Privacy

Who this covers

Blue Collar Field Kit is field-management software for trades businesses — invoicing, estimating, scheduling, timecards, and the records that go with them — run by MICHAEL DIPERNA, LLC (“we”, “us”). This policy covers the people who use it: a shop owner, the office staff, and the field crew. It also covers this website. When we say “your data”, we mean the account details and business records your company enters and the files it uploads.

What we collect

When you create an account we store the details you give us — your name, email address, your company’s details, and the business records you enter (clients, jobsites, jobs, estimates, invoices, receipts, timecards, employees, pay settings). We store these so the product can show them back to you and your crew. We do not collect data we do not need to run the product, and we do not buy data about you from anyone.

Signing up starts with just your email address. Until you confirm it, we hold only that address and your language; if it is not confirmed within 24 hours, the confirmation link stops working and the sign-up is deleted shortly after. Your name, your shop’s name, your password (stored in hashed form, which nobody can read back, including us) and your time zone are entered on the page that link opens, and are saved only when your account is created. That is also when we record that you accepted our Terms and this policy, and which versions.

For security, we also keep technical records. Your session in the app holds your IP address and browser; sessions expire after a period without activity and are cleared out after that. Security events, such as failed sign-ins, lockouts and password resets, are logged with the IP address and the email address involved, and that log is kept for at most 14 days; a summary of those events, which stores a scrambled form of the email address rather than the address itself, is kept for up to 180 days. The limits on how many sign-up emails an address can receive are counted the same scrambled way and cleared after 7 days.

If your company subscribes, your card is handled by our payment provider, Stripe; we keep only the card’s brand and last four digits and the state of your subscription. If you join our early-access list, we keep your email address and whatever else you choose to tell us on that form — your name, shop name, trade, crew size, current software, and what you most want fixed — plus your browser’s time zone as a rough region. Every early-access email has a one-click unsubscribe.

How we use it

We use your data to run the product for you: to show your records, send the invoices and estimates you ask us to send, notify your crew when a job’s schedule changes, produce your reports, and keep the service working and secure. We do not use your business records or your customers’ details for advertising, and we do not sell them.

Location

Location capture is on by default, and your company can switch it off in its settings. While it is on, we record location at clock-in and clock-out, on job photos and receipts, when a payment is recorded, and when an estimate is signed. For a photo we use the location saved in the photo where there is one, and otherwise ask the device. If the device does not provide a location, the record is saved without one — location is never required. Coordinates are cleared after one year; the record itself stays.

Photos and files

Job photos, receipt images, and other files you upload are stored privately for your company. A file you delete stays recoverable by us for a short period (about 30 days) so we can restore one deleted by accident, and is then removed for good. Deleting your account removes stored file versions as well.

AI processing

If your shop uses an AI feature — such as reading a photographed receipt into a form — the file you submit is sent to our AI provider to be read, and the result comes back to you to review before anything is saved. We record what the request cost. Under our agreement with the provider, your data is not used to train their models.

Who can see your data

Each company’s records are isolated from every other company’s. Within your company, what a person can see depends on their role and job title — a field tech does not see shop-wide financial figures, and pay details are visible only to management. Our own staff access a customer’s account only to operate the service or to help you when you ask, and that access is recorded.

Cookies and analytics

Signing in sets a sign-in cookie, plus a longer-lived “remember me” cookie if you tick that box. There are no advertising cookies and no cross-site trackers, and there is currently no third-party analytics on this site or in the product. If we ever add analytics, it will be described here first. When you are signed in, your language choice is saved to your account so it follows you between devices; your light or dark theme stays on your own device.

Email

We send the invoices, estimates, and notifications you ask us to send, from your business’s name with a reply address that reaches you. Staff notification emails — such as a schedule change — carry a one-click unsubscribe, and you can turn them off in the product at any time. A customer document like an invoice is not something a recipient can unsubscribe from; you control who it goes to.

Sharing and service providers

We do not sell your data and we do not use it for advertising. We rely on a small set of service providers to run the product — cloud hosting, storage, and email delivery (Amazon Web Services, including Amazon SES, in the United States); subscription payments (Stripe, which receives your company’s name and billing email and holds your card details); and the AI provider for the features described above (Anthropic). Each receives only what it needs to do its job. We disclose data to anyone else only if the law requires it, and we will tell you if we are ever compelled to, unless we are legally prevented from doing so.

Where your data is stored

Your data is stored and processed in the United States. If you use the product from outside the United States, you are asking us to transfer and store your data there. Where the law (such as the GDPR) requires safeguards for that transfer, we put them in place.

How long we keep it

We keep your company’s records until you ask us to delete them — including after a subscription ends or an account is suspended — so you can always come back to them or take them with you. Location coordinates are cleared after one year, as described above, and a raw file you import is deleted 30 days after the import, with the import’s history removed after 180 days. An unconfirmed sign-up is deleted shortly after its 24-hour link expires, and security records are kept for the periods described above; copies of either inside our backups expire within 35 days.

When you ask us to delete your account, we remove its records and its stored files, including the recoverable file versions described above, and we delete your customer record at Stripe. Copies inside our backups and safety exports expire within 35 days. We keep a short record that the deletion happened for 90 days, so it can be re-applied if we ever have to restore from a backup, and we keep the amounts of the payments you made to us, without your name, because they are our own accounting records.

Security

Data is encrypted in transit and at rest, each company’s records are isolated from every other’s, access is limited to what a person’s role needs, and backups are taken regularly. No system is perfectly secure; if a breach ever affects your data, we will tell you what happened and what we are doing about it.

Your rights

You can export your data from inside the product — including all of it in one download, for anyone at your company with permission to export — ask us for a full copy, correct anything by editing it, and ask us to delete your account and its data. Where privacy law — such as the GDPR in Europe or the CCPA in California — gives you additional rights, we honor them: email us and we will act on it, and we will not charge you or treat you differently for asking.

Children

The service is business software and is not directed at children, and we do not knowingly collect data from them.

Changes

If this policy changes in a way that matters, we will say so in the product or by email — not silently — and update the date at the top.

Contact

Questions about your data, or to exercise any of the rights above: support@bluecollarfieldkit.com.