Privacy Policy

1. Who this policy covers

JobOne is operated by Frog Byte, LLC, a Maine limited liability company (“JobOne,” “we,” “us”). This policy explains how we handle information across our website at www.getjobone.com, the JobOne application at app.getjobone.com, the websites we build and host for our customers, and the phone and messaging services we provide.

There are two different groups of people in this policy, and the difference matters:

• Our customers. Home service businesses that subscribe to JobOne, and the people who work at them. For their information, we are the party that decides how it is used — we are the controller.
• Their customers. Homeowners who call, text, book, or pay one of our customers. That information belongs to the business you contacted. We only process it on their behalf and under their instructions. See section 12 if that is you.

2. Information we collect

Information you give us

• Account and business information: your name, email address, phone number, business name, business address, service area, hours, services, and prices.
• Demo and contact requests: whatever you type into a form on this website, including your trade, crew size, and what you told us you are trying to fix.
• Your business content: website copy and images, your customer and property records, quotes, jobs, invoices, and payment records you create in the platform.
• Data you migrate: customers, properties, and job and invoice history imported from software you used before JobOne.

Information we generate or receive

• Call data: phone numbers, timestamps, call duration, audio recordings, and written transcripts. See section 4.
• Message data: the content and delivery status of text messages sent and received through the platform, plus consent and opt-out status.
• Connected account data: information from services you connect, such as Google. See section 3.
• Payment information: our payment processor collects and stores card details directly. Card numbers never touch our servers. We receive and store the outcome of a payment, the last four digits, the card brand, and the amount.
• Activity log: we record state changes in the platform — who changed what, when, and to what. This is the audit trail, and it is also how we investigate a problem when you report one.
• Technical data: IP address, browser and device type, pages visited, and approximate location derived from IP address.

3. Google user data

Some of JobOne’s features work by connecting to your Google account. This section describes exactly what we request, why, and what we do with it. Connecting Google is optional; the rest of the platform works without it, though calendar sync and Google Business Profile management do not.

Limited Use

JobOne’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, and without exception:

• We use Google user data only to provide and improve the specific features you connected it for.
• We do not transfer Google user data to anyone except as needed to provide those features, for security purposes, or to comply with applicable law.
• We do not use Google user data for advertising of any kind.
• We do not sell Google user data. We do not sell any data.
• We do not use Google user data to develop, improve, or train generalized or general purpose artificial intelligence models. See section 7.
• No human at JobOne reads your Google data except with your explicit consent to resolve a specific problem you reported, to investigate a security incident or abuse, or where we are legally required to.

Revoking access and deleting Google data

You can disconnect Google from your JobOne dashboard at any time, or revoke it directly at myaccount.google.com/permissions. When you disconnect, we stop syncing immediately and delete the stored access and refresh tokens. Calendar availability data cached for scheduling is deleted within 30 days. Jobs that were already created in JobOne remain, because they are your business records — but they stop syncing to Google.

Our full Google API disclosure is on its own page: Google API Services Disclosure.

4. Calls, recordings, and transcripts

When our AI receptionist answers a call, the call is recorded and transcribed. Every call begins with a spoken disclosure that the call is recorded. We do this on every call in every state rather than only where the law requires it, because it is the only approach that is safe when a business takes calls across state lines.

• Audio recordings are retained for 90 days and then deleted automatically.
• Written transcripts are retained for the life of the JobOne account, so our customers can search their own call history.
• Recordings and transcripts belong to the JobOne customer whose phone was called. We access them to operate and troubleshoot the service, and where required by law.

If you were a caller and want your recording deleted, contact the business you called, or write to us at [email protected] and we will route your request to them.

5. Text messages and consent

The platform sends text messages such as booking confirmations, reminders, and review requests. Consent and opt-out status is stored as a first-class part of each contact record, not as a checkbox on a form.

• Replying STOP to any message opts that number out immediately and permanently.
• Replying HELP returns contact information for the business and for us.
• Message and data rates may apply. Message frequency varies with the work being scheduled.
• We do not send marketing text messages on behalf of our customers to purchased lists, and our terms prohibit our customers from using the platform that way.

6. How we use information

• To operate the platform: answer calls, book jobs, send quotes and invoices, take payments, and publish websites.
• To provide support, including investigating problems you report to us.
• To bill you, and to detect and prevent fraud and abuse.
• To send you service messages — outages, billing notices, and changes that affect you.
• To improve the platform in aggregate, using data that does not identify a person.
• To meet legal obligations and to enforce our Terms of Service.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have never done this and the business model does not depend on it.

