Privacy Policy

Sitehand is operated by Groundworks Services LLC, a California limited liability company, doing business as Sitehand ("Sitehand," "we," "us," or "our"). For any privacy, data, or SMS question, contact us at mason@ground-wrks.com.

Waitlist & marketing. When you join the Sitehand waitlist we collect your phone number (the primary identifier), your name, your business name, an optional email address, your trade, any referral information, and the source/campaign details (UTM parameters) that brought you to us. We also record your IP address in hashed form for fraud prevention and abuse detection — we do not store your raw IP address.

Product & account data.If you become an account holder, we collect your account and profile details, the records you create in Sitehand (your customers' contact information, jobs, schedules, notes), and your invoices and payment data. Card payments are handled by Stripe — we never store full card numbers, only a tokenized customer reference and limited metadata (such as card brand and the last four digits).

AI inputs. When you use AI features, the text, photos, and voice you submit — together with related job and customer details — are sent to our AI providers (Anthropic and OpenAI) to generate results; voice is transcribed and not stored by them. AI features are off until you turn them on in Settings.

Location.With a team member's consent, we collect their device GPS location while they are clocked in, for field-crew visibility and geofenced clock-in. We also geocode customer addresses into map coordinates.

Device & technical data. We collect device push notification tokens (to deliver alerts), IP address, browser/device details, page views and feature-usage events (product analytics), and crash and error diagnostics — to operate, secure, and improve the service.

We use the information we collect to:

• provide, operate, and improve the Sitehand service;
• contact you about early access, your place on the waitlist, and our launch;
• process payments and manage subscriptions;
• send transactional messages and, where you have consented, marketing messages;
• perform analytics, measure interest, and improve our product and marketing;
• keep the service secure and prevent fraud and abuse.

Our text-message program is called Sitehand. We use it to send you early-access updates, launch announcements, and account or service notifications.

• How we obtain consent. We send text messages only to people who have opted in by checking the SMS consent box on the Sitehand waitlist form. The exact consent language you agree to is:

“By joining, I agree to receive texts from Sitehand about early access and launch. Consent is not a condition of purchase. Msg & data rates may apply. Reply STOP to opt out, HELP for help.”

• Purpose. Messages relate to early access, our launch, and account/service notifications.
• Message frequency. You will receive recurring messages; frequency varies.
• Cost. Message and data rates may apply.
• Opt out. Reply STOP at any time to stop receiving messages. We honor every opt-out request.
• Help. Reply HELP for help, or email mason@ground-wrks.com.
• Not a condition of purchase. Consent to receive text messages is not a condition of purchasing any goods or services.
• Carriers. Mobile carriers are not liable for delayed or undelivered messages.

We do not sell your personal information for money, and we do not share your phone number, text-message opt-in, account data, or your customers' information with third parties for their own marketing. We share data only with the service providers listed below, to perform services on our behalf.

One exception applies to our public website(not the mobile app): we use the TikTok advertising pixel to measure ad performance, which shares limited online identifiers (such as advertising cookies and IP address) with TikTok. Some laws, including California's, treat this as a “sale” or “share.” You can opt out by enabling Global Privacy Control in your browser or by emailing us at the address below. The mobile app does not run this pixel.

• Clerk — authentication, accounts, and team / organization membership.
• Neon — managed PostgreSQL that stores your CRM data (customers, jobs, invoices, scheduling, team).
• Stripe — subscription billing and, via Stripe Connect, the card payments your customers make to you. Card details are entered on Stripe; we store only the card brand, last four digits, expiry, and a reusable token — never full card numbers.
• QuickBooks / Intuit — a one-way sync of your invoices and customers into your connected QuickBooks ledger (only if you connect it).
• Anthropic (Claude) — AI generation: receives the job details, photos, voice transcripts, and related customer and pricing context you submit to AI features, to produce estimates, messages, and responses.
• OpenAI — transcribes voice recordings to text. Audio is sent for transcription only and is not stored by OpenAI.
• Vercel — application hosting and storage of uploaded files (job photos, logos, e-signatures, and generated PDFs).
• Resend — transactional and marketing email delivery.
• PostHog — product analytics (events, page views, and account identifiers) to improve the app.
• Sentry — crash and error monitoring.
• Upstash — rate-limiting and abuse protection (processes IP addresses).
• Cloudflare Turnstile — bot protection on public forms.
• OpenStreetMap (Nominatim) — geocodes customer addresses into map coordinates for the team map and geofenced clock-in.
• TikTok — an advertising/analytics pixel on our website only (it does not run in the mobile app) to measure campaign performance.

Each provider processes data on our behalf under its own terms and security commitments. We also use a team member's device location, only while they are clocked in and have given consent, for field-crew visibility and geofenced clock-in; this location data is stored in our own database and is not shared with any third-party location service.

We keep waitlist information for as long as you remain on the waitlist, and we keep account data for as long as your account is active. We may retain information longer where needed to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. You may request deletion of your data at any time as described below, and we will delete or anonymize it unless we are required to keep it.

You can request access to, correction of, or deletion of your personal information by emailing mason@ground-wrks.com.

California residents.Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect and how we use it, the right to request deletion of your personal information, and the right to opt out of the sale or sharing of personal information (see “Selling or sharing your data” above for our website advertising pixel and how to opt out). We will not discriminate against you for exercising any of these rights.

Sitehand is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a minor has provided us information, contact us and we will delete it.

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit and at rest and least-privilege access controls. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you of any breach affecting it as required by law.

We may update this policy from time to time. When we do, we will post the new version with an updated date and, for material changes, take additional reasonable steps to let you know.

Questions about this policy or our data practices? Email mason@ground-wrks.com. See also our Terms of Service.