Privacy Policy

When you register and use JobVivi, we collect:

• Name, email address, and password (or OAuth provider credentials);
• Business name, address, and contact information;
• Subscription plan and billing information (processed by third-party payment providers — we do not store raw card numbers);
• Company logo, branding preferences, and invoice/estimate settings.

As part of using the Service, you may enter information about your own customers, including names, addresses, phone numbers, email addresses, and service history. You are the data controller for this customer data. We process it on your behalf as a data processor.

We automatically collect certain technical information when you use the Service, including:

• IP address, browser type, and device information;
• Pages visited, features used, and time spent in the app;
• Error logs and crash reports.

Payment card information is collected and processed directly by our payment providers (Stripe, Square, PayPal). We receive only tokenized payment references and transaction summaries. We do not store full card numbers or CVV codes.

When you are signed in to the JobVivi mobile app and have granted location permission, the app collects your device's precise GPS location, including while the app is in the background. This applies to everyone who uses the mobile app for a business account (owners, admins, and employees). Location is collected whenever you are signed in, not only during working hours or while a job is in progress. This data is used solely to:

• Show real-time crew location on the business's dispatch map;
• Detect arrival at and departure from job sites, and send on-the-way notifications to customers;
• Show the business a per-employee location history.

Location data is visible only to the owner and admins of the same business account. We do not share location data with any third party for advertising or profiling purposes. Raw location history is automatically deleted after 90 days. Job-site arrival and departure events are kept as part of the related job record.

To stop location collection, sign out of the mobile app or revoke location permission in your device's system settings. Business owners can also turn off location sharing for themselves in the app's settings. Revoking permission disables crew tracking but does not affect other app features. Businesses that use JobVivi to track employees are responsible for giving their employees any notice or obtaining any consent that applicable law requires.

If you enable push notifications in the mobile app, we collect a device push token issued by your device's operating system (Apple APNs or Google FCM). This token is used solely to deliver job assignment alerts, schedule reminders, and other app notifications to your device. Device tokens are not used for advertising, are not linked to any third-party advertising network, and are deleted when you sign out of the app, or once Apple or Google report that the token is no longer valid (for example, after you uninstall the app).

When you connect a third-party payment processor account to JobVivi so that you can accept payments from your own customers — currently PayPal (via Log in with PayPal / Connect with PayPal), Stripe, and Square — the processor shares limited account information with us in order to establish the connection. This typically includes:

• Your name on the provider account;
• The email address associated with your provider account;
• A provider-issued account identifier (for example, PayPal payer_id, Stripe account ID, or Square merchant ID);
• OAuth access and refresh tokens that permit JobVivi to initiate payment requests and read transaction status on your behalf.

We use this information solely to (a) display the connected account in your JobVivi dashboard, (b) route customer payments to your connected processor account, and (c) verify webhook events from the processor. We do not access your processor account beyond what is necessary to operate these features, and we do not share this information with any third party for marketing purposes.

Data shared with the processor is also governed by that processor's own privacy policy (for PayPal, see PayPal's Privacy Statement). You may revoke our access at any time from Settings → Payment Methods within JobVivi, or directly from the processor's dashboard; upon revocation we delete the associated OAuth tokens.

When you visit jobvivi.com or use our forms without an account, we collect:

• Contact form: your name, email address, company (optional), and message, which we use to reply to you;
• Product demo: the email address you enter (optional), your IP address, and the approximate city, region, and country our hosting provider (Vercel) derives from it. We use this to send you a one-time follow-up email and to understand interest in JobVivi. You can opt out of further email by replying “unsubscribe”;
• Analytics: anonymous page-view statistics collected by Vercel Web Analytics, which does not use cookies or track you across other websites.

When the SMS/text messaging features of JobVivi are used, we may collect and store:

• Customer phone numbers provided by business account holders;
• SMS opt-in consent status and the timestamp at which consent was recorded;
• Opt-out status (e.g., when a customer replies STOP);
• Message delivery status and metadata returned by the SMS carrier.

SMS data is used solely to:

• Facilitate business-to-customer text communications on behalf of the account holder;
• Honor opt-out requests and ensure opted-out numbers are not messaged;
• Maintain records of consent for regulatory compliance.

We do not share, sell, or use SMS opt-in data or customer phone numbers for our own marketing purposes, nor do we share this data with third parties for their marketing purposes. SMS opt-in data is not shared with any third parties except as required to deliver the message (i.e., passing the message through our SMS provider, Twilio).

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

End customers may opt out of receiving SMS messages at any time by replying STOP. Opt-out status is recorded and honored automatically. For assistance, customers may reply HELP or contact the business directly.