7. AI processing and model training

The AI receptionist uses third-party speech and language model providers to hold a conversation and produce a transcript. Those providers are contractually bound to process the data only to deliver that service to us.

We do not use your data — or your customers’ data, or Google user data — to train generalized artificial intelligence models, and we contract with our providers on terms that prohibit them from doing so with data we send them.

We do configure the AI with your own business information — your services, prices, service area, and hours — so that it can answer accurately. That is configuration, not training, and it stays inside your account.

8. When we share information

We share information in four situations, and no others:

• Service providers. Companies that run parts of the platform for us — hosting, the database, telephony, the voice AI, email delivery, and payment processing. Each is bound by contract to use the data only to provide that service. The current list is on our subprocessors page.
• At your direction. When you connect a service such as Google, or send a quote or invoice to your customer, or export to your accounting software.
• Legal requirements. When we are required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect someone from harm. Where we are legally permitted to tell you first, we will.
• Business transfer. If the business is acquired or merged, data may transfer as part of that transaction. You will be notified, and this policy continues to apply until it is replaced by one you are told about.

9. How long we keep things

• Call audio: 90 days, then deleted automatically.
• Call transcripts: for the life of the account.
• Business records — contacts, jobs, quotes, invoices, payments: for the life of the account, then subject to the deletion process below.
• Google OAuth tokens: deleted immediately when you disconnect; cached calendar availability deleted within 30 days.
• Financial records: retained as long as tax and accounting law requires, typically seven years, even after account closure.
• Website analytics and server logs: up to 24 months.
• After you cancel: we hold your data for 30 days so you can complete an export or change your mind. After that we delete it on request, and otherwise on our normal schedule, except records we are legally required to keep.

10. Security

Data is encrypted in transit and at rest. Access to production systems is limited to people who need it and is logged. Each customer’s data is isolated at the database level, not just by application code. Card data is handled entirely by a PCI-compliant payment processor and never reaches our servers.

Our support staff can view a customer account to help with a problem. Every such session and every action taken during it is recorded in the activity log against the real person who performed it.

No system is perfectly secure. If a breach affects your personal information, we will notify you and any required regulator without undue delay.

11. Your rights and choices

Wherever you live, you can ask us to:

• Access the personal information we hold about you.
• Export your data. Contacts, jobs, invoices, call transcripts, and website content and images are all exportable, and the export is self-serve.
• Correct information that is wrong.
• Delete your information, subject to records we must legally keep.
• Opt out of marketing email or text at any time. Service messages about outages and billing are not marketing and continue.
• Complain to a data protection authority if you think we have handled your information badly.

Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have these same rights under those laws, plus the right not to be discriminated against for exercising them. We do not sell personal information or share it for cross-context behavioral advertising, so there is no opt-out for those activities because they do not happen.

To exercise any of this, email [email protected]. We respond within 45 days, and usually much sooner. We may need to verify who you are first.

12. If you are a customer of a JobOne customer

If you called, texted, booked, or paid a home service business that uses JobOne, we hold your information on that business’s behalf. They decide what happens to it; we process it under their instructions.

The fastest route for access or deletion is to contact that business directly. If you cannot reach them, or you do not know which business it was, write to [email protected] with the phone number you called from and we will identify the business and pass your request along.

You never need a JobOne account. Quotes, invoices, and booking confirmations are sent as private links, so there is no password to create and no portal to log into.

13. Cookies and this website

This marketing website uses only what it needs to function, plus Google reCAPTCHA on our forms to stop automated spam. reCAPTCHA collects hardware and software information and sends it to Google for analysis; its use is subject to Google’s Privacy Policy and Terms of Service.

We do not run advertising trackers or third-party advertising cookies on this site.

14. Children

JobOne is a tool for businesses and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, write to us and we will delete it.

15. Where your data is processed

JobOne is operated from the United States and your information is processed and stored there. If you use the service from outside the United States, you are sending your information to the United States, where privacy law differs from the law where you live.

16. Changes to this policy

We will update this policy as the product changes. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will email account holders before it takes effect — we will not rely on you noticing a new date on a page.

17. How to reach us

Privacy questions, data requests, and complaints: [email protected].

By post: Frog Byte, LLC, 5 Temple St #124, Kennebunkport, ME 04046, United States.