Privacy Policy

1. Data We Collect

1.1 Account Data

When you create an account we collect your name, email address, and authentication credentials (hashed password). You may use FIELDed as a customer or as a business owner/member.

1.2 Profile Data

Customer profiles store your name, contact details, and service history.
Business profiles store business name, description, location, service offerings, pricing, availability, and operational configurations managed through the Business Brain.

1.3 Transaction Data

We process and store data related to enquiries, conversations, messages, quotes, bookings, service execution records, payments, invoices, ledger entries, and reviews.

1.4 Communication Data

Messages exchanged between customers and businesses, call recordings/summaries (where authorized), and notification preferences.

1.5 Payment Data

Payment processing is handled by Stripe. We store payment references, amounts, statuses, and reconciliation records. We do not store full card numbers or CVV data.

1.6 AI Processing Data

Our Business Brain and discovery features use AI to interpret natural language, match services, and generate proposals. AI processing data is described in our AI Disclosure.

2. How We Use Your Data

• To provide the FIELDed platform services (search, enquiry, booking, payment)
• To operate the Business Brain and Co-Brain features for business owners
• To process payments through Stripe and maintain financial records
• To send transactional notifications (enquiry updates, booking confirmations)
• To maintain audit trails for security and compliance
• To improve platform functionality and user experience

3. Data Sharing

We do not sell your data. Data is shared only as necessary to provide the service:

• Between customers and businesses — when you submit an enquiry, the business receives your message
• Stripe — for payment processing
• Groq — for AI interpretation (natural language processing)
• Neon — database hosting
• Cloudflare — frontend hosting (Workers)
• Google Cloud Run — backend hosting

All third-party providers are bound by data processing agreements and are used solely to deliver the FIELDed service.

4. Tenant Isolation

FIELDed enforces strict tenant isolation. Businesses cannot access another business’s data. Customers can only access their own data. Authorization is resolved server-side from authenticated identity and database relationships.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Financial records are retained in accordance with applicable legal requirements. You may request deletion of your account and associated data by contacting us.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing
• Data portability

To exercise these rights, contact us at the email below.

7. Security

We use industry-standard security measures including bcrypt password hashing, JWT authentication with token rotation, server-side authorization on every protected resource, encrypted database connections, and audit logging of all meaningful actions.

8. Contact

For privacy-related enquiries: hello@fielded.online