JobsiteOn Privacy Policy

Last Updated: March 1, 2026

This Privacy Policy explains how JobsiteOn (“JobsiteOn,” “we,” “us,” “our”) collects, uses, discloses, and retains information when you use our websites, applications, and related services (collectively, the “Services”), or otherwise interact with us.

Contact (Privacy): JobsiteOn 5960 Berkshire Ln, Dallas, TX 75225 Attn: Privacy Email: privacy@jobsiteon.com

1) Scope + roles

• This Policy applies to information collected through the Services and our business operations (sales, support, marketing, events).
• Business accounts (customers/workspaces): If you use JobsiteOn through a company account (your employer or another organization), that organization may control account settings and certain data in the Services. In those cases, JobsiteOn may process information on the organization’s instructions.

2) Information we collect

We collect information in three ways: (A) you provide it, (B) we collect it automatically, and (C) we receive it from third parties.

A. Information you provide

• Account + profile data: name, email, phone, username, password (hashed), role/permissions, company name, billing admin contact.
• Business/work data you upload or create: customers/contacts, addresses, jobsite details, schedules, estimates, invoices, payments status, notes, messages, files, photos, videos, documents, and other content you submit through the Services.
• Payment + billing data: billing address and payment-related information (typically processed by a payment processor; we may receive tokens and limited payment metadata such as last four digits and expiration month/year).
• Support + communications: communications with us (emails, chats, calls), and any information you choose to share. Calls or meetings may be recorded where permitted and where you consent or are notified as required.

B. Information collected automatically

• Usage + device data: device identifiers, IP address, browser type, OS, app version, language, time zone, pages/screens viewed, features used, referring/exit pages, clickstream, and diagnostic/crash logs.
• Approximate location: derived from IP address.
• Cookie + tracking data: identifiers and activity data collected via cookies, SDKs, pixels, and similar technologies (see Section 6).

C. Information from third parties

• Integrations you enable: accounting, payments, calendars, communications, storage, or other integrations (we receive data based on what you connect and authorize).
• Identity providers: if you sign in via SSO or a third-party login, we receive basic account identifiers and authentication signals.
• Service providers + partners: fraud/abuse signals, marketing attribution, and analytics.

3) How we use information

We use information to:

• Provide and operate the Services (create accounts, authenticate users, deliver features, process transactions).
• Process workspace activities (jobsite workflows, estimates/invoices, customer communication, scheduling, reporting).
• Improve, develop, and secure the Services (debugging, testing, analytics, performance monitoring, fraud prevention, and enforcing policies).
• Customer support (respond to requests, troubleshoot issues).
• Communications (service notices, security alerts, administrative messages).
• Marketing and advertising (promote our Services, measure campaigns, and personalize marketing where permitted).
• Compliance and protection (legal obligations, audits, dispute resolution, and protecting JobsiteOn, our users, and the public).
• De-identified/aggregated use: We may create aggregated or de-identified data and use it for product improvement, benchmarking, analytics, and business planning. Where required, we maintain de-identification safeguards.

4) How we disclose information

We disclose information in the following circumstances:

• Within your workspace: to other authorized users in the same customer/workspace (based on roles and permissions).
• Service providers/processors: hosting, analytics, monitoring, payment processing, customer support tools, communications providers, security vendors, and similar vendors who process data for us under contractual confidentiality and security obligations.
• Integrations you choose: when you connect third-party services, we share information as directed by you and the integration settings you configure.
• Affiliates: we may share information within our corporate group for operational, security, and business purposes.
• Business transfers: in a merger, acquisition, financing, reorganization, bankruptcy, or sale/transfer of assets, information may be disclosed or transferred as part of that transaction.
• Legal + safety: to comply with law, subpoenas, court orders, or governmental requests; to investigate or prevent fraud, security issues, or violations; to protect rights, property, and safety.
• With your direction: when you explicitly request or consent to sharing.

5) Data retention

We retain information as long as reasonably necessary to:

• provide the Services and maintain your account/workspace,
• meet legal, tax, accounting, and compliance obligations,
• maintain security, prevent fraud/abuse, and enforce agreements,
• resolve disputes.

Retention periods vary by data type, customer configuration, and contractual requirements. We may retain certain information after account closure where permitted or required (for example, for legal compliance, security, backups, and dispute resolution). Backups are overwritten on a rolling basis.

6) Cookies, analytics, targeted advertising, and preference signals

We use cookies and similar technologies to:

• keep you signed in and maintain sessions,
• remember preferences,
• understand usage and performance,
• measure and improve marketing.

Cookie controls

• You can adjust cookie settings in your browser and (where available) through our cookie banner or preferences tools.
• Some features may not function properly if you disable certain cookies.

