Privacy Policy

1. Who we are

JobLit is operated by ExpenseApp Staging LLC (“we”, “us”, “our”). This policy explains how we handle personal information when you visit https://joblit.pro (the “Site”) or use the JobLit application at https://app.joblit.pro (the “Service”).

Send questions about this policy to privacy@joblit.pro.

2. Workspaces, owners and crew members

JobLit is organized into workspaces. The person or business that creates a workspace (the “Account Owner”) decides who to invite, which records to keep and who can see them. Admins and crew members join a workspace by invitation.

For the records stored in a workspace, such as jobs, clients, expenses, deposits, notes, tasks and time entries (“Workspace Content”), we process personal information on behalf of the Account Owner and under their instructions. Where privacy laws draw the distinction, the Account Owner is the “controller” or “business” for Workspace Content, and we are its “processor” or “service provider”. We are the controller for account details, billing, security records and the Site.

If you are a crew member with questions about how your employer uses JobLit, please ask them first. If you contact us, we may refer your request to the Account Owner.

The same applies if a business sent you a proposal or an invoice through JobLit: that business decided to send it and holds the record of your decision or payment, so please contact them first.

3. Information we collect

Information you give us

• Account details: your name, email address, phone number (if you add one), business or workspace name, time zone and role. If you choose to set a password, we store it only as a one-way hash.
• Workspace Content: jobs; clients and their contact details and addresses; proposals sent to clients and the decisions on them; invoices sent to clients and the payments made on them; expenses, amounts, categories and tags; deposits and payments; notes; tasks; and receipt photos or other files you upload.
• Crew and time records: invitations, roles, hourly rates set by the Account Owner or an admin, clock-in and clock-out times, and time entries.
• Communications: messages you send us and anything included in them.

Location at clock-in and clock-out

When someone clocks in or out, the Service asks their device for its current location. If the device allows it, we store the latitude, longitude and reported accuracy for that moment and attach them to the time entry. If location is declined or unavailable, the clock still works, and the entry records that no location was captured.

We do not collect location continuously, in the background, or at any time other than a clock-in or clock-out. Location permission can be changed at any time in the device or browser settings.

People who receive a proposal

An Account Owner or admin can email a proposal to people they name, who approve it or ask for changes through a private link. These people do not have an account. For each one we store their name and email address, whether and when the email was delivered, a one-way hash of their link (never the link itself) and when it expires, and their decision: approved or changes requested, the time, and any reason they write. We then email them a confirmation, and email the workspace's owner and admins about the outcome.

A proposal link works without signing in, so anyone holding it can open that proposal until it expires or is replaced, so forward it only to people who should see it.

People who receive an invoice

An Account Owner or admin can email an invoice to an address they enter. These people do not have an account. We store that address, when each email was sent and who sent it. If the business takes payments online, the email has a private Pay now link, and we store a one-way hash of it (never the link itself).

A Pay now link works without signing in. It opens a page showing the business’s name, the job and client names on the invoice, and the amount, so forward it only to people who should see that. The link does not expire; once the invoice is paid or withdrawn, the page only says so.

Paying happens on a page hosted by Stripe for that business’s own Stripe account. Card and bank details go to Stripe and never reach us. From Stripe we keep the identifiers of the payment, its amount, whether it was made by card or bank transfer, its status (including the reason a bank transfer failed), and any refund or dispute on it. The business is emailed when a payment arrives, fails, is refunded or is disputed.

Payment information

Stripe processes subscription payments. You enter card details on Stripe’s pages, and they go directly to Stripe. We never receive or store full card numbers. Stripe gives us limited information, such as customer and subscription identifiers, your plan, billing status and billing email, and may also share card brand, last four digits and expiry date. When you cancel a subscription through Stripe, we also store any cancellation reason and optional comment you provide, along with cancellation dates, to understand feedback and improve the Service. If a payment is disputed with your card issuer, Stripe tells us, and we keep a record of the dispute (the amount, the reason given, its status and deadlines, and how it was resolved) to respond to it. These records are available to authorized service operators.

If you connect your own Stripe account to take payments from your clients, we store that account’s identifier and what Stripe reports about it: whether it can take payments and payouts, and whether Stripe needs more details from you. The identity and bank details you give Stripe while setting it up go to Stripe, not to us. Disconnecting stops online payments and leaves your Stripe account as it is.

