Privacy Policy

Who We Are

Jobivo ("we", "our", "us") operates Jobivo, a field-service job-management platform for trades businesses, available on the web, iOS, and Android. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Jobivo. Questions and requests: privacy@jobivo.co.uk.

Our Two Roles

Jobivo handles personal data in two distinct capacities:

• As a controller: for your account, billing, subscription, support, and usage data — the data we need to run Jobivo as a business. This policy is your privacy notice for that data
• As a processor: for the records a trades business stores in its workspace — its customers, sites, jobs, photos, quotes, and invoices. We process that data on the business's behalf and instructions; a Data Processing Addendum is available from privacy@jobivo.co.uk

If a trades business holds your details in its Jobivo workspace (for example you are its customer), please direct privacy requests about those records to that business — we will assist it in responding.

Information You Provide

• Account information: your name, work email address, password, company name, and role when you create an account
• Company & customer records: the customers, sites, addresses, and contact details you add to your workspace
• Job & workflow data: jobs, templates, steps, notes, references, and any custom fields you create
• Quotes, invoices & payments: the billing documents you create, their line items and totals, and payment records against them
• Photo evidence: photos you capture against job steps, including any captions or notes
• Team information: the name, email, and role of team members you invite to your workspace
• Billing data: your subscription plan and billing history; your card details are entered directly with Stripe and never stored by Jobivo

Information Collected Automatically

• Location data: with your permission, GPS coordinates and a timestamp attached to photos you capture, so evidence can be verified
• Usage data: app interaction data, feature usage, and performance metrics
• Device information: device type, operating-system version, unique device identifiers, and push-notification tokens
• Email delivery data: delivery and open events for transactional emails we send (for example whether an invoice email was opened)
• Connected services: when you link Stripe, Xero, or QuickBooks, the data described in the payments and accounting sections below

Information from Device Permissions

• Camera: used to capture job-step photo evidence (only when you use this feature)
• Photo library: used to attach existing images to a job or your profile
• Location services: used to GPS-tag captured photos and job sites
• Notifications: used to deliver job updates, invites, and payment alerts you have enabled

How We Use Your Information (and Our Lawful Bases)

• To provide the Service: running your workspace, syncing across devices, storing photo evidence, sending invoices, processing subscriptions — necessary to perform our contract with you
• To operate connected services: creating payment links and syncing records to accounting software you have connected — performing our contract, on your instruction
• To secure and improve Jobivo: monitoring for abuse, debugging, and analysing aggregate feature usage — our legitimate interests in running a secure, improving product
• To communicate: transactional messages under contract; product news under our legitimate interest in reaching business users, always with an opt-out
• To meet legal obligations: tax, accounting, and lawful requests

Jobivo does not make automated decisions about you that have legal or similarly significant effects.

Payments and Stripe

Online payments run through your own Stripe account, connected by you. When a customer pays an invoice, their card details are entered directly into Stripe's PCI-DSS Level 1 validated systems — they never touch Jobivo's servers, and Jobivo does not store card numbers.

• What we access: payment, refund, and payout events and your Stripe account status (for example whether charges are enabled)
• Why: to mark invoices paid, mirror refunds, show connection status, and collect the disclosed platform fee — nothing else without your consent

Stripe processes payer data as described in the Stripe Privacy Policy, including as an independent controller for fraud prevention.

Accounting Integrations (Xero and QuickBooks)

If you connect Xero or QuickBooks, Jobivo exchanges data with that provider solely to provide the sync feature you switched on:

• Sent to Xero: invoices, the customer contact they belong to, and payment records; read back: payment status, your organisation's account list and tax rates (read-only, to configure the sync)
• Sent to QuickBooks: invoices, customers, and payment records; read back: payment status, item/account/VAT-code lists and company preferences (to configure the sync)

• We use this data solely to provide the synchronisation feature — never for any other purpose
• We never sell it, never share it in aggregate with third parties, and never use it to train AI models
• We do not process this data on Xero's or Intuit's behalf — we act on yours
• Disconnecting the integration revokes our access immediately; provider-derived data is deleted on disconnection or on request

Data inside Xero or QuickBooks is governed by their own policies: Xero Privacy Notice · Intuit Privacy Statement.

Service Providers (Subprocessors)

We use a small set of providers to run Jobivo, each under contract and only for the purpose listed:

• Supabase: database, authentication, and file storage — hosted in the EU (Frankfurt)
• Vercel: web hosting and privacy-focused analytics — served from the EU; Vercel Inc. is a US company
• Stripe: subscription billing and online invoice payments — US/UK entities
• Google Firebase: push notifications and app analytics — US
• Resend: transactional email delivery — US

International Transfers

Your workspace data is stored in the EU (Frankfurt, Germany). Where a provider processes data in the United States (Stripe, Google, Vercel, Resend), transfers rely on the UK Extension to the EU–US Data Privacy Framework, with the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses as a fallback. You can request a copy of the applicable safeguards from privacy@jobivo.co.uk.

Data Storage and Security

• Cloud storage: your data is stored using Supabase (PostgreSQL and object storage) with per-workspace access controls
• Local storage: data is cached on your device so the app works offline; it syncs when a connection returns
• Encryption: data is encrypted in transit (TLS) and at rest; integration access tokens are held server-side only
• Authentication: secure authentication is handled through Supabase Auth, with role-based access inside each workspace

Data Sharing

We do not sell, trade, or rent personal information. We share information only:

• Within your company workspace — team members see the jobs, customers, and photos shared with them
• With the connected services you enable (Stripe, Xero, QuickBooks), as described above
• With the service providers listed above, under contract and only to run Jobivo
• With your consent, to comply with legal obligations, or to protect our rights and prevent fraud

Cookies and Analytics

• Strictly necessary: sign-in/session cookies and preference storage that the Service cannot work without
• Analytics: privacy-focused usage statistics (Vercel Analytics; Firebase Analytics in the mobile apps) to understand feature use and performance — you can opt out via privacy@jobivo.co.uk
• No advertising: we use no advertising or cross-site tracking cookies

Data Retention

• Active account data is retained for as long as your account is active
• Deleted accounts have their data removed within 30 days
• Billing records, and invoice and payment records needed for tax and accounting law, may be retained for up to 6 years
• Integration sync logs are kept for support and audit purposes and deleted with the workspace
• Job photos are deleted with the workspace they belong to
• Some anonymised statistical data may be retained for product improvement

Your Rights

Under UK and EU data protection law you can:

• Access your personal data, and correct inaccurate data
• Delete your account and associated data
• Export your job and customer data
• Restrict or object to certain processing, and withdraw consent where processing relies on it
• Opt out of optional features such as location services, and of marketing at any time

Contact privacy@jobivo.co.ukfirst and we will respond promptly. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Children's Privacy

Jobivo is a business tool for trades companies and is not directed to children. The Service is for users aged 18 or over, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through the Service or by email, and the "Last updated" date above will change.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Email: privacy@jobivo.co.uk

Website: www.jobivo.co.uk

Address: Cannock, Staffordshire, United Kingdom

Compliance

Jobivo is designed to comply with:

• UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• General Data Protection Regulation (GDPR) — EU/EEA
• Privacy and Electronic Communications Regulations (PECR)
• Google Play Developer Program Policies and Apple App Store Guidelines