Legal

Privacy Policy

Last updated: October 2026

1. Who We Are

WorkTime CRM ("we", "our", or "us") provides a customer relationship management platform for home service contractors, available at app.worktimealliance.com. We are committed to protecting your personal information and your right to privacy.

WorkTime CRM serves two groups of people: (a) account holders — contractors and their team members who sign up for the platform, and (b) the customers, leads, subcontractors, and suppliers whose information an account holder enters into the platform. For account holders, we act as the data controller. For information a contractor enters about their own customers and contacts, the contractor is the data controller and WorkTime CRM acts as a data processor — we store and process that information only to provide the service and under the contractor's instructions. If you are a customer of a contractor and want your information accessed, corrected, or deleted, please contact that contractor directly; we will assist them as needed.

2. Information We Collect

We collect information you provide directly to us when you:

  • Create an account (name, email address, phone number, company name, password)
  • Add clients, leads, subcontractors, suppliers, or projects to the platform (which may include their names, phone numbers, email addresses, and job-site addresses)
  • Upload photos, documents, or files (for example, project photos used for AI estimates)
  • Use voice input, which we send for speech-to-text transcription
  • Connect third-party services such as Gmail, Microsoft, Facebook, QuickBooks, or Telegram
  • Fill out estimates, invoices, or submit forms
  • Contact us for support
  • Leave a job application on our public hiring board (name, phone number, email, city and state, trade or role, experience, pay expectations, languages, availability, and anything you write about yourself) — no account is needed

We also collect usage data automatically, including IP address, browser type, pages visited, and actions taken within the app. Payment card details are entered directly into Stripe and are never stored on our servers.

3. Google Integrations (Gmail, Google Ads, Google Business Profile)

Each Google integration is optional. It is turned on only when you click its "Connect" button and approve access on Google's own screen, and it can be turned off at any time in Settings or in your Google Account (myaccount.google.com/permissions). We use Google user data only to provide the features described here, inside your own WorkTime CRM account.

Gmail

  • Read (gmail.readonly) — only if you separately turn on "Email history": we show the email conversation with each of your clients on that client's card; we note when a client has written to you so the client rises in your Inbox; and, if you turn on lead email scanning, we read lead notification emails from lead platforms (e.g. Thumbtack, Angi, Google) to create the lead in your CRM.
  • Send (gmail.send) — the standard Gmail connection: when you press Send on an email you wrote (or approved) in the CRM — an estimate, an invoice, a reply — it goes out from your own Gmail address, so the client sees it from you and replies land in your inbox. We never send email you did not ask to send.
  • We do not delete, label or otherwise modify messages in your mailbox.

Google Ads — Local Services Ads

  • (adwords) We read the Local Services Ads leads of the ad accounts you connect (customer name, phone, email, job type) and the messages in those leads, and create each lead as a client in your CRM.
  • When you write a reply to a lead in the CRM, we post it to that lead's conversation in Google.
  • We do not create, change or pause campaigns, budgets or ads.

Google Business Profile

  • (business.manage) We read the reviews of the Business Profiles you manage and show them in your CRM, and notify you about new ones.
  • When you write a reply to a review in the CRM and press Publish, we post it on Google as your business's owner reply; you can edit or delete it the same way.
  • We do not change any other information in your Business Profile.

How Google user data is handled

  • It is stored in our database (Supabase, encrypted at rest) only as far as the features above need it; access tokens are kept server-side and never shown in the app.
  • We do not sell it, use it for advertising, or share it with third parties, except the service providers that run these features for you (hosting, database, and Anthropic when you use an AI feature such as an AI summary or draft — Anthropic processes the text only to return the result and does not use it to train models).
  • It is not used to develop, improve or train generalized AI or machine-learning models.
  • Humans at WorkTime do not read it, unless you ask us to for support, it is needed for security or to comply with the law, or it has been aggregated and anonymized for internal operations.
  • When you disconnect an integration we stop accessing Google and delete the tokens; disconnecting Google reviews also deletes the copied reviews. You can ask us to delete all data received from Google at support@worktimealliance.com.

