Privacy Policy

This Privacy Policy applies to all users of the RevoField platform, including business owners, office administrators, and field technicians. By accessing or using RevoField, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

1. Information We Collect

We collect information that you provide directly to us, information that is generated automatically when you use our platform, and information from third-party sources. The types of information we collect include:

Account Information

When you create a RevoField account, we collect personal information necessary to set up and maintain your account:

• Full name and job title
• Email address
• Phone number
• Password (stored in hashed form)

Business Information

To configure your workspace and provide relevant features, we collect information about your business:

• Company name and business address
• Industry and trade type
• Business logo and branding assets you upload
• Tax identification numbers (when provided for invoicing purposes)

Job and Service Data

As you use the platform to manage your operations, we collect and store data related to your field service activities:

• Job details, descriptions, notes, and status updates
• Customer names, addresses, contact information, and service history
• Quotes, estimates, invoices, and payment records
• Photos, documents, and files attached to jobs
• Checklists, inspection forms, and completion reports
• Scheduling and dispatch information

Payment Information

Payment processing is handled by our third-party payment processor, Stripe. When you or your customers make payments through RevoField, Stripe collects and processes payment card details directly. RevoField does not store full credit card numbers, CVVs, or other sensitive payment card data on our servers. We receive and retain only:

• The last four digits of the card number
• Card brand and expiration date
• Billing address
• Transaction amounts, dates, and status

Device Information

When you access RevoField through our web application or mobile apps, we automatically collect information about the device you are using:

• Device type, model, and operating system version
• Browser type and version
• Unique device identifiers
• Screen resolution and language preferences
• Network connection type

Location Data

With your explicit consent, we collect precise GPS location data from technician mobile devices. This data is used to:

• Provide real-time technician tracking on the dispatch map
• Optimize routing and job scheduling
• Verify job site arrival and departure times
• Generate mileage and travel reports

Location tracking can be disabled at any time through the mobile app settings or your device's operating system permissions. When location tracking is disabled, features that depend on GPS data will be unavailable.

Usage Data

We collect information about how you interact with our platform to improve the user experience and diagnose technical issues:

• Pages viewed and features used
• Time spent on the platform
• Click patterns and navigation paths
• Error logs and performance data
• Search queries within the application

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing and Maintaining Our Service

• To create and manage your account
• To enable job scheduling, dispatching, and tracking
• To generate quotes, invoices, and financial reports
• To sync data across your team's devices
• To provide offline functionality and data synchronization

Processing Payments

• To facilitate payment transactions between you and your customers through Stripe
• To process your subscription payments for RevoField
• To generate payment receipts and financial records
• To send automated payment reminders to your customers (when enabled)

Communications and Notifications

• To send appointment confirmations and reminders via email and SMS to your customers
• To deliver push notifications about job updates, schedule changes, and new assignments to technicians
• To send you account-related communications such as billing notices, security alerts, and service updates
• To provide customer support and respond to your inquiries

Improving Our Product

• To analyze usage patterns and identify areas for improvement
• To develop new features and functionality
• To conduct internal research and analytics
• To test and optimize the performance of our platform

Customer Support

• To troubleshoot technical issues and bugs
• To respond to support tickets and inquiries
• To provide onboarding assistance and training
• To follow up on feedback and feature requests

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

Payment Processing

We share transaction-related data with Stripe, our payment processor, to facilitate payment processing, fraud prevention, and compliance with financial regulations. Stripe's handling of your data is governed by their own Privacy Policy.

Push Notifications

We use Firebase Cloud Messaging (FCM) by Google to deliver push notifications to mobile devices. Device tokens and notification payloads are transmitted through Firebase's infrastructure. Google's handling of this data is governed by their Privacy Policy.

Email and SMS Communications

We use third-party service providers to send transactional emails (such as invoice delivery, appointment reminders, and account notifications) and SMS messages on your behalf. These providers process recipient contact information and message content solely for the purpose of delivering communications and are contractually obligated to protect your data.

Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental request
• Protect and defend the rights or property of RevoField
• Prevent fraud or address security or technical issues
• Protect the personal safety of users or the public

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption in Transit: All data transmitted between your devices and our servers is encrypted using TLS 1.2 or higher (HTTPS). This ensures that your information cannot be intercepted during transmission.
• Encryption at Rest: All stored data is encrypted using AES-256 encryption, one of the strongest block cipher standards available. This applies to databases, file storage, and backups.
• PCI Compliance: Payment processing is handled entirely by Stripe, which is certified as a PCI Level 1 Service Provider, the most stringent level of certification in the payment card industry. RevoField never stores, processes, or transmits raw credit card data on our infrastructure.
• Access Controls: Internal access to production systems and customer data is restricted to authorized personnel on a need-to-know basis, protected by multi-factor authentication.
• Regular Security Reviews: We conduct regular security assessments and code reviews to identify and address potential vulnerabilities.
• Infrastructure Security: Our servers are hosted on enterprise-grade cloud infrastructure with physical security, redundancy, and disaster recovery capabilities.

While we strive to use commercially acceptable means to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents in accordance with applicable notification laws.

5. Data Retention

We retain your personal information and business data for as long as your account is active and as needed to provide you with our services. Specifically:

• Active Accounts: All account data, job records, customer information, invoices, and associated files are retained for the duration of your active subscription.
• Canceled Accounts: After you cancel your subscription, we retain your data for a period of 30 days to allow for account reactivation. After this grace period, your data is queued for deletion.
• Deletion Upon Request: You may request the deletion of your account and all associated data at any time by contacting us at privacy@revofield.com. We will process deletion requests within 30 days.
• Legal Obligations: Certain data may be retained beyond the standard retention period to comply with legal, tax, or regulatory requirements (for example, financial records required for tax reporting).
• Anonymized Data: We may retain anonymized and aggregated data that cannot be used to identify you for analytical and product improvement purposes indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used, machine-readable format within 30 days of receiving your request.

Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information. You can update most of your account information directly through the RevoField platform settings. For corrections that cannot be made through the platform, contact us and we will update your records promptly.

Right to Deletion

You have the right to request the deletion of your personal information. Upon receiving a verified deletion request, we will delete your data from our active systems within 30 days. Please note that some data may be retained in encrypted backups for a limited period and will be purged during the normal backup rotation cycle.

Right to Data Export

You have the right to export your data from RevoField at any time. We provide data export functionality within the platform that allows you to download your customer records, job history, invoices, and other business data in standard formats (CSV, PDF). For a complete data export, contact us at privacy@revofield.com.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.

To exercise any of these rights, please contact us at privacy@revofield.com. We will respond to all legitimate requests within 30 days. We may ask you to verify your identity before processing your request to protect the security of your account.

7. Cookies and Tracking Technologies

RevoField uses cookies and similar tracking technologies to provide and improve our services. The types of cookies we use include:

Essential Cookies

These cookies are necessary for the platform to function properly. They enable core functionality such as session management, authentication, and security. You cannot opt out of essential cookies, as the platform would not function without them. These include:

• Session cookies to maintain your login state
• Security cookies for CSRF protection and fraud prevention
• Preference cookies to remember your settings and display options

Analytics Cookies

We use analytics cookies to understand how visitors interact with our website and application. This information helps us improve the user experience and identify technical issues. Analytics data is collected in aggregate form and does not personally identify individual users. These include:

• Page view and session duration tracking
• Feature usage and adoption metrics
• Error tracking and performance monitoring

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of RevoField may not function properly if you disable essential cookies.

8. Children's Privacy

RevoField is a business-to-business platform designed for use by trade professionals and field service companies. Our services are not directed at individuals under the age of 13, and we do not knowingly collect personal information from children under 13.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our servers. If you believe that we may have collected information from a child under 13, please contact us at privacy@revofield.com so we can take appropriate action.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email of any material changes at least 30 days before they take effect
• Display a prominent notice within the RevoField application

We encourage you to review this Privacy Policy periodically. Your continued use of RevoField after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

• Email: privacy@revofield.com
• Phone: (667) 777-2555
• Mailing Address: RevoField, Attn: Privacy Team

We aim to respond to all privacy-related inquiries within five business days. For data access, correction, deletion, or export requests, we will provide a substantive response within 30 days.