Privacy Notice

This Privacy Notice explains what personal information Job Site Canvas, LLC ("Job Site Canvas," "we," "us," or "our") collects when you visit jobsitecanvas.com or use the Job Site Canvas web application (together, the "Services"), how we use it, who we share it with, and the choices you have. It applies to our website and to the app, which may still appear as "Structure Sketch" in places. Our Terms of Service cover the rest of our relationship with you.

Key points

We are a business tool. Job Site Canvas is for businesses and their staff. We collect what we need to run accounts, take payment, keep the Services secure, and answer your questions.
Your customers' information is yours. Sketches, photos, and job records belong to the business that creates them. For that information we act as your service provider (Section 4).
We do not sell or share personal information for advertising, and we do not use it for targeted ads.
We do not knowingly collect sensitive personal information and the Services are not intended for people under 18.
You can ask us about your information at support@jobsitecanvas.com (Section 9).

1. Information We Collect

Information you give us

Account information: your name, username, email address, role, password (we store only a salted, hashed form), and certification or license number if you enter one.
Company information: company name, business address, phone number, license number, logo and branding, and the number of seats on your plan.
Billing information: payment is handled by Stripe. We do not receive or store your full card number. We keep your plan, billing period, payment status, and Stripe customer and subscription identifiers.
Messages to us: when you use our contact form or email us, we receive your name, email address, company, phone number, and message.
Problem reports: if you choose to send a problem report from the app, it can include recent technical error details. You see them before you send.
Invitations: if a Company Administrator invites you, we receive your email address and the role and access they set for you.

Customer Data

Businesses put sketches, inspection and job records, photos, and customer and property information into the app. That content may include names, addresses, and other details about the business's own clients and the properties it services. See Section 4 for how we handle it.

Information collected automatically

Technical data: IP address, browser and device type, operating system, pages and features used, dates and times, and error information.
Security records: sign-in attempts and rate-limit counters, and, when automated scanners probe our systems, the IP address, the page requested, and how many times.
Acceptance records: when you accept our Terms, we record who accepted, when, and which version.
Analytics: we use Cloudflare Web Analytics on our website and app to understand traffic and performance. See Section 5.

We do not collect your precise location, and we do not collect information about you from other sources, except where a sign-in provider you choose (such as Google or Microsoft, where offered) gives us your name and email address.

2. How We Use Information

To create and manage accounts, authenticate you, and provide the Services you ask for.
To process payments, send invoices, and handle billing problems.
To verify new business sign-ups, including checking the business address you enter at registration, and to prevent duplicate, fraudulent, or abusive accounts.
To send service messages, such as invitations, password resets, billing notices, and security alerts.
To respond to questions and provide support.
To keep the Services secure, find and fix problems, and enforce our Terms.
To understand how the Services are used and improve them, using analytics that do not identify you or your clients.
To meet legal obligations and protect our rights.

We do not use personal information for targeted advertising or to build profiles about you.

If we ever need your consent to use information in a way not described here, we will ask for it, and you can withdraw it at any time by contacting us. Withdrawing consent does not affect use that happened before.

4. Our Role with Customer Data

The business that creates a Company Account decides what Customer Data goes into the app and why. For personal information in Customer Data, we act as that business's service provider (sometimes called a processor): we store and process it to run the Services, on the business's instructions and under our Terms.

If you are a homeowner or other client of a business that uses Job Site Canvas, that business is responsible for your information. Please contact it first about access or correction requests. If you contact us instead, we will point you to the business and help it respond.
Who can see Customer Data: the business's Company Administrators and the users they authorize. A limited number of our personnel with a platform administrator role can access any Company Account, and only for support, security, maintenance, or legal reasons.
Each business's data is kept separate from every other business's data.

5. Cookies and Similar Technologies

Session cookie. When you sign in to the app, we set one first-party cookie (ss_session) that keeps you signed in. It is marked HttpOnly and Secure, and expires after at most 8 hours. On a device your company treats as shared, it may last only until you close the browser. We use it for sign-in, not tracking.
Stored on your device. The app uses your browser's local storage and a service worker to remember preferences and to let you work offline. Sketches you create offline are kept on your device until they sync.
Analytics. We use Cloudflare Web Analytics, which is on for our website and app. According to Cloudflare, it measures page views and performance without cookies or local storage and without tracking you across other websites. It processes details such as the page visited, referring page, browser and device type, and approximate location derived from your IP address. See Cloudflare's privacy policy.
Fonts. Our website loads its typeface from Google Fonts, so Google receives your IP address and browser details when a page loads.
No advertising cookies. We do not use advertising or cross-site tracking cookies.

