Privacy Policy
Last updated: October 28, 2026
Information We Collect
We collect: (1) Account information — name, email, company, phone when you sign up. (2) Project data — project details, documents, and files you upload. (3) Usage data — features used, pages visited, actions taken within the app. (4) Payment information — processed by Stripe; we never store full card numbers. (5) Communications — emails and support messages.
The Saguaro Field Mobile App
The iOS app asks for device permissions only when a feature needs one, and each is used for one purpose. Camera and microphone: capturing jobsite photos and video, punch-list proof, and voice notes you record. Photo library: attaching existing photos to daily logs and punch items, and saving photos you capture back to your library. Location: tagging field entries with the jobsite they were made at, and — only if you turn crew geofencing on — recording arrival and departure at a jobsite while the app is in the background. Calendar: adding project schedule tasks to your own calendar when you ask it to. You can refuse or withdraw any of these in iOS Settings; the rest of the app keeps working. We do not use the microphone, camera or location for anything other than the field record you are creating, and none of it is used for advertising or sold to anyone.
Deleting Your Account
You can delete your account from inside the app: Me → Delete account, or on the web at saguarocontrol.net under Settings. Deleting it removes your sign-in and your personal profile immediately. If other people are still on your company account, the company’s projects, daily logs, photos and pay applications stay with the company — that work belongs to the business, not to your login. If you are the last person on the account, the whole workspace is scheduled for permanent deletion 30 days later. Records we are legally required to retain, such as certified payroll and lien waivers, are kept until that obligation ends and are not used for any other purpose. Questions: privacy@saguarocontrol.net.
How We Use Your Information
We use your data to: provide and improve the Service; send transactional emails (account, billing, document notifications); respond to support requests; analyze usage to improve features; comply with legal obligations. We do NOT sell your personal information to third parties. We do NOT use your project data to train AI models.
Optional AI Features and Your Permission
Before sharing data for an AI feature, Saguaro asks each signed-in user to review and allow AI sharing. Anthropic (Claude) receives AI questions, conversation history, relevant profile/company details and project context, including names, addresses, contacts, schedules, budgets, work records, documents, drawings, receipts and photos needed for answers, analysis, drafts, photo notes and translation. OpenAI (Whisper) receives voice recordings selected for transcription, including voices and personal details spoken in them; transcripts may also go to Anthropic for translation or answers. Replicate receives design images, prompts and project context for image generation and redesign; results may go to Anthropic for descriptions. Submit only data you have permission to share. AI is optional: declining leaves non-AI tools available. Manage or withdraw permission in Settings → AI privacy. Withdrawal stops new requests; it cannot recall data already sent or cancel requests in progress. Automatic AI jobs without an attributable consenting user remain off. These services process the data to provide the requested features under their own policies: anthropic.com/legal/privacy, openai.com/policies/privacy-policy, and replicate.com/privacy. Saguaro does not use your project data to train AI models. We do not promise that withdrawal deletes data already received by a provider; contact privacy@saguarocontrol.net for help with a data request.
Data Storage and Security
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Hosted on Supabase (AWS us-east-1). Platform-level backups exist only to restore the Service after an incident; we do not export, recover or restore an individual customer’s data on request. Access is restricted to authorized personnel.
Cookies and Tracking
We use cookies for: authentication (session tokens), preferences, and analytics (Google Analytics 4, PostHog). You can disable non-essential cookies in your browser. We use no advertising trackers.
Data Retention
Active account data is retained as long as your account is active. After account cancellation, data is retained for 30 days then deleted. You may request immediate deletion at privacy@saguarocontrol.net.
Your Rights (CCPA/GDPR)
You have the right to: access your personal data; correct inaccurate data; request deletion of your data; export your data in machine-readable format; opt out of marketing emails at any time. To exercise these rights, email privacy@saguarocontrol.net.
Third-Party Services
We use: Supabase (database), Stripe (payments), Resend (email delivery), Anthropic, OpenAI and Replicate (optional AI features), PostHog (product analytics), Google Analytics (web analytics), Vercel (hosting). Each has their own privacy policy.
Children
Our Service is not directed at children under 13. We do not knowingly collect data from children.
Changes to This Policy
We will notify users of material changes via email and in-app notice 30 days before changes take effect.
Contact
Privacy questions: privacy@saguarocontrol.net · Saguaro Control Systems