Privacy Policy

Who this covers

Contractors and their crews who sign in to ProjectPix, and people who open a link a contractor sends them (homeowners, realtors, property managers and other customers).

A contractor's company decides what goes into its account, including its customers' details and the photos it takes. For that information we work on the company's behalf, and the company is responsible for having the right to collect and share it.

What we collect

• Account details: your name, email, company name and your role in the company. Password sign-in is handled by our sign-in provider; we never see your password in plain text.
• Job information you add: property addresses, projects, customer names and contact details, work order numbers, tags, labels, descriptions, markup on photos, measurements, and your Company Voice Card answers.
• Photos and their details: each photo, a marked-up copy if you draw on it, the time it was taken, the phone's GPS location when it was taken (if location is allowed), and a fingerprint of the original file that proves it hasn't changed. Photos you upload from your gallery keep the time and location saved inside the file.
• Location: only while the camera is open, to tag where a photo was taken, and when you search for or confirm an address. We don't track your location in the background.
• Microphone (voice measurements and the Voice Card): when you tap the mic, your phone's built-in speech recognition turns what you say into text. Depending on your phone and browser, that may be done by Google (Android) or Apple (iPhone) under their own privacy terms. ProjectPix receives the text only, never a recording.
• When someone opens a customer link: the time they opened or downloaded, their browser type, and a scrambled (one-way hashed) form of their internet address used to count unique views. If they comment, upload, or ask for updates, the name and email they type.
• Diagnostics: error reports, the app version, phone type and screen size, and the state of the upload queue. When an error happens or you use Report a problem, we also keep the last few minutes of steps in the app and a short screen replay. The replay hides all text and typed input and blocks all photos. It's never recorded on customer link pages.
• AI assistant activity: if you connect an AI assistant (such as Claude or ChatGPT), we log which ProjectPix tool it used, when, and whether it worked.
• On your phone: photos waiting to upload, recent lists and settings are stored on your device so the app works with no signal. Cookies keep you signed in, remember a link's passcode, and remember language choice.

How we use it

• To run ProjectPix: store and sync your photos and jobs, show them to your crew, and show what you choose to your customers.
• To turn addresses into map locations and show maps.
• To keep accounts secure, prevent abuse and enforce usage limits.
• To find and fix problems, answer your support requests, and improve the app.
• To send the emails you or your customers ask for, such as sign-in links and link updates.

We don't sell personal information, and we don't use your photos or job information for advertising.

Who we share it with

Service providers that run parts of ProjectPix for us, only as needed to provide it:

• Supabase: database and sign-in.
• Cloudflare: photo storage.
• Vercel: hosting.
• Mapbox: address lookup and maps.
• Sentry: error reports, diagnostics and the masked replays described above.
• Upstash: request-rate limiting.

Only when you choose to:

• People you send a link to see the photos and details that link allows.
• Apps you connect (an AI assistant, Google Drive, Dropbox, or software you give an API key or webhook to) receive what you allow them, and their own privacy terms apply to it.

We may also share information if the law requires it, to protect people from harm, or as part of selling or merging the business (this policy would still apply).

Google user data

If you connect Google Drive for Spotlight, ProjectPix asks only for permission to create and manage files it makes in your Drive (the “drive.file” permission). We use it to copy the photos you star into a ProjectPix folder. We can't see or open your other Drive files.

ProjectPix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google data for advertising, don't sell it, and don't let people read it except with your permission, for security, or where the law requires.

How long we keep it

• Your account's photos and job information stay while the account is open, until you delete them.
• Deleted photos are removed from storage. Backups roll off within 30 days.
• If a company closes its account, we delete its data within 30 days, unless the law requires us to keep something longer.
• Error reports and screen replays are kept for up to 90 days. Problem reports you send are kept with your account so we can follow up.

How we protect it

Data travels over encrypted connections. Each company's data is walled off from every other company's at the database level. Photos are private and shown through short-lived links. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

Your choices and rights

• You can see, edit and delete your photos and job information in the app.
• You can turn off location or microphone access in your phone's settings. The app still works without them.
• You can disconnect AI assistants and other apps any time in Settings.
• You can ask us for a copy of your data, to correct it, or to delete it by writing to [privacy contact email to confirm]. Depending on where you live (for example California or Washington), you may have additional rights, and we honor them.
• If you're a contractor's customer and want your information removed, ask the contractor who sent you the link, or write to us and we'll pass it on.

Children

ProjectPix is a work tool for businesses and isn't meant for anyone under 16. We don't knowingly collect children's information.

Changes and contact

If we change this policy in a way that matters, we'll tell account owners in the app or by email before it takes effect. Questions: [privacy contact email to confirm].