WorkTime CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

  • To provide, maintain, and improve our services
  • To send transactional emails and SMS messages (estimates, appointment confirmations, reminders, project updates)
  • To authenticate your identity and protect your account
  • To respond to your support requests
  • To analyze usage patterns and improve the platform

5. SMS/Text Messaging

WorkTime CRM enables contractors to send SMS (text) messages to their customers for transactional purposes. By submitting your phone number through a contractor's website form, you consent to receive SMS messages related to your project, including:

  • Appointment confirmations and reminders
  • Project updates and scheduling changes
  • Estimate and invoice notifications
  • Follow-up messages about requested services

Opt-out: You can opt out of SMS messages at any time by replying STOP to any message. After opting out, you will receive one final confirmation message and no further texts will be sent.

Message frequency: Message frequency varies based on project activity. Typically 1-5 messages per month per project.

Message and data rates may apply. Contact your carrier for details about your text messaging plan.

We do not send unsolicited marketing messages. SMS messages are only sent to customers who have actively requested services from a contractor on our platform.

No sharing of mobile data: Mobile phone numbers and SMS opt-in information are used solely to deliver the transactional messages described above. We do not share mobile phone numbers or SMS consent data with third parties or affiliates for their own marketing purposes. SMS messages are delivered through our messaging provider, Twilio.

6. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with encrypted connections. We implement industry-standard security measures including HTTPS, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, but we strive to protect your personal information to the best of our ability.

Retention: We keep your data for as long as your account is active. When you cancel or delete your account, we permanently delete your data within 30 days, except for limited records we are required to keep for legal, tax, or accounting purposes. You may request an export of your data before deletion.

International transfers: WorkTime CRM is operated from the United States and your data is stored and processed on servers located in the United States. If you access the service from outside the U.S., you consent to the transfer and processing of your information in the U.S.

7. Data Sharing

We do not sell your personal data. We share data with the following service providers, only as needed to run the platform:

  • Supabase — database and authentication
  • Vercel — application hosting
  • Stripe — payment processing (we never store card numbers)
  • Resend — transactional email delivery
  • Twilio — SMS/text message delivery
  • Anthropic (Claude) — AI features such as estimate generation, photo analysis, and the in-app assistant. Only the specific text or image you submit is processed; it is not used to train AI models.
  • Groq — speech-to-text transcription when you use voice input; audio is processed to return a transcript and is not used for training.
  • Google — optional Gmail, Google Ads (Local Services Ads) and Google Business Profile integrations (see Section 3)
  • Microsoft — optional email integration, if you connect a Microsoft account
  • Meta (Facebook) — optional lead import, if you connect a Facebook Lead Ads account so new leads flow into your CRM
  • Intuit (QuickBooks) — optional accounting sync for invoices, if you connect QuickBooks
  • Telegram — optional notifications and reminders, if you connect Telegram

Integrations marked "optional" receive data only if you choose to connect them, and you can disconnect them at any time. All third-party providers are bound by their own privacy policies and data processing agreements.

Hiring board. If you submit a job application at /hiring, your application — including your name, phone number and email — is shown to contractor companies that use WorkTime CRM so they can contact you about work. It is not published on the open web. The private link you receive after submitting lets you hide the application or delete it, together with your contact details, at any time; companies you applied to keep a record only until you delete it.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your account and all associated data
  • Revoke third-party integrations (e.g., Gmail, Google Ads, Google Business Profile) at any time
  • Export your data in a portable format

To exercise any of these rights, contact us at support@worktimealliance.com.

9. Cookies

We use essential cookies to keep you logged in and remember your preferences (such as language). We do not use advertising or tracking cookies.

10. Children's Privacy

WorkTime CRM is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the app. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: