1. Introduction & Data Controller
JobDone (“we”, “our”, “us”) operates an AI-powered invoicing and document generation platform for tradespeople and contractors worldwide. This Privacy Policy governs how we collect, use, process, store, share, and protect your personal information across all jurisdictions in which we operate.
Data Controller: JobDone · Contact: hello@jobdone.app
2. Information We Collect
2.1 Information You Provide
- Account data: Name, email address, and subscription preferences when you register.
- Job & customer data: Names, service descriptions, job notes, pricing, and other content you submit for AI document generation.
- Payment information: Processed exclusively by certified payment processors. We never store full card numbers or banking credentials.
- Support communications: Messages and inquiries you send our team.
2.2 Automatically Collected Data
- IP address, browser type, device identifiers, operating system
- Pages visited, features used, session duration, and interaction events
- Error logs, performance data, and diagnostic reports
- Approximate geographic location (country/region level only)
2.3 Data We Do NOT Collect
- Government-issued ID numbers, biometric data, or financial account numbers
- Precise GPS location data
- Personal data from children under 16 (see Section 11)
3. Legal Basis for Processing (GDPR)
For users in the EEA, United Kingdom, Switzerland, and GDPR-equivalent jurisdictions, we process personal data on the following legal bases under Article 6 GDPR:
- Contract performance (Art. 6(1)(b)): Processing required to deliver services you subscribed to.
- Legitimate interests (Art. 6(1)(f)): Fraud prevention, security, and product improvement where these do not override your fundamental rights.
- Legal obligation (Art. 6(1)(c)): Compliance with applicable law including tax and financial reporting.
- Consent (Art. 6(1)(a)): For optional processing such as marketing, which you may withdraw at any time.
4. How We Use Your Information
- Generate and deliver AI-powered invoices and job reports to your nominated email address.
- Process payments, manage your subscription, and issue receipts.
- Send transactional communications: account confirmations, receipts, and renewal reminders.
- Provide customer support and resolve disputes.
- Monitor, maintain, and improve service reliability and performance.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with applicable legal and regulatory obligations.
- Enforce our Terms of Service and protect our legal rights.
We do not sell, rent, or disclose your personal information to third parties for their marketing purposes.
5. AI Processing Disclosure
Job notes and customer data you submit are processed by Anthropic's Claude AI API for real-time document generation. This processing is transient — your data is not retained by Anthropic beyond the API call, and is not used to train AI models.
You are solely responsible for ensuring that customer information you submit has been collected lawfully and that you are authorized to process it under applicable privacy laws in your jurisdiction.
6. Data Sharing & Sub-Processors
We engage the following authorized sub-processors, each bound by data processing agreements:
- Anthropic, Inc. (USA) — AI document generation
- LemonSqueezy / Paddle (USA / UK) — Payment processing and billing
- Google LLC (USA) — Email delivery and data storage
- Make.com (Celonis SE) (USA / EU) — Workflow automation
- Webflow, Inc. (USA) — Website hosting
We do not share your personal data with unlisted sub-processors without updating this policy and, where required, obtaining your consent.
7. International Data Transfers
JobDone operates from the United States. If you access our Service from outside the US, your information may be transferred to and processed in the US and other countries where our sub-processors operate.
For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework, and UK International Data Transfer Agreements (IDTAs). For other jurisdictions, we apply equivalent contractual safeguards.
8. Data Retention
- Active account data: Retained for the duration of your subscription.
- Post-cancellation: Retained 90 days then deleted.
- Job submission data: Processed transiently; not retained beyond document delivery.
- Financial records: 7 years (tax and accounting compliance).
- Support correspondence: 3 years from last interaction.
- System logs: 12 months for security and diagnostic purposes.
Data is removed from production systems within 30 days of deletion and from backups within 90 days.
9. Security
We implement commercially reasonable security measures including TLS 1.2+ encryption in transit, AES-256 encryption at rest, role-based access controls, regular security assessments, and restricted access to production environments. In the event of a data breach posing risk to your rights, we will notify the relevant authority within 72 hours and affected users without undue delay, as required by applicable law.
10. Your Privacy Rights
Universal Rights (All Users)
- Access: Request a copy of personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to legal retention obligations.
- Portability: Receive your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw at any time where processing is consent-based.
Additional EEA / UK Rights (GDPR)
- Right to restrict processing pending resolution of disputes.
- Right to object to processing based on legitimate interests.
- Right to lodge a complaint with your national supervisory authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany).
California Residents (CCPA / CPRA)
- Right to know what personal information we collect, use, and disclose.
- Right to delete personal information.
- Right to correct inaccurate personal information.
- Right to opt-out of sale or sharing (we do not sell your data).
- Right to limit use of sensitive personal information.
- Right to non-discrimination for exercising CCPA rights.
To exercise any right, email hello@jobdone.app with subject “Privacy Rights Request — [Your Name]”. We respond within 5 business days (acknowledgment) and 30 days (full response).
11. Children's Privacy (COPPA)
JobDone is not intended for individuals under 16. We do not knowingly collect personal information from children under 16. If we discover we have inadvertently collected such data, we will promptly delete it. Contact us immediately at hello@jobdone.app if you believe a child under 16 has used our Service.
12. Cookies & Tracking
We use only strictly necessary cookies required for site functionality and security. We do not use advertising cookies, third-party tracking pixels, fingerprinting, or cross-site tracking. You may disable cookies in your browser settings without affecting the Service.
13. Third-Party Links
Our Service may link to third-party websites or integrations. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
14. Changes to This Policy
We may update this policy periodically. We will provide at least 30 days' advance notice of material changes to active subscribers via email. Continued use after the effective date constitutes acceptance.
15. Contact Us
For privacy inquiries, requests, or complaints:
- Email: hello@jobdone.app
- Subject line: Privacy Request — [Your Full Name]
- Response: Acknowledgment within 5 business days; full response within 30 days
If unsatisfied with our response, you have the right to escalate to the relevant data protection authority in your jurisdiction.