Introduction
Job Site Core, operated by HarrisTec LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction management platform and related services.
Information We Collect
We collect information you provide directly to us, including:
- Account information (name, email, phone number, company details)
- Project data (quotes, invoices, schedules, photos)
- Payment information (processed securely through Stripe)
- Location data, including precise and background location — see Location Data
- Voice recordings, when you use the voice assistant or speech-to-text
- Communications between you and Job Site Core
- Subcontractor information (name and phone number for photo uploads)
Location Data
Job Site Core collects precise location, and can collect it in the background — while the app is closed or not in use. This section explains exactly when that happens, who can see it, and how to stop it.
When we collect it. Background location is collected only while a worker is clocked in to an active shift, or while a company administrator has an active live-location request open. It is not collected when you are clocked out, and it is never collected unless someone has granted the “Always” (iOS) or “Allow all the time” (Android) location permission on that device.
What we collect. Coordinates, accuracy, speed, a device identifier and a timestamp, recorded periodically to form a breadcrumb trail for the shift.
Why. GPS clock-in and clock-out, verifying arrival at a job site, mileage and travel records, and letting a company see where its own crew is during a working shift. Location is never used for advertising, never sold, and never shared with other companies.
Who can see it. Only administrators and managers of the company the worker belongs to. No other Job Site Core customer can see it.
Retention. Location breadcrumbs are automatically deleted 90 days after they are recorded.
How to turn it off. Revoke the location permission in your device settings (iOS: Settings → Privacy & Security → Location Services; Android: Settings → Apps → Job Site Core → Permissions). Every other part of the app continues to work; only GPS clock-in, arrival verification and live locate stop functioning.
Notice to Employees and Crew Members
If your employer uses Job Site Core, some of the information above is collected about you even though your employer, not you, is our customer. This section is your notice of that collection.
Depending on what your employer enables, we may process your name, email address, phone number, the hours you record, the photos and notes you submit, messages you send through the app, and — where you have granted the permission — your precise and background location during working shifts, as described above.
Your employer decides which of these features to switch on and controls the resulting records. We process this information on their behalf. If you want your data corrected or deleted, ask your employer first; you may also contact us at support@jobsitecore.com and we will route the request appropriately.
California residents: precise geolocation is treated as sensitive personal information under the CPRA. We use it only for the purposes described in Location Data — to provide the service your employer has engaged us for — and not to infer characteristics about you.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments and questions
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address technical issues
- Provide customer support
Information Sharing
We do not sell, trade, or rent your personal information. We may share your information:
- With your consent or at your direction
- With service providers who assist in our operations
- With QuickBooks for accounting integration (if enabled)
- To comply with legal obligations
- To protect our rights, privacy, safety, or property
- In connection with a merger or acquisition
The service providers we use to operate JobSiteCore ("subprocessors") are listed below. We do not sell your data to any of them, and none of them may use it for their own marketing.
| Provider | What it receives |
|---|---|
| Google Firebase / Google Cloud (US) | Hosting, database, file storage, authentication — all account and project data |
| Stripe, Inc. | Subscription billing and contractor payments; card data goes directly to Stripe and never touches our servers |
| OpenAI | Text and documents you submit to AI features (quote drafting, estimate import, receipt reading), which may include customer names, addresses, and insurance claim details contained in those documents |
| Google Vertex AI (Gemini) | Voice-assistant requests, job-site photos submitted for analysis, and project data needed to answer them |
| SendGrid (Twilio) | Recipient email addresses, message content, and attachments such as quote and invoice PDFs |
| Twilio | Phone numbers and SMS message content |
| Sentry | Error diagnostics from the web app, including the signed-in account identifier |
| Intuit (QuickBooks Online) | Approved time entries, when you connect the integration |
| Google Maps / Places | Addresses you look up, and location points used for mileage and check-in |
| Visual Crossing, OpenWeatherMap | Job-site coordinates and dates, to return weather |
Artificial Intelligence and Automated Processing
Several JobSiteCore features send your content to third-party AI providers to produce a result: drafting a quote from a voice note or photo, importing an insurance or contractor estimate from a PDF, reading a receipt, analyzing a job-site photo, and answering voice-assistant requests.
