Privacy Policy

Draft for review. This describes how BluCollar actually handles data today, but it is not legal advice and has not been reviewed by a lawyer. Have an attorney review it, fill in every item marked in [brackets], and update it whenever the software changes.

This policy explains what BluCollar collects, why, and who else is involved. BluCollar is operated by [LEGAL ENTITY NAME] ([“we”], [“us”]) at blucollarpro.com.

Two roles, briefly

When a business signs up, we handle their account information as the business making decisions about it. Everything that business then enters about its own customers and employees is handled on that business’s instructions: they decide what to collect and how long to keep it, and we process it to run the software for them.

What we collect

• Account information: business name, owner name, email address, phone, business address, trade, and plan.
• Sign-in information: a password stored only as a secure hash, one-time sign-in codes, and records of sign-in attempts (including IP address) used to block password guessing.
• Business data you enter: customers and contact details, proposals, jobs, service calls, job photos, invoices and payments, parts, vendors and vendor bills, and bookkeeping records.
• Employee data you enter: names, addresses, dates of birth, phone numbers, emergency contacts, pay rates, hours worked, tax withholding elections, Social Security numbers, direct deposit bank details, driver’s license or state ID numbers, and photos of I-9 documents.
• Payment information: handled by Stripe. We receive limited details such as the card brand and last four digits; we never store full card numbers.
• Technical information: log records of requests to the service, used to keep it running and secure.

Why we use it

• To provide the software and its features.
• To bill for subscriptions and per-invoice usage.
• To send service messages: sign-in codes, password resets, proposal and invoice emails you send to your customers, onboarding invitations, and pay stubs.
• To keep accounts secure and investigate misuse.
• To provide support when you ask for it.
• To meet our legal obligations.

We do not sell personal information, and we do not use your business data, your customers’ data or your employees’ data to advertise to anyone.

Who else handles the data

We use these providers to run BluCollar. Each receives only what it needs:

• Render — hosting and the database where your data is stored.
• Cloudflare R2 — storage for uploaded files, such as employee documents, job photos, logos and vendor bills.
• Stripe — subscription billing and, where you enable it, collecting payments from your customers.
• Resend — delivering email sent by the software.
• Google Maps — address lookup and maps in the app.
• [Add any other provider you connect, and remove any you stop using.]

We may also disclose information if required by law, or as part of a business transfer such as a sale or merger, in which case we will say so in advance.

How it is protected

• Traffic is encrypted in transit (HTTPS).
• Social Security numbers and bank account numbers are encrypted before they are stored, using a key held outside the database.
• Passwords are stored only as hashes and are never readable by us.
• Each business’s data is separated, and employees only see the areas their employer allows.
• Uploaded files are private: they are only served after we check who is asking.

No system is perfectly secure. If a breach affects your information, we will notify you as required by law.

How long it is kept

We keep your data while your account is active. After cancellation we keep it for [30] days so you can retrieve it, then delete or anonymize it, except where we must keep records longer for legal, tax or accounting reasons. Note that employment records such as I-9s and payroll records have their own legal retention periods that apply to you as the employer.

Your choices and rights

• You can view, correct and export your business data inside BluCollar at any time.
• You can ask us to delete your account and data at [SUPPORT EMAIL].
• Depending on where you live, you may have rights to access, correct, delete or port personal information, or to object to certain processing. To exercise them, contact us at [SUPPORT EMAIL].
• If you are an employee or customer of a business that uses BluCollar, contact that business first; we will refer your request to them and help them respond.

Cookies and similar technology

BluCollar stores your sign-in session in your browser so you stay signed in, and remembers a few preferences. We do not use advertising cookies or third-party tracking. [If you add analytics later, describe it here.]

Children

BluCollar is for businesses and is not directed to children under 13, and we do not knowingly collect their information. Employee records entered by a business may relate to workers under 18; those are handled like any other employee record.

Where data is stored

Data is stored in the United States. If you access BluCollar from elsewhere, you understand it is processed in the United States.

Changes

We will update this policy as BluCollar changes, and we will change the date at the top. If a change is significant, we will give notice by email or in the app.

Contact

[LEGAL ENTITY NAME], [MAILING ADDRESS], [SUPPORT EMAIL].