Last updated: September 25, 2026
We collect: (1) Account information — name, email, company, phone when you sign up. (2) Project data — project details, documents, and files you upload. (3) Usage data — features used, pages visited, actions taken within the app. (4) Payment information — processed by Stripe; we never store full card numbers. (5) Communications — emails and support messages.
The iOS app asks for device permissions only when a feature needs one, and each is used for one purpose. Camera and microphone: capturing jobsite photos and video, punch-list proof, and voice notes you record. Photo library: attaching existing photos to daily logs and punch items, and saving photos you capture back to your library. Location: tagging field entries with the jobsite they were made at, and — only if you turn crew geofencing on — recording arrival and departure at a jobsite while the app is in the background. Calendar: adding project schedule tasks to your own calendar when you ask it to. You can refuse or withdraw any of these in iOS Settings; the rest of the app keeps working. We do not use the microphone, camera or location for anything other than the field record you are creating, and none of it is used for advertising or sold to anyone.
You can delete your account from inside the app: Me → Delete account, or on the web at saguarocontrol.net under Settings. Deleting it removes your sign-in and your personal profile immediately. If other people are still on your company account, the company’s projects, daily logs, photos and pay applications stay with the company — that work belongs to the business, not to your login. If you are the last person on the account, the whole workspace is scheduled for permanent deletion 30 days later. Records we are legally required to retain, such as certified payroll and lien waivers, are kept until that obligation ends and are not used for any other purpose. Questions: privacy@saguarocontrol.net.
We use your data to: provide and improve the Service; send transactional emails (account, billing, document notifications); respond to support requests; analyze usage to improve features; comply with legal obligations. We do NOT sell your personal information to third parties. We do NOT use your project data to train AI models.
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Hosted on Supabase (AWS us-east-1). Platform-level backups exist only to restore the Service after an incident; we do not export, recover or restore an individual customer’s data on request. Access is restricted to authorized personnel.
We use cookies for: authentication (session tokens), preferences, and analytics (Google Analytics 4, PostHog). You can disable non-essential cookies in your browser. We use no advertising trackers.
Active account data is retained as long as your account is active. After account cancellation, data is retained for 30 days then deleted. You may request immediate deletion at privacy@saguarocontrol.net.
You have the right to: access your personal data; correct inaccurate data; request deletion of your data; export your data in machine-readable format; opt out of marketing emails at any time. To exercise these rights, email privacy@saguarocontrol.net.
We use: Supabase (database), Stripe (payments), Resend (email delivery), Anthropic (AI features), PostHog (product analytics), Google Analytics (web analytics), Vercel (hosting). Each has their own privacy policy.
Our Service is not directed at children under 13. We do not knowingly collect data from children.
We will notify users of material changes via email and in-app notice 30 days before changes take effect.
Privacy questions: privacy@saguarocontrol.net · Saguaro Control Systems · Scottsdale, AZ 85251