PRIVACY & TRUST
Privacy Policy
A clear account of the information behind your workspace.
Effective November 6, 2026 · Version 2026-11-06.2
We use information to run your company workspace and the connections you choose. We do not sell personal information, share it for targeted advertising, or use workspace content to train AI models. Please keep highly sensitive personal information out of job notes and uploads.
1. Who operates the service
Jobsite Calendar at jobsitecalendar.com is operated by Jason Hild, based in California, United States ("we," "us"). The service currently offers an invitation-only pilot for US businesses. Contact jasonhild@jasonhild.com about privacy or the handling of your information.
A company decides who joins its workspace and what job, customer, and subcontractor information it enters. We process that workspace content to provide the service to the company. We also handle account, security, and support information to operate the service. If your employer or another business gave you access, its own policies may also apply to how it uses your information.
2. Information we use
| Category | Examples and use |
|---|---|
| Account details | Names, sign-in email addresses, company, role, title or trade, account status, and authentication records provided by you or your administrator. These identify users and control access. Passwords are stored as salted password hashes, not readable passwords. If you enable authenticator-based multifactor authentication, the authenticator secret is encrypted and recovery codes are stored as hashes; no phone number is needed. |
| Account emails | Recipient email, name and company label where used, invitation status, email-verification time, and account-message submission status support invitations, requested sign-in links, password resets, and password-change notices. The live database stores a hash of each one-use link credential, its purpose and expiry, rather than the readable credential. The email itself contains the full access link. |
| Workspace content | Jobs, customer or vendor names, site addresses when entered, schedules, assignments, hours estimates, notes, photos, tasks, and invoice records. Your company and its users supply these for project coordination and recordkeeping. |
| Appointments | Availability windows, private busy blocks, and booking details entered by managers and subcontractors. These determine which times can be booked. |
| Invoice correspondence | Recipients, sender details, messages, invoice attachments, preview history, sending status, and provider identifiers. These preserve correspondence you prepare or choose to send. |
| Security and service records | Session identifiers, policy version and acceptance time, security event types, and account/workspace identifiers help control access and record important actions. Short-lived, protected identifiers derived from sign-in email and IP address help limit abuse. The app does not retain raw IP addresses for this purpose; hosting and network providers still receive connection information. We do not use it to build advertising profiles. |
| Support requests | Contact information and the details you choose to send when requesting help or exercising privacy rights. Please do not email passwords, access tokens, government IDs, or complete payment information. |
We do not ask for Social Security numbers, identity documents, dates of birth, health records, biometric identifiers, bank login credentials, or payment card numbers. Do not put those details in free-text fields, photos, or attachments. New photo uploads are processed to remove supported embedded metadata before storage. Older photos and backup copies are not automatically reprocessed. An image can still reveal people, vehicle plates, access codes, or addresses in the visible picture.
3. Account invitations and access emails
When account email is configured, creating or re-inviting an account sends an invitation to the address supplied by the administrator. You may request a one-use sign-in link or a password-reset link; password changes can generate a security notice. These messages support account access and security, not marketing subscriptions. We do not email your password.
Resend delivers these account messages when enabled. It receives the recipient address, message content, name and company label where included, and the complete one-use access link. The recipient’s email provider also receives the message. Keep access links private. Access to your email account can affect access to Jobsite Calendar, so protect that account with multifactor authentication.
Our email templates do not add tracking pixels or tracking redirects. Account-email setup requires disabling the sending domain’s open and click tracking. Provider processing and retention are described in the Resend Data Processing Addendum and data-handling information. Account-email delivery requires completed provider setup; a submitted message does not guarantee inbox delivery.
4. Optional Google connections
A manager may connect Google through Google's authorization page after site setup is enabled. Connecting is optional; you never enter your Google password into this service.
- Identity: Your Google account identifier and email identify the connected account.
- Gmail: We send only invoice correspondence you explicitly choose to send. We do not read your inbox. The workspace retains the selected recipient, message, attachment, sender, and submission status. Acceptance by Google does not prove delivery or reading.
- Calendar: We read free/busy intervals from your primary calendar to exclude unavailable appointment times. We do not request event titles, descriptions, guests, or locations. Subcontractors see bookable times, not your private calendar events.
Google credentials and cached busy intervals are encrypted in the application database and excluded from workspace exports. Google data is used only for the disclosed connection features, not advertising or AI training. Our use follows the Google API Services User Data Policy, including its Limited Use requirements. Human access to Google data is limited to your affirmative permission for specific data, necessary security investigation, legal requirements, or other uses expressly permitted by that policy.
Use Workspace settings → Google connection → Disconnect to remove the local connection and cached availability. We also attempt to revoke access with Google and tell you if revocation cannot be confirmed. You can revoke access through Google Account connections. Revoking access may affect other profiles using the same Google account. Previously sent emails, business correspondence, appointments, and older backups are not erased by disconnecting.
5. Optional QuickBooks Online connections
A company's QuickBooks administrator may authorize a connection through Intuit after site setup is enabled. This connects one QuickBooks company to the workspace. Intuit's accounting permission allows this integration to read company information and customer invoices; this version does not write invoices, send them, or process payments through QuickBooks.
We use company and customer identifiers and names, invoice numbers, dates, amounts, remaining balances, currency, update information, and sync status to display USD customer invoices and associate them with jobs. Imported settlement amounts may include credits as well as payments. We do not retain QuickBooks private invoice notes or billing email addresses for this read-only sync. We keep the fields needed for the features offered, rather than a complete copy of your QuickBooks account.
