Privacy Notice

1. Who we are

JobProfit ("we", "us", or "our") is a software service operated by John Redding. For the purposes of data-protection law, John Redding is the data controller for personal information collected through the Service.

2. What we collect

• Account data: name, business name, email address, password (stored hashed).
• Customer and job data you enter: jobs, quotes, invoices, customer contacts, materials, and labor hours.
• Crew data: names, emails, and roles of crew members you invite.
• Usage and device data: log data, IP address, browser, device, and product telemetry needed to operate the Service.
• Support communications: the contents of messages you send us.

Payment card details are collected and processed by our Merchant of Record, Paddle.com, and are not stored by JobProfit.

3. How we use your data

• Create and manage your account and authenticate sign-ins;
• Provide and operate the Service (store and display jobs, quotes, invoices, etc.);
• Prevent fraud, abuse, and security threats;
• Provide customer support;
• Improve the product and develop new features;
• Send service-related communications and, if you opt in, occasional product updates;
• Comply with legal obligations.

4. Legal basis

Where applicable, we rely on the following legal bases: performance of our contract with you (providing the Service), our legitimate interests (operating, securing and improving the Service), your consent (where required, e.g. marketing emails or non-essential cookies), and compliance with legal obligations.

5. Who we share data with

• Paddle.com — our Merchant of Record for the sale of the Service. Paddle handles checkout, subscription management, payments, tax compliance, refunds, and invoicing. See Paddle's Privacy Notice.
• Infrastructure and subprocessors — hosting, database, email delivery, analytics and error monitoring providers acting on our instructions.
• Professional advisers — accountants and legal advisers, where reasonably necessary.
• Authorities — where we are required to disclose data to comply with applicable law.

We do not sell your personal information.

6. International transfers

Your data may be processed in countries outside your own. Where required, we put appropriate safeguards in place (such as standard contractual clauses) for international transfers.

7. Retention

We retain your account and customer data for as long as your account is active, plus a reasonable period afterward for backups, dispute resolution, and legal compliance. When data is no longer needed, we delete or anonymise it.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, to withdraw consent at any time, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us through the in-app support channel.

9. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect your data. No system is completely secure, but we work hard to keep yours safe.

10. Cookies

We use cookies and similar technologies that are strictly necessary to operate the Service (for example, to keep you signed in). We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

11. Children

The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

13. Contact

Questions about this notice or how we handle your data can be sent through the in-app support channel. The data controller is John Redding.