Information collected automatically

• Log and device data: IP address, browser and device type, the pages and endpoints requested, dates and times, and error details. Our servers record this as part of normal operation.
• Security and activity records: sign-ins, sign-in link requests, and a history of changes in each workspace (who created, edited or deleted what, and when). Account Owners and admins can review this history.
• Browser storage: the Service stores a sign-in token, a few preferences, a copy of the workspace records you last viewed (so the app works without a signal), and anything you entered without a signal until it is sent. When such an entry reaches us, we keep a record of it for 30 days so that it is never saved twice, and a shift sent late is marked as such. See our Cookie & Local Storage Notice.

Notifications on your device

Notifications are off until you turn them on in the app’s settings, one device at a time. When you do, your browser gives us an address at its maker’s push service (Apple, Google, Mozilla or Microsoft) and two keys for encrypting messages to that device. We store those with your account, along with the browser’s description of itself and the dates the device was added and last sent to. When something you have chosen to hear about happens (someone comments on a task you can see, puts you on a job, hands you a task, finishes, reopens or calls off one, moves or starts a job you are on, clocks in or out, changes your hours, a client answers a proposal or pays, is refunded or disputes a payment, someone accepts an invite, a crew member writes a note on a job, a shift has been left running for ten hours, a task of yours is due tomorrow or overdue, a client’s invoice is a week past due, a maintenance visit falls tomorrow, or a job is projected to lose money), we send that address a message with their name, the name of the task or job, a job’s new start date, the day and length of a shift, and the start of any comment, of a job note or of what a client asked to change. A notification about a client’s payment or overdue invoice carries the client’s name and the amount, and one about a job projected to lose money carries the projected loss; these are sent only to the owner and admins. We keep your choice of which kinds to receive with your account. It is encrypted so that only your device can read it: the push service delivers it and can see when and to which device, not what it says. The notification shows on your lock screen, so anyone who can see your phone can read it. We keep each message for up to seven days after it is sent.

Turning notifications off in the app, or signing out, removes that device from our records. So does your browser withdrawing the address.

Voice commands

Account Owners and admins can say or type where to go or what to add. The command is worked out on your device and only opens a page or a form with what you said filled in. Nothing is saved until you save that form, and we receive what you said only as part of a record you choose to save. We never receive a recording.

Turning speech into text happens in one of two ways:

• Your browser’s speech recognition. Unless you have downloaded on-device speech, the microphone uses the speech recognition built into your browser. Your browser may send the audio to its maker (Apple for Safari, Google for Chrome) to be turned into text, under that company’s terms. It does not pass through our servers.
• On-device speech. You can download a speech model in the app’s settings (about 58 MB, from our own servers, kept in your browser’s storage). Speech is then turned into text on your device and the audio is sent nowhere, to us or anyone else. It keeps working without a connection.

Your device remembers whether you turned voice on and whether on-device speech is downloaded. We do not store either with your account. You can always type a command instead.

Trying the demo

Anyone can try JobLit from the Site without an account. Before the demo opens, Cloudflare Turnstile checks that the request comes from a real browser and not an automated script. Your browser sends Cloudflare your IP address and technical details about the browser and device for that check, and we send Cloudflare the result it gave your browser and your IP address to confirm it. We also keep your IP address in memory for up to an hour, to limit how many demos one address can start. We do not store it with the demo.

The Site does not use analytics, advertising pixels or tracking cookies.

Information from other people

An Account Owner or admin may add information about you, such as your email address when they invite you or your hourly rate. Workspaces also store details about their own customers, including the people they send proposals to. Account Owners are responsible for having the right to give that information to us.

4. How we use information

We use personal information to:

• provide, maintain and support the Service, including sign-in emails, invitations, proposals and their confirmations, confirmations of changes to your plan, exports and summaries;
• process subscriptions, payments and plan changes;
• keep the Service and its users safe, including preventing fraud and abuse, limiting repeated sign-in attempts and investigating incidents;
• send service messages, such as sign-in links, security notices, billing notices and material changes to our terms or policies;
• find and fix problems and improve the Service, using logs and aggregated usage information;
• comply with the law, enforce our Terms of Service, and protect our rights and the rights of others.

We do not sell Workspace Content, use it for advertising, or use it to train artificial intelligence models.

Legal bases (EEA, UK and Switzerland)

5. How we share information

• Within your workspace. Information added to a workspace is visible to other members according to their role. Account Owners and admins can see crew members’ time entries, clock-in and clock-out locations, hourly rates and activity history.
• Service providers. Companies that host the Service, send email, process payments, check demo requests and deliver notifications for us, under contracts that limit their use of the information to providing those services. The current list is on our Subprocessors page.
• Legal reasons. When we believe in good faith that disclosure is required by law or legal process, or needed to protect the safety, rights or property of our users, the public or us. Where the law allows, we will notify the affected Account Owner first.
• Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that deal. It will remain subject to this policy’s commitments.
• At your direction. When you ask us to share it, or consent to our doing so.

