Privacy Policy

Last updated: July 22, 2026

1. Overview

Pegrio LLC ("we", "us") operates FieldClose, a quote-to-payment platform for HVAC businesses. This policy explains what data we collect, why we collect it, and how we protect it.

2. Data We Collect

Account Data

Name, email address, password (bcrypt-hashed, never stored in plaintext)
Organization name and role assignments

Business Data You Input

Customer contact information (name, address, phone, email)
Job details, estimates, and invoices
Payment records processed through Stripe
Equipment and inventory records

Technical Data

IP address, browser type, and usage logs
Cookies for authentication (session tokens via NextAuth)

3. How We Use Your Data

To provide and maintain the Service (authentication, job tracking, invoicing)
To process payments via Stripe (we never see or store your card number)
To send service notifications (estimate approvals, payment confirmations)
To provide customer support
To improve the Service through aggregated analytics

4. Data Sharing

We do not sell your data. We share data only with:

Stripe — payment processing. Card data goes directly to Stripe via their secure elements, never touching our servers.
OpenAI — used to generate estimate draft text. We send job title and customer name only; no payment or financial data.
Hosting provider (Vercel) — application hosting and database storage.
Legal authorities — only when compelled by valid legal process.

5. Data Security

All data is encrypted in transit (TLS 1.3) and at rest (database-level encryption)
Passwords are hashed with bcrypt (never reversible)
Multi-tenant architecture — your data is isolated from other organizations via row-level access controls
Regular security audits and dependency vulnerability scanning
Access to production data is restricted and logged via an audit trail

6. Data Retention

Your data is retained for as long as your account is active. After account cancellation, we retain data for 90 days to allow for reactivation, after which it is permanently deleted. You may request earlier deletion by emailing support@fieldclose.app.

7. Your Rights

Access — export all your data from Settings → Export at any time
Correction — edit any data within the app
Deletion — request complete data deletion via email
Opt-out — unsubscribe from non-essential emails at any time

8. Cookies

We use essential cookies for authentication (session token) and security (CSRF protection). We do not use third-party tracking cookies or advertising networks. Analytics are collected via privacy-respecting first-party methods.

9. Children's Privacy

The Service is a business-to-business tool and is not intended for individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be communicated via email at least 30 days before taking effect.

11. Contact

Privacy questions? Email support@fieldclose.app.