Who handles your information
CrafterOps provides tools for contractors to manage customers, estimates, proposals and jobs. We handle account, website, service-operation and support information to provide and protect those tools.
This policy covers visitors, account holders, authorized staff, prospective customers and people whose information a contractor manages through CrafterOps. References to “we”, “us” and “our” mean CrafterOps. It does not replace the separate privacy notices of a contractor or an independent third-party service.
When a contractor adds your information to its workspace, that business determines how it uses your project and customer records. Contact the contractor about its decisions, messages and records. You may also contact CrafterOps for help identifying the responsible account or exercising a privacy right.
Information we collect
Account and business information: names, email addresses, phone numbers, company details, account roles, authentication records, preferences and integration settings supplied by you or your organization.
Customer and project information: contact details, service addresses, inquiries, notes, dimensions, photos or other files you upload, estimates, prices, proposals, approvals, job dates and related business records. Please provide only information you are authorized to share.
Communications and optional features: support requests, messages sent through an enabled connection, delivery information, audio submitted for transcription, confirmed transcripts, assistant source messages and generated drafts or advisory results.
Technical and transaction information: IP addresses, browser/device information, service events, security logs, payment or subscription references and billing details where paid features are available. Payment providers handle payment information under their own terms.
Where information comes from
Directly from you: when you register, complete a form, contact support, enter project details, upload content or use an optional feature. Some information is required to provide the requested service; choosing not to provide it may limit that feature.
From the business you work with: contractors, workspace administrators and authorized staff may add customer or team information, invite users and manage access. Customers may provide information through inquiries, proposal responses and other customer-facing workflows.
From your use of the service and connected providers: browsers and devices provide technical information, while integrations may provide information you or the business authorize, such as messaging identifiers, delivery statuses and payment confirmations. We use connected-service information for the relevant integration, not to obtain unrelated account content.
How we use information
We use information to provide accounts and workspaces; prepare and manage estimates, proposals and jobs; deliver requested communications; operate integrations; process subscriptions where available; provide support; maintain records; and investigate errors, abuse or security incidents.
We may use service activity and feedback to understand errors, improve usability and maintain service reliability. This does not give us permission to sell customer records or use private project content for unrelated advertising.
Where applicable law requires a legal basis, processing may be necessary to provide the requested service, meet legal obligations, pursue legitimate service and security interests, or act on consent. Where processing depends on consent, you may withdraw it, subject to processing already carried out and other lawful retention requirements.
WhatsApp and Meta integrations
When a WhatsApp integration is enabled, CrafterOps may process messages sent to a connected business number, sender/recipient phone numbers or platform identifiers, message and business-account identifiers, timestamps, delivery statuses and supported attachment information. Phone numbers are stored in international E.164 format. Linking a number does not itself give CrafterOps access to all of your WhatsApp chat history.
We use this information to route messages to the appropriate business, show conversations, verify an authorized staff connection and provide the tools enabled for that account. A message does not by itself authorize changes to an estimate or access to another business's records.
Meta and WhatsApp process information under their own terms and privacy policies. You can stop using a connection or ask for it to be disconnected. To request deletion of information already held by CrafterOps, use the deletion instructions in this policy. Deleting CrafterOps data does not automatically remove independent copies held by Meta, a contractor, a recipient or another service.
AI assistance and transcription
When you use an enabled AI feature, relevant text, confirmed transcripts, selected project details or audio may be sent to service providers to perform the requested task. Current integrations can include OpenRouter and its selected model or speech providers, and optional Jev advisory review from Typesafe. The providers used depend on the feature and configuration.
In the current browser estimate-transcription flow, CrafterOps sends audio for transcription without saving it as a recording in that flow. Text you confirm and save becomes an assistant source message. Other uploaded files or recordings, if a feature supports saving them, are separate records and are not covered by that statement.
AI services have their own processing terms. We do not use your project content to train a CrafterOps foundation model. This does not mean every third-party service has identical retention practices. Avoid including unnecessary sensitive information in messages or recordings. AI output can be inaccurate; review drafts, quantities, prices and client details before using or sending them.
We do not sell your personal information
CrafterOps does not sell or rent your personal information, customer lists, contact details, messages, photos or project records to third parties. We do not disclose personal information to data brokers or share it for cross-context behavioral advertising. You do not need to pay or submit an opt-out request for this commitment to apply.
Providing information to a hosting company, communications provider, payment processor or AI provider to carry out the service you request is different from selling it. Those disclosures are described in this policy; a no-sale commitment does not mean that no service provider ever processes information.
We do not authorize service providers to use the information we disclose to them for their own unrelated advertising or data-broker activities. Independent platforms, contractors and recipients may have their own responsibilities and privacy practices; please review their notices as well.
International processing
CrafterOps and the service providers used for a feature may store or process information in the United States and other countries. Privacy laws and government-access rules may differ from those where you live. We do not promise that all information stays in your country or in a single region.
Where applicable law requires safeguards for an international transfer, the transfer must use an applicable lawful mechanism and required protections. Contact us about the processing locations or safeguards relevant to your use of the service.
How long information is kept
We keep personal information for the purposes described in this policy, taking account of the account or project relationship, configured retention settings, legal obligations, disputes, security and recovery needs. Different record types have different retention requirements.
When WhatsApp receiving is enabled, original message content and attachment references expire 60 days after first receipt. Expired content is unavailable to the inbox and assistant; scheduled cleanup removes that content and its message-associated contact identifiers. Limited delivery, deduplication and security records may remain to prevent retries from restoring deleted content. This does not delete saved estimates, unlink a registered staff number or remove copies held independently by WhatsApp or recipients. Separately saved media follows the retention rules for that feature.
Saved assistant source text has a default retention period of 60 days. The period shown in the service or configured for that feature may differ. This source-text period does not automatically delete estimates, proposals, customer records, uploaded media, audit records, billing records or independent copies held by other services. Where available, the assistant lets the source author export or delete saved source content before it expires.
Deleting content may leave limited records needed for legal, security, transaction or recovery purposes. Backup and third-party copies may follow separate retention processes. We explain relevant limitations when responding to a deletion request rather than promising that every copy disappears immediately.
Access, correction and data deletion
Email info@crafterops.com with the subject “CrafterOps privacy request” or “CrafterOps data deletion”. Include the email associated with your account, the business/workspace involved and what you want to access, correct, export or delete. For a WhatsApp-related request, include the relevant phone number with country code and identify the connected business. Do not send passwords, verification codes, access tokens or full payment details.
We may ask for information needed to verify your identity or your authority to act for the business before disclosing or deleting records. If a contractor controls the requested customer/project records, we may direct or coordinate the request with that contractor.
Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to certain processing, withdraw consent, or complain to a relevant authority. We handle requests under applicable requirements. Some records may need to remain for legal obligations, fraud prevention, disputes or other permitted purposes; we explain applicable limits in our response.
An authorized agent may contact us on your behalf where permitted by law. We may require evidence of authorization and, when appropriate, direct identity verification. We respond within the period required by applicable law and explain an applicable denial or extension. If your law provides an appeal right, reply to our response with “Privacy appeal” so we can review the decision. We do not discriminate against you for exercising a privacy right; deleting information needed for a feature may make that feature unavailable.
You may disconnect an integration or revoke its access where the relevant controls are available. Disconnection stops that connection's future use; it is separate from deleting previously stored records. Stopping WhatsApp messages or deleting your WhatsApp account does not automatically submit a CrafterOps deletion request.
Your account and communication choices
You can use available account controls to update details, manage access and preferences, and disconnect optional integrations. Workspace administrators control membership and permissions for their business. Contact the relevant business if a change requires its authorization.
If you receive an optional promotional email from CrafterOps, use its unsubscribe instructions or contact us. Essential account, security, billing and requested project communications may still be needed to operate the service. For messages sent by a contractor, contact that business about its communication preferences.
Use your device or browser controls to manage microphone, camera and file access. Declining access may prevent the related optional feature. Before sharing photos or recordings, obtain any permission needed from the people involved and avoid including passwords, government identifiers, payment-card details, health information or unrelated private conversations.
Additional regional privacy rights
United States: depending on your state and whether its law applies, rights may include access to the categories or specific information held about you, correction, deletion, a portable copy, appeal of a denied request, and opting out of sale, targeted advertising or certain profiling. Our no-sale and no-cross-context-advertising commitments apply to all users. We do not claim that every state law applies to CrafterOps or every type of business record.
California: where the CCPA applies, the information, sources, purposes and recipient categories described in this policy explain our practices. Relevant categories may include identifiers, customer and commercial records, internet or service activity, professional information, audio/visual content and information derived for requested estimates or drafts. Account credentials, message contents or other material you provide may receive additional protection as sensitive personal information. We use that information for the requested service, security and other permitted purposes, not to infer unrelated sensitive characteristics for advertising.
European Economic Area, United Kingdom and Switzerland: where relevant law applies, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, withdraw consent where processing relies on it, and complain to the competent data-protection authority. The legal bases described above apply according to the purpose and circumstances. Contact us first if you want help resolving a concern; doing so does not limit your right to contact an authority.
Other locations may provide additional rights. These summaries do not remove rights granted by applicable law. Submit requests through the contact and verification process above; contractor-controlled records may require the contractor's participation.
Security and your responsibilities
We use safeguards designed to protect accounts and information, including access controls and protections for sensitive credentials and supported private content. No system is completely secure. Protect your sign-in details, limit workspace access, share proposal links only with intended recipients and contact us if you suspect unauthorized access.
Access is limited according to account roles and the relevant workspace. An administrator may be able to view or manage information in its workspace. Do not treat a shared proposal link as a private password: anyone who receives or is forwarded an accessible link may be able to view its contents.
Children’s privacy
CrafterOps is a business service intended for adults and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate steps, including deletion where required.
Changes and contact
We may update this policy as the service or our practices change. The date above identifies the current version. For material changes, we provide additional notice and obtain consent where required by applicable law. An update does not itself authorize a new use of previously collected information where notice, consent or another legal requirement must first be satisfied.
For questions or privacy requests, contact CrafterOps at info@crafterops.com.