Job Command
Privacy Policy
Official Privacy Policy for jobcommand.app. It describes shop records, crew GPS while clocked in, Stripe card processing and merchant payouts, the 1% platform fee on invoices, the AI helper run by OpenAI (only after you allow it), account deletion, and the HttpOnly session cookie.
What this covers
This Privacy Policy explains what Job Command collects when you run the shop on this app, and how that data is used. It is effective October 2, 2026 (version 2026-10-02.7). By agreeing at signup you also accept this policy.
Account and shop data
We store business name, address, owner name, email, phones, crew names, job titles, pay rates, hours, customers, estimates, invoices, photos you attach to jobs, dispatch notes, job-site safety notes you enter, and PIN hashes (not the PIN itself in the clear).
If you subscribe, Stripe stores card and bank details. Job Command keeps only what Stripe returns for the desk: brand, last four, Connect account status, and subscription ids. We do not store full card numbers or bank account numbers on the phone or in our database.
Location, clock, and job-site use
While a field phone is clocked in, the app may send GPS pings so the office can see who is on a job. Those pings are for dispatch and hours, not public sharing. Turn the phone off the clock if you do not want a live pin.
Weather and maps use the job address and, when available, coordinates. Drive times may call Google or OpenStreetMap. That traffic goes to those providers under their policies.
AI assistant
Job Command's AI helper is a server-side model run by OpenAI (GPT-4o mini, and Whisper for voice clips), reached from the Job Command server through Vercel's AI Gateway. Your phone never talks to OpenAI directly.
Before anything goes to OpenAI, the app asks each person on each phone. If you allow it, Job Command sends: the words you say into the mic and short site voice clips; up to 4 job photos per job, with the job name, address, and notes; and what you type for leads, estimate and invoice lines, and job notes. It is used only to draft notes, line items, lead details, and hours for you.
Never sent to OpenAI: PINs, bank or card numbers, Social Security numbers, payroll, or your contacts list. OpenAI says it does not train its models on data sent through its API.
If you choose Not now, nothing goes to OpenAI: the server refuses the AI step and the mic and typing still work with Job Command's own parser (rougher drafts). You can change your answer any time on the Company tab (office) or under My account (crew). Do not put secrets, Social Security numbers, or medical details in job talk.
Payments
Client invoice links and shop subscriptions are processed by Stripe. Stripe receives the amount, the automated 1% platform fee on client invoices, and your connected account when you have linked a bank for merchant payouts. Stripe’s privacy policy governs card data in their systems.
The $1 card check at sign-up is an authorization hold placed and released through Stripe. Your card number goes to Stripe, not to us.
One free trial per business: we keep a keyed hash (never the value itself) of the card fingerprint Stripe returns, the owner phone and email, the business name and ZIP, and, in the phone apps, an install ID. We use these hashes only to spot repeat free trials, and keep them for 24 months after the trial starts.
What we do not do
We do not sell shop or crew lists. We do not run third-party advertising SDKs on the phone shell.
Webhooks from Stripe, Resend, and Twilio post to public HTTPS routes so those vendors can confirm delivery and payment. Those routes verify signatures when a webhook secret is set.
Retention and contact
Job photos, hours, and invoices stay until you delete the job or reset the shop database. You can lock a phone from the header. For a copy or deletion request, email jobcommandofficial@gmail.com.
Delete your account in the app: the office can delete the whole shop (every login, job, photo, and record) on the Company tab, and a crew member can delete their own login under My account on their home screen. A deleted login stops working on every phone. A crew member's past hours and pay records stay with the shop because the shop must keep payroll records.
Job Command is for shops, not children. Do not create an account for anyone under 16.