What is sent. Only the content needed for the request. For estimate import that includes the document itself, which commonly contains the property address, the customer's name and contact details, and insurance claim information such as the claim number, carrier, adjuster, policy number, date of loss, and claim amounts.
Who receives it. OpenAI and Google Vertex AI, as listed in the subprocessor table above.
Training. We use these providers under commercial API terms, which do not permit your content to be used to train their general-purpose models.
Automated decisions. AI output in JobSiteCore is always a draft for a human to review. Nothing is sent to your customer, priced, or filed automatically on the strength of an AI result alone.
If you would rather not use these features, simply do not use them — the rest of the product works without them. To disable them for your whole company, contact support@jobsitecore.com.
Mobile Information & SMS Messaging
We do not sell, rent, or share your mobile phone number, SMS opt-in, or consent with any third parties or affiliates for their own marketing or promotional purposes. No mobile information is shared with third parties or affiliates for marketing purposes. Text messaging originator opt-in data and consent are never shared with any third parties.
When you opt in to text messages, we use your mobile number solely to deliver the transactional messages you requested — for example, quotes, invoices, project and appointment updates, payment confirmations, and photo-upload requests — and to process opt-out (STOP) and help (HELP) requests. Message frequency varies (typically 1–5 per project). Message & data rates may apply. You can opt out at any time by replying STOP, or reply HELP for help.
We share mobile information only with the service providers that operate the messaging on our behalf (such as our SMS carrier/aggregator) strictly to deliver these messages, and as required to comply with law — never for those providers' or any third party's marketing. See our SMS Terms for the full text-messaging program terms.
Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication requirements
- Secure cloud storage through Google Firebase
- PCI-compliant payment processing through Stripe
Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy.
Account deletion. When you request account deletion, we schedule it and delete your data 30 days later, except where retention is required by law. The 30-day window exists so a deletion requested by mistake, or by a departing employee, can be reversed — contact support within it.
Abandoned trials and lapsed subscriptions. If a free trial ends without a paid subscription, or a paid subscription is cancelled, the account becomes read-only. Data is retained for 30 days from that point and is then permanently deleted along with the company, its files, and its user logins. We email a warning 7 days before deletion. You can export your data at any time during the read-only period from Settings → Data Export.
Location breadcrumbs. The periodic location records described in Location Data are deleted automatically 90 days after they are recorded, independently of the account lifecycle above.
Your Rights
You have the right to:
- Access and receive a copy of your personal information
- Correct or update your information
- Delete your account and associated data
- Object to or restrict certain processing
- Data portability
- Withdraw consent where applicable
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, disclose, and sell, and the right to opt-out of the sale of personal information. We do not sell personal information.
Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.
SMS Communications
When you opt-in to receive SMS notifications, we collect and use your phone number to:
- Send project updates and notifications
- Deliver team invitation messages
- Provide one-time upload links to subcontractors
- Send account security alerts
- Deliver important system notifications
SMS Consent and Opt-Out
You opt in before any text message is sent: consent is collected when you provide your mobile number to your contractor, expressly agreeing to receive project-related texts sent via Job Site Core, and a consent record is stored. Before any project message is sent, you receive a one-time confirmation and must reply YES (START and JOIN are also accepted). You understand that:
- Message frequency varies based on project activity, typically 1 to 5 messages per active project
- Standard message and data rates may apply
- You can opt-out at any time by replying STOP to any message
- You can get help by replying HELP to any message
- Your consent is not a condition of purchase or service
- We will never sell, share, or disclose your mobile phone number or SMS opt-in data to third parties or affiliates for marketing or advertising purposes
For full SMS terms, message samples, and opt-in details, visit our SMS Terms & Conditions.
SMS Service Provider
We use Twilio Inc. as our SMS service provider. Your phone number is shared with Twilio solely for the purpose of delivering our messages. Twilio's privacy policy governs their handling of your information. For SMS support, contact us at support@jobsitecore.com
Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
HarrisTec LLC
Email: support@jobsitecore.com
Address: 116 Agnes Rd, Ste 200, Knoxville, TN 37919, USA