Privacy Policy

1. Who this policy is about

Stedley has two kinds of people in it, and they are treated differently.

• You, our customer. The contractor who signs up, and the crew members they invite. You have an account with us.
• Your customers. The homeowners and businesses whose names, addresses and jobs you record in Stedley. They do not have an account with us. That information is yours; we store and process it on your behalf and under your instructions. If one of your customers asks about their data, they should ask you, and we will help you answer.

2. What we collect

Beta access requests

If you request beta access through this website, Stedley collects your name, your email address, and your trade or type of work.

Contact and feedback forms on this website

If you use the contact form, Stedley collects your name, your email address, the reason you chose, and your message.

If you send beta feedback, Stedley collects what you were trying to do, the type of feedback, what happened or what would help, and the platform you were using. Your trade or type of work and your crew size are collected only if you fill them in. Your email address is collected only if you give it so that we can reply.

We use these messages to answer you and to improve Stedley. Please do not put private customer or job details, passwords, payment information or other sensitive information in them.

When you sign up

• your email address and password — the password is handled by our authentication provider and is never visible to us
• your name and phone number, if you enter them
• your company's name, and optionally its address, phone, email and logo

As you work

• clients: name, address, phone, email
• jobs, visits, schedules, notes and checklists
• estimates, proposals and invoices, including the client contact details printed on them
• expenses, receipts, materials, price book entries and subcontractor details
• time entries, hourly rates and time-off records for your crew
• photos and files you attach: job photos, receipts, estimate attachments

Proposal acceptance records

When one of your customers accepts a proposal, Stedley records what they agreed to and how: their typed name, the acceptance channel, a fingerprint of the document, the time, and — for an in-person signature — the drawn signature. If acceptance happened through a link, the browser's user-agent string is recorded too. Stedley deliberately does not record IP addresses for acceptance. Knowing where somebody was standing is not needed to establish that they accepted.

Payment information

If you subscribe, checkout happens on a page hosted by Stripe. Stedley never sees, receives or stores your card number. We keep an identifier for your subscription and customer record at Stripe, your plan, your billing interval and your renewal date.

Stedley does not process card payments from your own customers. Collecting what your customers owe you is between you and them, outside Stedley.

Technical information

• crash and error reports — see section 4
• your language and theme preference, stored on your device

What we do not collect

Location, contacts, calendars, microphone audio, advertising identifiers, or any behavioural or analytics profile. The app requests no Android permissions of its own beyond photo and camera access, and those are asked for only at the moment you attach a photo. There is no advertising SDK and no product analytics SDK in Stedley.

3. Why we use it

To run the service you asked for: to show your jobs and schedule, produce your estimates and invoices, record your crew's hours, keep your data separated from every other company's, take payment for your subscription, answer your support questions, and keep the app working.

We do not sell your information. We do not share it for advertising. We do not use it to train machine-learning models.

4. Crash and error reporting

We use Sentry to find out when the app breaks. It is deliberately stripped down:

• your identity is not attached — the user, request and server fields are removed before an event is sent
• error text is scrubbed for email addresses, authentication tokens and record identifiers before it leaves your device
• record identifiers are removed from screen names, and query strings are dropped
• the device model is kept; the device name and its unique identifier are removed
• only navigation and interface breadcrumbs are kept — network, console and system breadcrumbs are discarded
• performance tracing, profiling and session replay are switched off

5. Who we share it with

We use a small number of service providers to run Stedley. They process data on our instructions only.

• Supabase — database, login, file storage and server functions. Sees your account and the business data you enter.
• Stripe — Stedley subscription payments only. Sees your billing email, and your card details directly rather than through us.
• Sentry — crash and error reporting. Sees scrubbed technical error data, as described above.
• Resend — sending service email. Sees the address a message goes to, and the message.
• Vercel — hosting this website and the web app. Sees standard web request data.
• Formspree — receiving the forms on this website: beta access requests, contact messages and beta feedback. Sees what you enter in those forms, and the standard technical information any web request carries.
• Google Play — when the Android app is published, distributing it under Google's own policy.

Our databases are in the United States.

6. How long we keep it, and how to delete it

While your account is open, we keep your data so the service works.

When you close your company account, we delete everything — jobs, clients, estimates, invoices, expenses, photos, time records. There is no archive and no hidden retained copy.

• Closure is a request, not an instant destruction. You have 30 days to change your mind and cancel it. Access stops immediately when you request it, and so does billing.
• Because your export becomes your only copy, we prompt you to take your accountant export before you confirm.
• After a completed deletion we keep one record: the company's internal identifier and the timestamps of each deletion stage. It contains no name, no email and no business content, and exists only so we can show that a deletion happened and finished.

If you are a crew member deleting your own account, your name, phone number and avatar are removed and you appear to your employer as "Former team member". Your recorded hours and pay rates stay, because deleting them would silently rewrite your employer's hours and job-cost history. Your login is then deleted.

If your employer closes the company, you lose access to that company's data but your login is not deleted — one person does not get to delete another person's identity, and you may join a different company later. You can delete your own account yourself at any time.

You can request deletion in the app, or at app.getstedley.com/delete-account.

7. Keeping it safe

• every company's data is isolated at the database level, enforced by the database itself rather than by application code
• file storage is private by default; the only public files are company logos, which are meant to appear on your estimates and invoices
• data on your device is excluded from Android cloud backup and device-to-device transfer, so a restored phone cannot carry your session or a copy of your client list onto another device
• payment card details never touch our systems
• proposal acceptance records are immutable — once recorded they cannot be edited by anyone, including us, and are removed only when the whole company is deleted

8. Children and age

Stedley is not directed to children. We do not market it to children and we do not knowingly collect information from a child in order to provide it.

Stedley has two kinds of account, and they are not the same question.

• The person who creates and owns a company enters a paid agreement with us. They must be at least 18 and legally able to enter that agreement.
• Crew members are invited by an owner and do not enter a payment agreement with us. Some trades legitimately employ workers under 18, and Stedley does not impose a blanket age rule on them. An owner is responsible for the people they invite and for meeting their own employment-law obligations.

We do not collect dates of birth and we do not run age verification.

9. Your rights

You can see your data inside Stedley, correct it, export your accounting records, and delete your account and your company's data. Section 6 explains how deletion works.

10. Changes

If we change this policy we will update the date at the top, and for significant changes we will tell you in the app.

11. Contact

support@getstedley.com

Stedley LLC