Privacy Policy

What Data We Collect

When you use Own Your Tools, we collect and store the following information to provide you with a fully functional business management experience:

• Account information — your name, email address, and phone number, provided during registration
• Business data — customer records, job details, invoices, proposals, expenses, mileage logs, inventory, and scheduling data you enter into the app
• Google Calendar tokens — OAuth 2.0 access and refresh tokens when you connect your Google Calendar for job scheduling sync
• Device information — basic browser fingerprint data (user agent, screen size) used for session management
• Location data — GPS coordinates when you use the route planner or mileage tracker, only while the feature is actively in use

How We Use Your Data

Your data is used exclusively to operate the Own Your Tools platform and provide the features you use:

• Running the application — storing and syncing your business data (clients, jobs, invoices, expenses) across devices
• SMS notifications — sending appointment reminders and job updates to your customers via Twilio when you enable this feature
• Calendar synchronization — reading and writing Google Calendar events to keep your job schedule in sync when you connect your calendar
• Route optimization — calculating efficient driving routes between job sites using Google Maps
• Payment processing — handling one-time purchase payments and contractor payouts through Stripe

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

Third-Party Services

Own Your Tools integrates with the following third-party services to deliver its features. Each service receives only the minimum data necessary for its function:

• Supabase — cloud database and authentication. Stores your account credentials and business data with row-level security enforced per user. Supabase Privacy Policy
• Twilio — SMS delivery. Receives customer phone numbers and message content only when you send an SMS from the app. Twilio Privacy Policy
• Stripe — payment processing. Handles credit card data during purchase; we never store card numbers. Stripe Privacy Policy
• Google — Calendar API, Maps API, and Geocoding API. Used for calendar sync, route planning, and address lookup. Google Privacy Policy

Google Calendar Access

Own Your Tools requests access to your Google Calendar to provide two-way job scheduling synchronization. Specifically, the app:

• Reads your calendar events to check for scheduling conflicts when creating or moving jobs
• Creates and updates calendar events when you schedule, reschedule, or complete jobs in the app
• Deletes calendar events only when you delete the corresponding job in Own Your Tools

Calendar access is entirely optional. You can connect or disconnect your Google Calendar at any time from the Job Map page. Your Google OAuth tokens are stored securely in our database with row-level security — only your authenticated account can access them. We do not access any Google data beyond Calendar events, and we do not share your calendar data with any third party.

Own Your Tools' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage and Security

Your data is stored in a Supabase-hosted PostgreSQL database with the following security measures:

• Row-Level Security (RLS) — database policies ensure you can only access your own data; no user can read another user's records
• Encryption in transit — all data is transmitted over HTTPS/TLS
• Encryption at rest — Supabase encrypts stored data using AES-256
• Offline-first architecture — your data is cached locally in your browser for fast access and offline use, then synced to the cloud when connectivity is available
• No plaintext passwords — authentication is handled by Supabase Auth with bcrypt hashing

We retain your data for as long as your account is active. If you request account deletion, all associated data will be permanently removed from our systems within 30 days.

Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your business data directly from the app, or contact us to request a full data export or account deletion.

Artificial Intelligence & Third-Party AI Processing

Own Your Tools includes an optional AI-powered assistant feature ("OYT Assistant") that uses a third-party AI inference service to process user queries. The current provider is:

• Groq, Inc. (groq.com) — provides AI inference API services for processing natural language queries within the OYT Assistant feature

When you use the OYT Assistant, the text of your query is sent to Groq's servers for processing. No personally identifiable information (such as your name, email, phone number, or client data) is automatically included in these queries. Groq processes the query and returns a response, which is displayed in the assistant interface.

Groq's data handling practices are governed by their own privacy policy, available at groq.com/privacy-policy. Own Your Tools does not store or log AI conversation history on our servers.

You are never required to use the AI Assistant feature. All core business management features of Own Your Tools function independently without any AI processing.

If we change our third-party AI provider in the future, we will update this section accordingly.

Contact Us

If you have questions about this privacy policy or how your data is handled, reach out to us: