Privacy Policy

Effective October 18, 2026

This policy explains what information Day to Data Inc. collects through SmallBizServices, why, who can see it, and what choices you have. It applies to the Owner and users of company accounts. For information about your clients that a company enters, the company decides what to collect and why; we only process it on the company's behalf.

1. Information we collect

Account information: your name, email address, phone number, preferred language, and your company's name, address and contact details.
Sign-in information: your password (stored only as a one-way hash by our authentication provider) and session details needed to keep you signed in.
Customer Data entered by your company: clients, their contacts, properties and addresses, services, jobs, estimates, work orders, invoices, payment records, notes, crew notes and change order requests, the reasons typed when a record changes, the English or Spanish translations of that text, and your company logo.
Consent record: the text you agreed to when you signed up, the IP address you signed up from, and the date and time.
Usage and activity: when users were last active, counts of documents created, which features are used, and an audit log of changes to records (what changed, by whom and when).
Technical data: IP address, browser type and basic request logs created by our hosting provider when you use the Service.
Work order photos: pictures a Crew Lead takes of a job, with the time each was taken, the location of the device when it was taken (if the device allows it) and the IP address it was uploaded from.
Client approvals: when a client approves an estimate online, the name they type, their drawn signature or written consent, and the time, IP address and browser details of the approval.
Notification settings: if a Crew Lead turns on notifications, the address that their phone's push service gives us to reach that phone.
Email records: the recipient, subject, type and date of each email the Service sends for a company (never the text of the message).

2. Why we use it

We do not sell personal information, and we do not use Customer Data for advertising.

To provide and operate the Service and keep each company's data separate.
To authenticate users, secure accounts and prevent fraud and abuse.
To give support and respond to your requests.
To bill for the Service once billing is enabled.
To measure and improve the Service, using combined or aggregate statistics.
To meet legal obligations and keep evidence of your agreement to our Terms.
To translate text between English and Spanish, so that each user and each client can read a document or message in their own language.
To notify a Crew Lead's phone when a work order is assigned to them, only if they turn notifications on.

3. Who can see it

Your company's users, according to their role (Owner, Admin, PM or Crew Lead). A Crew Lead sees only the work orders assigned to them, without client details or prices. Companies cannot see each other's data.
Day to Data Inc., the platform owner, who can view all companies' data to operate, support, bill and secure the Service and to produce aggregate statistics. Our views of company data are recorded in an audit log.
Our service providers (below), only as needed to run the Service.
Authorities or other parties when the law requires it or to protect rights and safety; we will tell the company where we are allowed to.

4. Service providers (sub-processors)

We will update this list, and tell Owners of material changes, if we add or replace a provider.

Supabase — database, authentication and file storage. Data is stored in the United States.
Vercel — application hosting and delivery.
Stripe — card payment processing and subscription billing, when billing is enabled. Card details go to Stripe directly and are never stored by us.
Resend — sending the emails the Service sends: sign-up and password messages, estimates, invoices and receipts to a company's clients, and notices to Owners.
Google (Gemini API) — automatic translation between English and Spanish of text users type, such as service names and descriptions, estimate and invoice lines, notes and the reasons typed for changes. Only the text to translate is sent, but it can include what a user typed, such as a client's name. We use the paid tier of the API, which under Google's terms does not use that text to train Google's models.
Push notification services run by the maker of a phone's browser (for example Apple, Google or Mozilla) — to deliver a notification to a Crew Lead's phone when they turn notifications on. The notification contains the work order number and the property address.

5. Cookies

We use only the cookies the Service needs: a sign-in session cookie that keeps you signed in, an activity cookie that records recent use so we can sign you out after a period of inactivity, and a language cookie that remembers English or Spanish. We do not use advertising or analytics cookies. If that changes we will update this policy first.

On a Crew Lead's phone, the app keeps encrypted copies of photos waiting to be uploaded and of the assigned work orders so it can be used without a signal. They are removed when the user signs out or a different user signs in, photos waiting more than 14 days are removed, and the work order copy is not used after 12 hours.

6. How long we keep it

See the Data Retention Policy. In short: while the account is active, then for a limited period after cancellation, then it is deleted.

7. Security

No system is perfectly secure. If we confirm a breach affecting a company's data, we will notify the Owner without undue delay and no later than 72 hours after confirming it, with what happened, what data was involved and what we are doing.

Each company's data is separated in the database by row-level security, enforced by the database itself.
Data is encrypted in transit (HTTPS) and encrypted at rest by our providers; the company logo storage is private.
Access to production systems is limited and protected by strong authentication, and regular backups are kept by our database provider.

8. Your rights and choices

You can ask us to access, correct, export or delete your personal information, or to object to or restrict how we use it, by writing to info@smallbizservices.us. We answer within 30 days. The Owner can correct most information directly in Settings. If you are a client of a company that uses the Service and want your information changed or deleted, please ask that company; we will help it respond. Residents of some states and countries have additional rights under local law, and we honor them.

9. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

10. Changes

We may update this policy. The effective date above shows the latest version; for material changes we will notify Owners by email or in the Service.

11. Contact

Day to Data Inc. — info@smallbizservices.us

1. Information we collect

Account information: your name, email address, phone number, preferred language, and your company's name, address and contact details.

Sign-in information: your password (stored only as a one-way hash by our authentication provider) and session details needed to keep you signed in.

Customer Data entered by your company: clients, their contacts, properties and addresses, services, jobs, estimates, work orders, invoices, payment records, notes, crew notes and change order requests, the reasons typed when a record changes, the English or Spanish translations of that text, and your company logo.

Consent record: the text you agreed to when you signed up, the IP address you signed up from, and the date and time.

Usage and activity: when users were last active, counts of documents created, which features are used, and an audit log of changes to records (what changed, by whom and when).

Technical data: IP address, browser type and basic request logs created by our hosting provider when you use the Service.

Work order photos: pictures a Crew Lead takes of a job, with the time each was taken, the location of the device when it was taken (if the device allows it) and the IP address it was uploaded from.

Client approvals: when a client approves an estimate online, the name they type, their drawn signature or written consent, and the time, IP address and browser details of the approval.

Notification settings: if a Crew Lead turns on notifications, the address that their phone's push service gives us to reach that phone.

Email records: the recipient, subject, type and date of each email the Service sends for a company (never the text of the message).

2. Why we use it

We do not sell personal information, and we do not use Customer Data for advertising.

To provide and operate the Service and keep each company's data separate.

To authenticate users, secure accounts and prevent fraud and abuse.

To give support and respond to your requests.

To bill for the Service once billing is enabled.

To measure and improve the Service, using combined or aggregate statistics.

To meet legal obligations and keep evidence of your agreement to our Terms.

To translate text between English and Spanish, so that each user and each client can read a document or message in their own language.

To notify a Crew Lead's phone when a work order is assigned to them, only if they turn notifications on.

3. Who can see it

Your company's users, according to their role (Owner, Admin, PM or Crew Lead). A Crew Lead sees only the work orders assigned to them, without client details or prices. Companies cannot see each other's data.

Day to Data Inc., the platform owner, who can view all companies' data to operate, support, bill and secure the Service and to produce aggregate statistics. Our views of company data are recorded in an audit log.

Our service providers (below), only as needed to run the Service.

Authorities or other parties when the law requires it or to protect rights and safety; we will tell the company where we are allowed to.

4. Service providers (sub-processors)

We will update this list, and tell Owners of material changes, if we add or replace a provider.

Supabase — database, authentication and file storage. Data is stored in the United States.

Vercel — application hosting and delivery.

Stripe — card payment processing and subscription billing, when billing is enabled. Card details go to Stripe directly and are never stored by us.

Resend — sending the emails the Service sends: sign-up and password messages, estimates, invoices and receipts to a company's clients, and notices to Owners.

Google (Gemini API) — automatic translation between English and Spanish of text users type, such as service names and descriptions, estimate and invoice lines, notes and the reasons typed for changes. Only the text to translate is sent, but it can include what a user typed, such as a client's name. We use the paid tier of the API, which under Google's terms does not use that text to train Google's models.

Push notification services run by the maker of a phone's browser (for example Apple, Google or Mozilla) — to deliver a notification to a Crew Lead's phone when they turn notifications on. The notification contains the work order number and the property address.

5. Cookies

7. Security

Each company's data is separated in the database by row-level security, enforced by the database itself.

Data is encrypted in transit (HTTPS) and encrypted at rest by our providers; the company logo storage is private.

Access to production systems is limited and protected by strong authentication, and regular backups are kept by our database provider.

8. Your rights and choices