QuickBooks credentials are encrypted and excluded from workspace exports. Imported invoices are workspace records included in manager exports. Records no longer available from QuickBooks may remain as archived history outside current totals and schedules.
Use Workspace settings → QuickBooks Online → Disconnect to stop updates and remove the active local credentials. We attempt to revoke access with Intuit; if this is unsuccessful, remove the connection in QuickBooks as well. Disconnecting does not change QuickBooks records or erase imported history, job links, the workspace's company binding, or older backups.
6. Who can receive information
- Your workspace: Authorized managers see their company's work and financial records. Subcontractors see information appropriate to assigned work and bookings. Company administrators are responsible for appropriate invitations and access.
- Site operations: The platform administrator can manage company accounts and see company contact information and summary counts. Authorized operators can access systems for necessary support, maintenance, security, and legal purposes, subject to the Google restrictions above.
- Hosting: Hostinger provides server hosting and related infrastructure. We do not promise that all processing occurs in a particular country.
- Account email delivery: When enabled, Resend processes account-email addresses, content and access links for delivery, as described above. Delivery providers may retain message copies and operational records separately from this app.
- Connections and recipients: Google receives the information needed for authorized Gmail sending and calendar checks. Selected email recipients receive the correspondence you send. Intuit receives authorization and company identifiers for QuickBooks requests. These providers also operate under their own terms and privacy policies.
- Legal and safety needs: Information may be disclosed when required by law or reasonably necessary to investigate abuse, protect rights, or address security incidents. We limit disclosures to what is appropriate. A business transfer would require appropriate privacy protections and any consent required by law or provider policy.
We do not sell personal information or share it for cross-context behavioral or targeted advertising. We do not include advertising trackers, analytics scripts, or session-replay tools in this app.
7. Cookies and browser preferences
A necessary session cookie keeps you signed in. Browser storage remembers interface preferences, such as the calendar lineup. These features are used for the service, not tracking you across unrelated sites. Blocking the session cookie prevents sign-in; clearing browser storage resets saved preferences.
We do not conduct cross-site behavioral tracking. The app does not change its behavior in response to a browser's Do Not Track signal. Because we do not sell information or share it for targeted advertising, there is no such activity to opt out of through Global Privacy Control.
8. Retention and protection
Workspace information remains while needed to provide the company's service, maintain requested business records, resolve disputes, or meet legal obligations. Deletion requests are reviewed manually. The pilot currently has no automatic deletion schedule for workspace content or database backups. Removed information can remain in older backups. Backup removal, legal retention, and any limits will be considered when we respond to a request; we do not promise immediate erasure from every copy.
- Sign-in sessions: Sessions expire after 12 hours unless revoked sooner. Expired sessions and short-lived authorization records are cleaned from the live database.
- Account links: Invitation links expire after 24 hours, password-reset links after 30 minutes, and sign-in links after 15 minutes, unless consumed or invalidated sooner. Expired token records are removed at the next cleanup. Resending a link replaces the previous link of that kind.
- Abuse prevention: Protected sign-in rate-limit identifiers expire after a 15-minute window and are removed at the next cleanup.
- Security activity: Security event records become eligible for removal from the live database after 90 days.
- Privacy requests: Request status records are retained while being handled and become eligible for removal from the live database one year after completion or decline.
- Policy acceptance: The accepted policy version, document identifiers, user/workspace identifiers, and acceptance time are retained as evidence of the agreement. This record does not include IP address or browser user-agent history.
Automated cleanup runs when the app starts and about every 15 minutes while it is running, removing records that have reached these expiry dates. An outage or maintenance can delay cleanup. These live-database schedules do not erase earlier backups. Link expiry or use stops the link from granting access; it does not delete the email from Resend, the recipient’s mailbox, or their backups. Provider retention follows its applicable terms and configuration. Private email previews used for local testing remain until deliberately removed; hosted account-email delivery does not use those previews. An expired authorization cannot be used to sign in or complete a connection. Disconnecting removes active local provider credentials as described above. We use HTTPS, access controls, protected password hashes, and encryption for connection credentials. These measures reduce risk; no system can guarantee that a breach or data loss will never occur. See our security overview for more detail.
9. Your choices and requests
Open Account security → Data and privacy requests to download your personal account information or submit a privacy request. You can also update your profile and disconnect available integrations through the app. Company managers can export business records. Requests for deletion are reviewed; submitting one does not immediately erase company records or send an email. Your request status appears in the same Data and privacy requests section. You may also request access, correction, deletion, or another applicable privacy right by emailing jasonhild@jasonhild.com. Identify your workspace and the type of request; do not include sensitive documents or passwords. We may verify your identity and authority using existing account information before acting.
When your company controls the requested records, we may refer the request to its administrator and assist with its instructions. Some records may need to be retained for legal requirements or the rights of others. We will explain applicable limitations and respond within any deadline required by law. Where the law provides an appeal or authorized-agent process, contact the same address. We will not retaliate against you for exercising applicable privacy rights.
The service is intended for adults using business workspaces, not children. If you believe a child has provided personal information, contact us so we can investigate and address it.
10. Policy changes
The date and version above identify this policy. Material changes will be communicated through the service or account contact before they take effect where required. New uses of Google data require updated disclosures and any additional authorization required by Google. Accepting service terms does not waive privacy rights or give consent to unrelated uses of information.