Privacy Policy

Last updated: September 26, 2026

1. Overview

Pegrio LLC ("we", "us") operates FieldClose, a quote-to-payment platform for service businesses. This policy explains what data we collect, why we collect it, and how we protect it.

2. Data We Collect

Account Data

Name, email address, password (bcrypt-hashed, never stored in plaintext)
Organization name and role assignments

Business Data You Input

Customer contact information (name, address, phone, email)
Job details, estimates, and invoices
Payment records processed through Stripe
Equipment and inventory records

Technical Data

IP address, browser type, and usage logs
Cookies for authentication (session tokens via NextAuth)

3. How We Use Your Data

To provide and maintain the Service (authentication, job tracking, invoicing)
To process payments via Stripe (we never see or store your card number)
To send service notifications (estimate approvals, payment confirmations)
To provide customer support
To improve the Service through aggregated analytics

4. Data Sharing

We do not sell your data. We share data only with:

Stripe — payment processing. Card data goes directly to Stripe via their secure elements, never touching our servers.
OpenAI — used to generate estimate draft text. When you request a draft, we send the job title, job notes, customer name, and selected trade context. Review job notes before requesting an AI draft; payment card details are not included.
Vercel — application hosting and the public-page analytics described below.
Supabase — storage of account and business records in the configured database.
Resend — recipient addresses and message content for transactional email, such as invitations, password recovery and customer documents.
Twilio — phone numbers and message content when SMS delivery is configured and used.
Cloudflare R2 — uploaded job photos and other supported files when file storage is configured.
Sentry — application error diagnostics when error monitoring is configured.
Legal authorities — only when compelled by valid legal process.

5. Data Security

The hosted application uses HTTPS to protect browser connections
Passwords are hashed with bcrypt (never reversible)
Server-side organization and role checks restrict access to business records
Dependency vulnerability scanning is part of the release checks
Selected security, administrative and payment actions are recorded in an application audit trail

6. Data Retention

Account and business records are retained while your account is active. Canceling a subscription does not automatically delete those records. Email pegriollc@gmail.com to request deletion or to ask about retained records and backups. Deletion requests require account verification and review of records that must be retained; we will confirm the scope and timing of the request.

7. Your Rights

Access — organization owners can export customers, jobs, invoices, and payments as CSV from Settings. Contact support for additional data requests
Correction — edit supported records within the app, subject to your role and the record's status; contact support for other corrections
Deletion — request deletion via email as described above
Opt-out — unsubscribe from non-essential emails at any time

8. Cookies

We use essential cookies for authentication (session token) and security (CSRF protection). We do not use third-party tracking cookies or advertising networks. On public product, pricing, tour, calculator and help pages, Vercel Analytics may collect page views and fixed interaction events, such as opening the tour or clicking signup. Our event payloads exclude form entries, help search text, customer records and URL queries or fragments. These events are disabled when the browser signals Do Not Track or Global Privacy Control.

9. Children's Privacy

The Service is a business-to-business tool and is not intended for individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be communicated via email at least 30 days before taking effect.

11. Contact

Privacy questions? Email pegriollc@gmail.com.