Privacy policy
Contractor CRM · Last updated October 20, 2026
Who we are
Contractor CRM AI makes the Contractor CRM: the website at my.contractorcrm.ai and the phone app for Android and iPhone. Contracting companies use it to run their business: customers, estimates, jobs, schedules, and their crews' hours. Questions about this policy go to support@contractorcrm.ai.
Whose data it is
Each company decides what goes into its CRM. We store and process that information for the company. If a contractor you hired holds information about you, ask that contractor first. We'll help them answer.
What we collect
- Your account: name, email, phone number, your role, and the company you work for.
- Location, only while you are clocked in. If your company tracks your role, the app records where you are every few minutes from clock-in to clock-out. That includes while the app is in the background or the phone is locked. On Android an “On the clock” notification shows the whole time. Nothing is recorded while you are clocked out.
- Arriving at and leaving job sites, if you turn on automatic clock-in. If your company offers it and you turn it on in the app, your phone watches for that day's job sites and your company's office, even while you are clocked out and the app is closed, using the phone's own geofencing. The app is told only when you arrive at or leave one of those places, and uses it to clock you in and out. It is never told where you are otherwise. You can turn it off in the app at any time.
- Hours: when and where you clock in and out.
- Work records you or your team enter: customers and their contact details, estimates, contracts and signatures, job photos, files, notes, and payments.
- Calls, texts, and email made through the CRM, including call recordings.
- How the CRM is used: which pages you open, how long you are active, and what kind of device you use. Your company's admins see this. We also receive error reports so we can fix problems.
How it is used
Only to run the CRM for your company: showing your team its work, the schedule, the team map and hours, and sending the calls, texts, and emails your company makes. We don't show ads. We don't sell personal information, and we don't share it for anyone else's marketing.
Who can see it
People in your company, depending on their role. Your location and hours are visible to your company's office and admins. We share information with the services that run parts of the CRM for us, and only so they can do that job:
- Supabase (database and sign-in) and Vercel (hosting)
- Twilio and CallRail (calls and texts), and Resend (email)
- Stripe (payments; we never see or store full card numbers)
- Google (maps, plus Drive and Calendar if your company connects them)
- Meta (Facebook lead forms, if your company connects them)
- PropertyRadar (property details for an address)
- Anthropic (the CRM's AI features, which ask your permission the first time you use one)
- Sentry (error reports)
If your company connects its own QuickBooks Online (Intuit), the CRM sends it what your company turns on: customers (names, contact details and addresses), vendors, bills, invoices, payments, expenses and receipts. These are kept in your company's QuickBooks account under Intuit's terms. Customers and vendors stay in QuickBooks even if they're deleted in the CRM, and so does anything sent before your company disconnects QuickBooks or closes its CRM account.
To match your vendors, the CRM also reads your company's QuickBooks vendor list (each vendor's name, phone number, email and address) and keeps a copy with your QuickBooks connection. Vendors you choose to bring in are copied onto your vendor list with those details. Tax IDs and 1099 settings are never copied.
If your company connects a WhatsApp number through Whapi.Cloud, the messages, photos, videos and documents posted in the WhatsApp groups that number is in, with each sender's WhatsApp name and phone number, pass through Whapi to the CRM. Those from a group your company links to a project are shown on that project and its files are saved with it. Photos and documents from a general group (receipts, supply runs) are read by Anthropic's AI to fill in a bill: the store, date, total, how it was paid and any job written on it.
We may also disclose information if the law requires it.
How long it is kept
Location trails are deleted automatically after the period your company sets. The default is 90 days. Everything else is kept while your company uses the CRM, or until your company or you ask for it to be deleted.
Security
Everything travels encrypted (HTTPS). Who can read what is enforced by the database itself, by company and role, not only by what the screens show.
Your choices
- You can turn off location for the app at any time in your phone's settings. Your company may require it while you are on the clock.
- To see, correct, or delete your information, ask your company's admin or email us. You can delete your account yourself, inside the app or here: Delete your account.
Children
The CRM is a work tool for adults and is not meant for anyone under 18.
Changes
When this policy changes, the date at the top changes. Big changes will be announced in the CRM.
Contractor CRM AI · support@contractorcrm.ai