Most browsers let you block or delete cookies, but the app needs its session cookie to keep you signed in. Because we do not sell or share personal information, there is nothing for a "Do Not Track" or opt-out preference signal to change, and our practices are the same whether or not your browser sends one.

We do not sell personal information, and we do not share it for advertising. We share it with the service providers below to run the Services, and in the situations that follow the table.

Provider	What it does for us	Information involved
Cloudflare	Hosting, database, file and photo storage, security, and website analytics	Account, company, and Customer Data; technical data
Stripe	Payment processing and subscription billing	Billing contact, payment details, plan and seat information
Resend	Sending email (invitations, password resets, billing and security notices, contact-form messages)	Name, email address, message content
Google (Address Validation)	Checks the business address entered when a company registers	Company address, city, state, and ZIP
Google (Fonts)	Delivers the website's typeface	IP address and browser details
Have I Been Pwned	Checks whether a password has appeared in a known breach	Only the first five characters of a one-way password hash; your password is never sent
Google or Microsoft (sign-in)	Optional sign-in, where a company enables it	Name and email address

We may also share information:

With your company: your Company Administrators can see your account details and the Customer Data you create.
For legal reasons: to comply with law, legal process, or a government request, or to protect people's safety, our rights, or the security of the Services.
In a business change: if we merge, are acquired, or sell assets, information may transfer to the new owner, who must honor this Notice or give you notice of changes.
With your direction: when you ask us to.

7. How Long We Keep Information

Active accounts: we keep account and company information, and Customer Data, while the account is active.
Cancelled companies: when a Company Account is cancelled, sign-in is turned off and we keep the data for about 90 days so it can be reinstated. After that we permanently delete the company's sketches, photos, and user records. This follows Section 11 of our Terms.
Removed users: if an administrator removes a user from an active account, that user's sketches and photos stay available to the company's administrators for about 1 year, then are deleted, unless the company is cancelled first.
Messages and support: we keep contact-form messages and support emails as long as needed to respond and keep reasonable business records.
Security and records: we keep security logs, blocked-address records, billing records, and records of Terms acceptance as long as needed for security, accounting, tax, and legal reasons.

Copies in backups or logs may persist for a limited time before they are overwritten. Where the law requires a business to keep inspection or treatment records for a set period, that duty belongs to the business, not to us.

8. How We Protect Information

We use reasonable administrative, technical, and physical safeguards. Examples include encrypting data in transit, storing passwords only in hashed form, checking new passwords against known breaches, limiting repeated sign-in attempts, and keeping each company's data separate. No system is perfectly secure, so we cannot guarantee that unauthorized access will never occur. If we confirm that your personal information was accessed without authorization, we will notify you or your company as the law requires.

9. Your Choices and Rights

Account choices

You can review and update account details in the app, or ask your Company Administrator or us to do it. A Company Administrator can cancel the account or remove users. If we send you any optional email, you can opt out at any time, though we will still send required service messages.

US state privacy rights

Depending on where you live, you may have the right to know whether we process your personal information and to access it, correct it, delete it, or obtain a copy. You can also ask about the categories of information we collect and disclose. You will not be treated unfairly for using these rights. We do not sell personal information, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects, so there is nothing to opt out of.

How to make a request

Email support@jobsitecanvas.com with your name, the email address on your account, and what you are asking for. We will confirm your identity using information we already hold, which may include asking you to sign in or confirm details. You may use an authorized agent, who must show written permission. We will respond within the time the law requires, generally 45 days, and will tell you if we need more time.

If you are a client of a business that uses Job Site Canvas, see Section 4.

Appeals

If we decline your request, you can appeal by replying to our response or emailing the same address with "Appeal" in the subject. We will answer in writing and explain our reasons. If your appeal is denied, you may contact your state attorney general.

California "Shine the Light"

We do not disclose personal information to third parties for their own direct marketing purposes.

10. Children

The Services are for businesses and for people who are at least 18. We do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, email us and we will delete it.

11. Where Information Is Processed

The Services are operated from the United States for US businesses. Our providers may process information in the United States and in other countries where they operate.

12. Changes to This Notice

We may update this Notice. The "Last updated" date above shows the latest version. If we make material changes, we will post the new version here and, where appropriate, notify you in the Services or by email.

13. Contact Us

Questions or requests about this Notice:

Job Site Canvas, LLC
7330 S. Trenton Ave
Tulsa, OK 74136
United States
Email: support@jobsitecanvas.com