FIELDFOLIO1. Who this is for
This note is for businesses and people who put other people’s personal information into FIELDFOLIO, such as customer names, phones, addresses, photos, and worker details. It adds to the Privacy Policy and the Terms and Conditions. It is a plain summary and not a signed data processing agreement. If you need a signed one, email [email protected].
2. Who does what
For the personal data of your customers, workers, and others that you add to FIELDFOLIO, you decide why and how it is used. We process it on your behalf to run the service. For your own account, billing, and sign-in data, and for security and abuse prevention, we decide how it is used, as the Privacy Policy explains. Depending on the law that applies, this means you are the controller or business, and we are the processor or service provider for that customer content.
3. What we do with your customer data
- We store, sync, back up, display, and transmit it only to provide the service you asked for, to keep it secure, to follow the law, and as the Terms allow.
- We do not sell it, and we do not use it to market to your customers.
- We do not use your photos or data to train AI models.
- Only people with a need, such as support staff handling a request from you, can reach it, and they are bound to keep it confidential.
- We tell you if we get a legal demand for your data, unless the law stops us.
4. Your duties
You must have a legal basis and give any notices needed to collect and share customer and worker data with us, as the Terms (section 5) and the Acceptable Use Policy say. You are in charge of what you enter, who you share it with, access in crew and team accounts, and answering requests from your customers. We will help you reasonably if one of your customers asks to see or delete their data. Email [email protected].
5. Subprocessors
We use these companies to run FIELDFOLIO. They may handle customer content as part of that.
- Cloudflare (Cloudflare Pages, security, Turnstile if enabled): hosting, delivery, and network security for the site and web app. Data: request data such as IP address and browser details. No job content is stored by Pages.
- Supabase: authentication, database, file storage, server functions. Data: account data, job content, photos, crew data.
- Stripe: payments, subscriptions, customer portal. Data: billing details, email, plan and purchase data.
- Resend: sending transactional and support email. Data: email address, message content.
- Forward Email: forwarding mail sent to our support address. Data: email address, message content.
We choose providers with care and require protections suitable for the data. We will update this list if it changes. If you want to be told ahead of a change, email [email protected] and we will add you to the notice list. If you object to a new provider for a good reason, tell us and we will work with you, which may mean you stop using the affected feature or delete your account.
6. Where data is processed
Our providers process data in the United States and may do so in other countries where they operate. If you are in the EEA, the UK, or Switzerland, your data is transferred to the United States. Where the law requires, we rely on approved transfer tools such as standard contractual clauses or the EU-US Data Privacy Framework. Our Supabase project (database and file storage) is hosted in the US West (Oregon) region, us-west-2. Cloudflare delivers the site from its global network.
7. Security and breach notice
We use the measures described in the Privacy Policy and on the security page. If we learn of a breach that affects your customer data, we will tell you without undue delay, and give you what we know so you can meet your own duties.
8. Return and deletion
You can export what you need and delete your jobs or your account any time (see Manage your plan). When you delete your account, we delete cloud content as the Privacy Policy describes, other than limited backups, logs, and records the law requires us to keep, which age out. Content stored only on your device stays on your device until you clear it.
Updated Oct 1, 2026 (CT).