Privacy

What we hold

To do job costing we need the things job costing is made of: your jobs and their budgets, the transactions you import or sync, the subcontractors you pay, the hours your crew works, and the invoices you raise. We also hold your name and email so you can sign in.

If you connect a bank, we hold a token from Plaid that lets us read transactions. We never receive your banking username or password — those are typed into Plaid's own screen — and the token cannot move money.

If you photograph a receipt, we keep the image. It is evidence for the cost, and having categorised something correctly is not the same as being able to produce the paper.

What we do with it

We use it to run the product for you: sorting costs onto jobs, producing reports, checking payroll against wage determinations, and sending the weekly email if you want it. That is the whole list.

Transaction descriptions and receipt images are sent to Anthropic's Claude API to be categorised and read. Anthropic processes them to return a result and does not train models on them. If you would rather that did not happen, categorisation can be turned off and everything else still works.

What we never do

• Sell your data, or a version of it with the names removed.
• Share your books with another company in your trade or your area.
• Use your figures in marketing, even anonymously.
• Look at your books ourselves, except when you ask us for help with a specific problem.

Who else touches it

We use a small number of suppliers to run the service, and each sees only the part it needs:

• Supabase — hosts the database and handles sign-in.
• Vercel — runs the application.
• Plaid — connects your bank, if you choose to.
• Anthropic — categorises transactions and reads receipts.

Your data is separated from everyone else's

Every table enforces at the database level that you can only read rows belonging to your own company. It is not a filter in our code that a bug could bypass — the database itself refuses.

Getting it out, and getting rid of it

One button in Settings exports every table we hold for you as a single CSV — free, any time, without asking anyone. The only omissions are your bank connection token and unused invite codes, which are live credentials rather than records; every transaction the bank connection produced is included. If you close your account, tell us and we will delete your data within thirty days. Backups age out within a further thirty.

Contact

Questions about any of this go to a person, not a form. Ask through your account and we will answer.

This page describes what the software actually does. It is written plainly rather than defensively and has not been reviewed by a lawyer — if you need a formal data processing agreement for a contract, ask and we will sort one out.