the company that subscribes to it (the "Company" — your employer or service provider). Where that is the case, we process the information on the Company's behalf and under its instructions.
1. Information we collect
On this website
This website is informational. It does not use analytics trackers or advertising cookies, and it has no forms — contacting us happens through your own email app. If you email us, we receive your email address and whatever you include in the message.
In the Services
- Account information — name, email address, phone number, and role, provided by you or by the Company that invited you.
- Workforce records — information a Company enters about its team: employment details, pay rates, licenses and certifications (with uploaded documents), schedules, time entries, and reports.
- Location at clock-in and clock-out — when a technician clocks in or out of a job, the device's location is captured to verify presence at the work site, along with the computed distance from the site. If the Company has enabled the GPS Operations module in the mobile app, location may also be recorded during a working shift. Location is not collected outside of these work functions.
- Photos and documents — job photos, inspection photos, report attachments, and client documents uploaded by users. These are stored privately and served only through short-lived signed links.
- Client and business records — contact details, sites, estimates, invoices, and communications a Company keeps about its own clients.
- Text-message consent records — if you opt in to text updates, we record your phone number, the exact consent wording you were shown, and the time of consent (see Section 4).
- Device and usage information — push-notification tokens for devices where alerts are enabled, and standard technical logs needed to operate and secure the Services.
2. How we use information
- To provide the Services: scheduling, dispatch, time tracking, reports, estimates, invoicing, payroll computation, and client communication.
- To send notifications users have enabled — for example, open-shift alerts, safety alerts, and job-status updates to clients.
- To verify presence at a work site at clock-in, where the Company has enabled location verification.
- To provide optional AI assistance (such as drafting an inspection finding from a photo). AI output is advisory and is always reviewed by a person before it is saved.
- To bill subscriptions, provide support, and keep the Services secure.
We do not sell personal information, and we do not use it for third-party advertising.
3. How information is shared
We share information only as needed to run the Services:
- Service providers — infrastructure and database hosting, email delivery, text-message delivery, and payment processing for subscriptions. These providers process data only to provide their service to us.
- Integrations the Company connects — if a Company connects its own QuickBooks Online, Square, Stripe, or payroll provider account, relevant data (such as invoices or approved hours) is sent to that provider at the Company's direction. Sensitive payroll onboarding details such as bank information and tax forms are entered directly with the payroll provider and are not stored by us.
- Within your Company — information is visible to others in your organization according to their role and permissions.
- Clients of a Company — client-facing pages (such as a job-status link or an estimate) show only sanitized information: schedule, status, quoted lines, and a technician's first name. Pricing internals, notes, and personal details are excluded.
- Legal requirements — if required by law, or to protect the rights, safety, or property of our users or the public.
4. Text messaging (SMS)
Some Companies use the Services to send their clients text updates — for example, "your technician is on the way," review requests, or estimate links.
- Texts are sent only to phone numbers that have opted in. Opt-in is recorded with the exact disclosure wording shown and a timestamp, and opt-in checkboxes are never pre-checked.
- Message frequency varies by service activity. Message and data rates may apply.
- Reply STOP to cancel at any time; opt-outs are honored automatically. Reply HELP for help, or contact support@craftbrief.com.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third party except our message-delivery provider, solely to deliver the messages.
5. Data retention
We keep information for as long as the Company's subscription is active and as needed to comply with legal obligations. Companies can configure shorter retention for photos and media, and photos past that retention period are deleted automatically. When a subscription ends, the Company may request export or deletion of its data.
6. Security
Every Company's data is isolated with database-level row security, enforced by the database itself. Photos and documents are stored in private storage and served only through short-lived signed links. Data is encrypted in transit. Access tokens for connected integrations are stored server-side and never exposed to the browser.
7. Your choices and rights
- Location — location permissions are controlled on your device. Note that a Company may require location verification for clock-in as a condition of timekeeping.
- Notifications — push alerts can be turned off on your device or in your browser at any time.
- Texts — reply STOP to any message to opt out.
- Access, correction, deletion — because most records in the Services belong to a Company, requests about employment or client records should go to that Company first. For anything else, or if you need help, contact support@craftbrief.com and we will respond consistent with applicable law.
8. Children
The Services are business software and are not directed to children. We do not knowingly collect personal information from children under 13.
9. Changes to this policy
If we make material changes to this policy, we will update the date above and, where appropriate, notify Companies through the Services.
10. Contact us
Questions about privacy: support@craftbrief.com