Export files you download are yours to handle. Once you send one to someone else, what they do with it is outside this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law, and we have not done so in the past 12 months.

6. How long we keep information

• While your account is active, we keep your account details and Workspace Content so the Service works.
• Proposals and decisions are kept with their job as the record of what was agreed, including earlier versions that were replaced. Their links stop working when they expire or a newer version is sent.
• Invoices and the payments on them are kept with their job as the record of what was billed and paid, including invoices that were voided.
• The guided tour runs in a separate demo workspace made for you and filled with invented records. It is deleted when you leave it, or after a day unused. Anything you type there goes with it, receipt photos are not kept, and email sent from it goes only to you.
• Trying the demo without an account makes a temporary visitor with no name or email, and a demo workspace of its own. Both are deleted when you create an account or leave the demo. Otherwise they are deleted within four hours of when you last used the demo, and never more than about a day after it was made. Nothing is emailed from it to anyone.
• Notification devices are kept until you turn notifications off on that device, sign out there, or your browser withdraws the address. The notifications themselves are deleted within seven days of being sent.
• Deleted records go to the workspace’s trash. From there, an Account Owner or admin can restore them or delete them permanently.
• When a workspace is closed, at your request or after termination, we delete or de-identify its Workspace Content within 30 days. This happens after any export period described in our Terms. Copies in backups are overwritten on a rolling basis within 90 days.
• Billing and tax records are kept for as long as the law requires, which is typically up to seven years.
• Server logs are kept for a limited period for security and troubleshooting, then deleted.

We may keep information for longer when we need it to resolve disputes, enforce our agreements or comply with the law.

7. Security

We use administrative, technical and physical safeguards designed to protect personal information. These include encrypted connections, single-use sign-in links that expire, role-based access within workspaces, and restricted access to production systems. Our Security page has more detail. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

8. Your choices and rights

Things you can do yourself

• Update your name, email address and other account details in the app’s settings.
• Export your workspace’s records and receipt images, on every plan.
• Delete records, and permanently remove them from the trash (Account Owners and admins).
• Turn off location access for the Service in your device or browser settings.
• Turn notifications on or off for each device in the app’s settings, or in the device’s own settings, and choose in the app which kinds you receive.
• Turn voice commands on or off for each device, and download or remove on-device speech, in the app’s settings. The microphone can also be turned off for the Service in your device or browser settings.
• Sign out of every device at once.

Privacy rights

Depending on where you live, you may have some or all of these rights. This includes residents of California and other U.S. states with consumer privacy laws, the EEA, the UK, Switzerland and Canada.

• Access: to know what personal information we hold about you and to receive a copy;
• Correction: to fix inaccurate information;
• Deletion: to have your personal information deleted;
• Portability: to receive your information in a portable, machine-readable format;
• Objection and restriction: to object to certain processing or ask us to restrict it;
• Opt-out: of the sale or sharing of personal information, targeted advertising and certain profiling. We don’t do any of these.
• Withdrawing consent, where we rely on consent;
• Complaining to your local data protection authority.

To make a request, email privacy@joblit.pro from the address on your account. We will verify your identity, which may involve confirming that you control that email address. We will respond within the time the law requires, which is generally 30 to 45 days. Where the law allows, you may use an authorized agent, but we will need proof of their authority. If we deny your request, you can appeal by replying to our decision with “Appeal” in the subject line.

We will not discriminate against you for exercising any of these rights.

If your information sits in a workspace someone else controls, such as your employer’s, we may refer your request to that Account Owner. They are responsible for responding.

Global Privacy Control and Do Not Track

We don’t sell or share personal information for targeted advertising, so there is nothing for a Global Privacy Control or Do Not Track signal to opt you out of. If our practices ever change, we will honor Global Privacy Control signals as opt-out requests.

9. A note for employers

If you use JobLit to record the time, pay rates or clock-in locations of employees or contractors, you are responsible for complying with the laws that apply to you. Those laws may require you to:

• tell workers what is collected and why, in writing, before they start using it;
• get their consent;
• keep time and pay records in a specific form;
• respond to their privacy requests.

Devices ask workers for permission before sharing their location, but that prompt does not replace any notice your jurisdiction requires.

10. International transfers

The Service is hosted in the United States, and some of our service providers may process information in other countries. When we transfer personal information from the EEA, UK or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents.

11. Children

The Service is a business tool and is not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

When we change this policy, we will post the new version here and update the effective date. If a change is material, we will give you at least 30 days’ notice by email or in the Service before it takes effect.

13. Contact us