End customers (the individuals who receive SMS messages from businesses using JobVivi) provide explicit, documented consent through the following flows before any message is sent:

• Invoice / Estimate Page Opt-In: When a customer opens their invoice or estimate (accessible via a unique link at jobvivi.com/invoice/:id or jobvivi.com/estimate/:id), they are shown a consent banner: "Get text updates from [Business Name]. Receive appointment reminders, on-my-way notifications, and invoice or estimate updates via SMS. Up to ~5 msgs/month. Msg & data rates may apply. Reply HELP for help, STOP to cancel.", with links to this Privacy Policy and our Terms. The customer must actively tap "Yes, text me" to opt in. Tapping "No thanks" records an explicit opt-out.
• Customer Portal Opt-In: Customers accessing the self-service portal are shown the same consent banner and disclosures and must actively tap "Yes, text me" before SMS is enabled.
• Point-of-Service: Businesses may record verbal or written consent obtained directly from the customer (for example, by phone or in person after reading a provided consent script). The business must select how consent was obtained and confirm a mandatory attestation; JobVivi will not enable SMS from the business dashboard or mobile app without it. This also applies when a customer who previously opted out tells the business they want texts again.

All consent events are stored with timestamp, method, and customer ID. No SMS messages are sent to recipients without a recorded opt-in, and this is enforced by the JobVivi platform, not just the user interface. A customer who opts out cannot be messaged again unless they opt back in themselves (by replying START or using the consent banner) or the business records their renewed consent as described above. A customer who replied STOP must also reply START before carriers will deliver further messages.

• Google Calendar (.../auth/calendar.events) — to create, read, and update calendar events that correspond to your JobVivi jobs and appointments;
• Google Contacts (.../auth/contacts) — to create, read, update, and delete contacts and a dedicated contact group so your JobVivi customers stay in sync with your Google address book;
• Email address (.../auth/userinfo.email) — to identify which Google account is connected and display it in your settings.

We use data obtained through Google APIs solely to provide and improve the user-facing features you enable:

• Writing your JobVivi jobs and appointments to your Google Calendar as events;
• Syncing your JobVivi customers to your Google Contacts, grouped under a "[Your Business] Contacts" group, and keeping those entries updated or removed as your customer records change;
• Displaying your connected Google account email and sync status within JobVivi settings.

We store the OAuth access and refresh tokens Google issues so the integration can operate on your behalf; these are encrypted and used only to call the Google APIs above. We store a Google-issued resource identifier for each synced contact so we can update or remove the correct entry. We do not retain a separate copy of your broader Google Calendar or Contacts data beyond what is necessary to perform an active sync. When you disconnect the integration (Settings → Google Calendar / Google Contacts) or delete your account, we revoke the tokens and delete the stored credentials and resource identifiers.

JobVivi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with those requirements, JobVivi:

• Uses Google user data only to provide and improve the user-facing Calendar and Contacts features described above;
• Does not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with user notice;
• Does not use Google user data for serving advertising, and does not sell it;
• Does not allow humans to read Google user data unless we first obtain your affirmative consent for specific messages, doing so is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized;
• Does not use Google user data to train, develop, or improve generalized artificial intelligence or machine learning models.

You may revoke JobVivi's access to your Google data at any time by disconnecting the integration within JobVivi (Settings → Google Calendar or Google Contacts), or directly from your Google Account permissions page. Upon revocation, we delete the associated OAuth tokens and stored identifiers.

You can delete your account at any time in the JobVivi web app (Settings → Account Settings → Delete Account) or the mobile app (Settings → Delete account). If your trial or subscription has ended, the upgrade screen offers the same option. Deletion in the app is immediate. If you own the business account, this deletes the business and all of its data, removes your team members' logins, and cancels any paid subscription. If you are a team member, it deletes only your login; the business's records stay with its owner. Step-by-step instructions are on our account deletion page.

You may also request deletion of your account and all associated personal data at any time by emailing support@jobvivi.com with the subject line "Account Deletion Request" from the email address registered to your account. Requests sent from a different email address cannot be verified and will not be processed; we will reply asking you to resend from your registered address.

We will delete your account and its data within 30 days of verifying an email request. Data that we are required to retain by law will be retained only for the legally mandated period and will not be used for any other purpose. Copies in encrypted backups are overwritten on our providers' normal backup rotation.

Deletion of your account is permanent and cannot be undone. All job history, customer data, invoices, and settings associated with your account will be permanently removed.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include: contract performance (providing the Service), legitimate interests (improving and securing the Service), legal obligation, and consent (for optional features such as marketing emails).

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact support@jobvivi.com.