Privacy policy

Last updated

What Dispatchem stores, why, who else handles it, and how to have it deleted.

01

Who this covers

Dispatchem is run by [operating company]. It is used by service businesses (their owners, office staff and technicians) to keep track of their customers and their work.

Information about a business's own customers (names, addresses, jobs, estimates and invoices) is entered and controlled by that business. We store and process it on the business's behalf. If a business sent you an estimate or invoice through Dispatchem, contact that business first about your information.

02

What we store

  • Your account: name, email address, phone number (optional), role and company. Passwords are stored only as a one-way hash, never in plain text.
  • Your company: company name, industry, time zone, and invoicing settings such as payment terms and the message added to estimates and invoices.
  • Work records your company enters: customers' names, email addresses, phone numbers and service addresses; workflows, visits, estimates, invoices and their line items; the price book; job notes, checklists and photos; and team chat messages.
  • Time and pay: clock-in and clock-out times, and the pay rates, salaries and payroll periods your company enters.
  • Payments: when a company connects Stripe or Square, we store the connected account's identifiers (Square access tokens are stored encrypted). Card details are entered on Stripe's or Square's own page and never reach us. We record each payment's amount, status and time.
  • The field app: a device token for push notifications, and a sign-in token kept in the phone's secure storage. Photos you take in the app are uploaded to the job. Work done without signal is held on the phone until it syncs. The app does not track your location.
  • Cookies: one first-party session cookie keeps you signed in. There are no advertising or analytics cookies, and no third-party trackers on the site or in the apps.
  • Technical records: like most web services, our servers can record details of requests (such as the page requested and when) to keep Dispatchem running and secure. [Which details, and for how long.]

03

How we use it

Only to run Dispatchem for your company: showing schedules and records to your team; sending the emails you ask it to send (estimates, invoices, payment links, crew invites and password resets); sending notifications to your crew's phones; taking payments through your connected provider; keeping the service secure; and answering support requests.

We do not sell or rent personal information, use it for advertising, or share it for anyone else's marketing.

04

Who else handles it

  • Hosting: Oracle Cloud Infrastructure runs our servers and database.
  • Email: [email provider] delivers the emails Dispatchem sends. It receives the recipient's address and the message.
  • Push notifications: Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS) deliver notifications to the field app. They receive the device token and the notification text.
  • Payments: Stripe and Square, only for companies that connect them. Their own privacy policies cover the payment details you give them.

We'll update this list before adding any other provider.

05

Keeping and deleting

A company's records are kept while its account is active. Admins can deactivate a team member at any time in Settings → Team, which ends their access. Customers, estimates, invoices and crew lists can be exported to CSV from the app.

Deleting a company's account isn't self-service yet. To have it deleted, ask through the contact you were given when you joined the beta. [How long deleted data remains in backups and logs.]

06

Security

Dispatchem is served over HTTPS. Each company can see only its own records, and that is checked on our servers for every request, not just hidden in the app. Roles limit what each person can change: for example, only admins manage the team, and payroll is limited to admins and office staff.

07

Age

Dispatchem is a tool for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children.

08

Changes and contact

If we change this policy, we'll update the date at the top and, for significant changes, tell account admins by email before the change applies.

We'll publish how to reach us about privacy here soon. Postal address: [mailing address].