Privacy policy

Updated 6 October 2026

JobVault is software that service businesses use to run their work: the schedule, jobs, customers, invoices, and their team. This page says what JobVault collects, why, who else handles it, and how to have it deleted.

Two kinds of data

Data a business puts in. A business keeps its customers, jobs, and invoices in JobVault. The business decides what goes in and who on its team sees it. We hold that data for the business and use it only to run the service for that business.

Data about the people who sign in. The owner, the office staff, and technicians each have a login. We use it to sign them in and to show each person the screens their role allows.

What we collect

Your login: your name, email address, role, and password. The password is stored only as a secure hash by our sign-in provider.
Business records: customer names, phone numbers, email addresses and service addresses, jobs and their notes, invoices and payments, parts, stock, and job photos.
Team details: technician names, contact details, time off, and the address where a technician starts their day, if the office sets one. Only the owner and the office can see that address.
Booking requests: what a customer types into a business's booking page. We also keep a one-way hash of the sender's IP address to limit spam. We never store the address itself.
In the phone app: if you allow notifications, a device token that lets us send them to your phone. The app uses the camera and your photo library only when you press a button to add a photo to a job.
A history of changes to each job: who changed what, and when.

We use one kind of cookie: the one that keeps you signed in. There is no advertising, no analytics tracking, and no data sale of any kind.

Who else handles it

These companies run parts of the service for us, and get only what their part needs:

Supabase stores the data and the photos, and runs sign-in.
Vercel hosts the website and the app's pages.
Google Maps Platform receives addresses to suggest them as you type, place them on the map, and estimate drive times.
Resend delivers the email JobVault sends: invoices, invites, and the evening schedule summary. Supabase sends the password reset email.
Apple and Google Firebase deliver notifications to the phone app. They receive the device token and the notification text.
When a business takes card payments online, the card details go straight to the payment processor that business connects. JobVault never sees or stores a card number.

How we protect it

Every connection is encrypted. The database keeps each business's records apart, so one business can never read another's. Inside a business, each role sees only what it needs: a technician sees their own jobs, and never another technician's home address.

How long we keep it, and deleting it

We keep a business's records while it uses JobVault. A business may ask us to delete its account and everything in it. A person on a team may ask their office to switch off their login, or ask us to delete it. A customer of a business should ask that business first, because the business decides what it keeps; we will help it do so.

To ask for a copy or a deletion, write to us through the contact page at jobvault360.com/contact.

Children

JobVault is for businesses. It is not for children under 13, and we do not knowingly collect their data.

Changes

When this policy changes, the date at the top changes with it.