Privacy Policy

Account information. When you sign up, we collect your name and email address. During onboarding you provide your business name, address, phone number, and email.

Business data. We store the data you create in Roughwork: customers, jobs, estimates, invoices, line items, job notes, and photos you upload.

Payment information. Subscription payments are processed by Stripe. We do not store your card number or bank details — only a Stripe customer ID and your current subscription status.

Usage data. We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the service.

We use the information we collect to:

• Provide and operate the Roughwork service
• Send estimates and invoices to your customers on your behalf
• Process subscription payments via Stripe
• Send transactional emails (account confirmation, password reset)
• Respond to support requests
• Detect and prevent fraud or abuse
• Improve and develop new features

We do not sell your data. We do not use your business data for advertising.

We share data only with the services required to operate Roughwork:

• Supabase — database and authentication infrastructure. Your data is stored on Supabase-managed PostgreSQL servers.
• Stripe — subscription billing. Stripe processes payments and is subject to its own privacy policy.
• Resend — transactional email delivery (estimates, invoices, account emails).
• Vercel — hosting and edge infrastructure.

We may disclose information if required by law or to protect the rights, property, or safety of Roughwork, our users, or the public.

When you add customers to Roughwork, you are responsible for having the right to store and process their information. We act as a data processor on your behalf. We do not contact your customers for marketing purposes and only use their data to deliver the service you request (e.g. sending an estimate email).

We retain your account data for as long as your account is active. If you cancel your subscription, we keep your data in inactive storage for 90 days, after which it is permanently deleted. You can request immediate deletion at any time by emailing us.

You can request a full copy of your data (customers, jobs, estimates, invoices) at any time by emailing us, and we will send it to you.

We use industry-standard measures to protect your data: encrypted connections (TLS), row-level security in our database (each business can only access its own data), and hashed passwords. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security, but we take it seriously.

Roughwork uses cookies and similar technologies to maintain your session after login. We do not use advertising or tracking cookies. We do not use third-party analytics cookies.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format

To exercise any of these rights, email us at support@getroughwork.com. We will respond within 30 days.

Roughwork is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this policy from time to time. We will notify you by email or in-app notice before material changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Questions about this policy or your data? Email us at support@getroughwork.com.