Targeted advertising opt-out

Depending on your settings and region, we may use analytics/advertising partners that help us measure and improve campaigns. Some of this activity may be considered “targeted advertising,” “sharing,” or “selling” under certain state laws (even if no money is exchanged).

Global Privacy Control (GPC) and similar signals

Where required, JobsiteOn recognizes browser-based opt-out preference signals (such as Global Privacy Control) as a request to opt out of applicable targeted advertising and related “sale/share” activity for the browser/device that sends the signal.

7) Security

We use administrative, technical, and physical safeguards designed to protect information (access controls, encryption in transit where supported, monitoring, and least-privilege practices). No system can be guaranteed to be 100% secure, and you are responsible for maintaining the confidentiality of your credentials and using strong passwords.

8) Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will take steps to delete it.

9) Third-party websites and services

The Services may link to third-party websites or include third-party tools (including integrations). Their privacy practices are governed by their own policies, not this Policy.

10) Your privacy choices (general)

• Account info: You can review and update certain account details in the Services.
• Marketing communications: You can opt out of marketing emails by using the unsubscribe link (service/transactional messages may still be sent).
• Device permissions: If you use the mobile app, you can control permissions (e.g., notifications, location) through your device settings.

11) U.S. state privacy rights (all states)

Many states provide privacy rights for residents, and JobsiteOn supports requests consistent with applicable law. Depending on your state and how you interact with JobsiteOn, you may have the right to:

• Access/confirm whether we process personal data about you and obtain a copy.

• Correct inaccuracies.

• Delete personal data (subject to exceptions).

• Data portability (receive data in a usable format).

• Opt out of:

  • targeted advertising,
  • certain profiling that produces legal or similarly significant effects (where applicable),
  • “sale” or “sharing” of personal data as defined by law.

• Limit the use of sensitive personal information (where applicable).

• Non-discrimination: you will not be unlawfully discriminated against for exercising rights.

How to submit a request

Email privacy@jobsiteon.com with:

• your name and the email/phone associated with your account (if any),
• the state you live in,
• the request type (access, delete, correct, opt-out, etc.).

Verification + authorized agents

We may need to verify your identity (and/or your authority to act for a business/workspace) before fulfilling requests. Where permitted, you may use an authorized agent; we may require proof of authorization and verification of your identity.

Appeals

Where required, if we deny your request, you may appeal by replying to the denial email with “Appeal” in the subject line and any supporting details.

12) California privacy disclosures

California requires specific disclosures and rights. California’s privacy framework includes requirements for privacy policies, notices at collection, opt-out links, and handling of preference signals. ([California AG][1])

Categories of personal information we collect (may include)

Depending on how you use the Services, we may collect the following categories (including within the last 12 months):

• Identifiers: name, email, phone, IP address, account IDs.
• Customer records: billing/contact details.
• Commercial information: subscription plan, invoices, transaction metadata.
• Internet/network activity: usage, logs, cookie identifiers.
• Geolocation data: approximate location (and precise location if you enable it in an app feature).
• Professional/employment information: company, role, license/business details you provide.
• Sensitive personal information (SPI): account log-in credentials and, if enabled/collected, precise geolocation and other data that may be considered sensitive under California law.

Sale / sharing

We do not sell personal information for money. We may share certain identifiers and internet/network activity with analytics and advertising partners for measurement and marketing, which may be considered “selling” or “sharing” under California definitions. You can opt out via recognized preference signals (e.g., GPC) and/or by contacting us. ([California Privacy Protection Agency][2])

California rights

California residents may have rights to know/access, delete, correct, opt out of sale/sharing, limit use of SPI, and not be discriminated against. We will verify requests as permitted by law and may deny requests under lawful exceptions (e.g., security, fraud prevention, legal compliance, and certain business purposes).

13) Texas notice

Texas law provides Texas residents privacy rights and imposes obligations on covered businesses, including rights to access, correct, delete, and opt out of certain processing, with provisions recognizing authorized third parties in certain cases. ([Texas Attorney General][3])

Texas residents can submit requests via privacy@jobsiteon.com.

14) Changes to this Policy

We may update this Policy from time to time. The “Last Updated” date at the top indicates when the latest version became effective. If required, we will provide additional notice (e.g., in-app notice or email).

15) References used to align this Policy to U.S. requirements

• California privacy framework and disclosure requirements (including notice at collection and opt-out link requirements). ([California AG][1])
• Texas Data Privacy and Security Act overview (Texas Attorney General; Texas State Law Library). ([Texas Attorney General][3])
• Children’s Online Privacy Protection Rule (COPPA) (FTC). ([Federal Trade Commission][4])
• Multi-state comparison and effective-date landscape used for state-by-state alignment through early 2026.