This Privacy Policy explains how Fieldbase (“we,” “us,” or “our”), operated as a sole proprietorship by Jacob Benaim, collects, uses, and shares information when you use our field service management platform and related services (collectively, “the Service”). By using the Service you agree to the practices described in this Policy.

1. Information We Collect

Information You Provide

Account information: name, email address, business name, phone number, and password when you register.
Business data: customer records, job details, invoices, estimates, scheduling data, notes, and other content you create in the Service.
Payment information: billing address and payment method details. Payment card data is processed directly by our third-party payment processor and is not stored on our servers.
Communications: messages you send to us via email or support channels.
Waitlist / marketing sign-ups: email address and any information you voluntarily submit.

Information Collected Automatically

Log data: IP address, browser type and version, operating system, pages viewed, referring URLs, and timestamps.
Device information: device identifiers, screen resolution, and hardware model.
Usage data: features accessed, actions taken, and session duration, used to improve the Service.
Cookies and similar technologies: see Section 6 below.

Information from Third Parties

We may receive information from third-party integrations you authorise (e.g., payment processors, mapping or address-lookup services). We only receive the data necessary to provide the integration.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service;
Create and manage your account;
Process transactions and send related notices;
Send administrative communications (e.g., service updates, security alerts);
Respond to your inquiries and provide customer support;
Send marketing communications where you have consented or where permitted by law (you may opt out at any time). For recipients in Canada, we will only send commercial electronic messages (“CEMs”) with your express or implied consent as required by Canada’s Anti-Spam Legislation (“CASL”). Every CEM we send will include a working unsubscribe mechanism;
Analyse usage patterns to improve feature development;
Detect, investigate, and prevent fraud, abuse, and security incidents; and
Comply with legal obligations.

We do not sell your personal information to third parties.

3. Legal Bases for Processing (where applicable)

Canada (PIPEDA): We process your personal information in accordance with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial privacy laws. We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and only with your knowledge and consent except where the law permits otherwise (e.g., legal obligation, investigation of a breach of agreement).

European Union / UK (GDPR): Where required by law, we process your data on the basis of: (a) contractual necessity — to perform the agreement with you; (b) legitimate interests — to improve and secure the Service; (c) legal obligation — to comply with applicable laws; or (d) consent — where you have explicitly consented.

United States: We process personal information in accordance with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (see Section 12 below).

4. Sharing and Disclosure of Information

We do not share your personal information except in the following circumstances:

Service providers: we engage trusted third-party vendors who process data on our behalf under confidentiality obligations (e.g., hosting, analytics, email delivery, payment processing).
Legal requirements: we may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Fieldbase, our users, or the public.
Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
With your consent: we may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see Section 9). We may retain certain information for longer periods where required by law or for legitimate business purposes (e.g., resolving disputes, preventing fraud). Anonymised or aggregated data may be retained indefinitely.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Keep you logged in to the Service (strictly necessary cookies);
Remember your preferences;
Understand how users navigate the Service (analytics); and
Measure the effectiveness of marketing campaigns.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. We use third-party analytics (e.g., Vercel Analytics) that collect anonymised usage data.

7. Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

8. Third-Party Links and Integrations

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party service you access through the Service.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access: request a copy of the personal data we hold about you.
Correction: request that we correct inaccurate or incomplete data.
Deletion: request that we delete your personal data (subject to certain legal exceptions).
Portability: request a machine-readable copy of your data.
Opt-out of marketing: unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or emailing us.
Do Not Sell: we do not sell personal information. If this changes, we will provide an opt-out mechanism.

To exercise any of these rights, please contact us at support@fieldbase.app. We will respond within a reasonable time and in accordance with applicable law.

10. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

11. Canadian Residents (PIPEDA)

If you are a resident of Canada, your personal information is governed by PIPEDA and, where applicable, provincial private-sector privacy laws. You have the right to:

Access: request access to the personal information we hold about you and information about how it has been used or disclosed;
Correction: request that we correct inaccurate or incomplete personal information;
Withdraw consent: withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services;
File a complaint: if you believe we have not handled your personal information in compliance with PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise your rights or ask questions about our privacy practices, contact us at support@fieldbase.app. We will respond within 30 days as required by PIPEDA.

12. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; the right to request deletion; and the right not to be discriminated against for exercising your rights. To exercise these rights, contact us at support@fieldbase.app. We do not sell personal information as defined under the CCPA.

13. International Data Transfers

The Service is operated from Canada. Some of our service providers (e.g., cloud hosting, analytics, payment processors) may process your information in the United States or other countries. When personal information is transferred outside Canada, we take steps to ensure it receives a comparable level of protection, including through contractual safeguards. By using the Service you acknowledge that your information may be processed in jurisdictions outside your home country, including the United States, which may have different data protection laws.

14. Limitation of Liability for Privacy Incidents

Without limiting the Terms of Service, Fieldbase’s liability for any privacy incident, data breach, or failure to comply with this Privacy Policy is limited to the extent set out in our Terms of Service, including the cap on aggregate liability described therein. We are not liable for indirect, consequential, or punitive damages arising from any privacy incident.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised Policy with an updated “Last Updated” date. Your continued use of the Service after any change constitutes your acceptance of the updated Policy. For material changes, we will make reasonable efforts to provide notice (e.g., via email or in-app notification).

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: support@fieldbase.app