Privacy Policy

Sity Global, Inc. ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.fieldsity.com (the "Site"), use our mobile applications for iOS and Android (the "Apps"), or access our cloud-based field service management platform (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register for an account, make a purchase, subscribe to our services, or otherwise contact us. This information may include:

• Account Information: Name, email address, phone number, company name, business address, and password when you create an account
• Billing Information: Payment card details, billing address, and transaction history (processed securely through Stripe and RevenueCat)
• Business Information: Company details, team member information, service areas, and business operational data
• Client Data: Information about your customers that you enter into the Service, including names, addresses, contact information, property details, and service history
• Communications: Any correspondence or feedback you send to us, including support requests and survey responses
• Referral Information: Your unique referral code, referral relationships (who you referred and who referred you), referral status, and reward history when you participate in the Referral Program

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain information about your device and usage:

• Device Information: Device type, operating system, unique device identifiers (such as Android ID, Advertising ID, push notification tokens, and Firebase installation identifiers), browser type, and mobile network information
• Location Information: GPS data (with your permission) for features like route optimization, property mapping, and Google Street View integration
• Usage Data: Pages visited, features used, time spent on the Service, click patterns, and navigation paths
• Log Data: IP address, access times, referring URLs, and error logs

1.3 Information from Third-Party Services

We may receive information about you from third-party services you connect to your account:

• Stripe: Payment processing status, transaction confirmations, and billing-related information for subscription management and payment processing
• RevenueCat: Subscription status, purchase receipts, entitlement data, and billing platform identifiers for managing subscriptions across the Apple App Store, Google Play Store, and web
• QuickBooks: If you enable the QuickBooks integration, we receive and sync invoice, payment, and customer data as authorized by you
• Google Services: Map data, address verification, and Street View imagery when you use location-based features
• Authentication Providers: Basic profile information if you choose to sign in using third-party authentication services

2. How We Use Your Information

We use the information we collect for various purposes, including:

2.1 Providing and Improving the Service

• Creating and managing your account
• Processing payments and managing subscriptions through Stripe and RevenueCat
• Enabling core features such as job scheduling, invoicing, estimates, and client management
• Providing GPS-based routing, mapping, and property visualization
• Synchronizing data with integrated third-party services like QuickBooks
• Analyzing usage patterns to improve functionality and user experience
• Providing customer support and responding to inquiries
• Administering the Referral Program, including tracking referral relationships, validating referral codes, and delivering referral rewards

2.2 Communications

• Sending transactional emails (account confirmations, invoices, receipts, password resets)
• Providing service updates and important notices
• Sending promotional communications (with your consent, and you may opt out at any time)
• Delivering push notifications through our mobile apps (configurable in app settings)
• Sending transactional SMS messages, such as appointment confirmations and ETA updates from field service businesses to their end customers. See Section 12 below for full details on our SMS program, including how consent is obtained, message frequency, and how to opt out.

2.3 AI-Powered Features

Our Service includes optional AI-powered features to help you work more efficiently:

• AI Description Enhancement: When you use this feature, the text you provide (such as job descriptions) is sent to OpenAI's API for processing. This data is used solely to generate improved content and is not used to train AI models.
• We do not send personally identifiable information (such as client names or addresses) to AI services unless you explicitly include it in the text you submit for enhancement.
• Use of AI features is optional. You can create and edit content manually without using AI assistance.

2.4 Legal and Safety Purposes

• Complying with legal obligations and responding to legal requests
• Enforcing our Terms of Use and other agreements
• Detecting, preventing, and addressing fraud, security issues, or technical problems
• Protecting the rights, property, and safety of our users and the public

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Stripe: For payment processing, subscription billing, applying referral program credits to customer balances, and fraud prevention. Stripe's privacy policy is available at stripe.com/privacy
• RevenueCat: For subscription management, receipt validation, entitlement tracking, and granting promotional entitlements for referral rewards across the Apple App Store, Google Play Store, and web. RevenueCat processes your account identifier, device identifiers, subscription status, purchase history, and billing platform information. RevenueCat's privacy policy is available at revenuecat.com/privacy
• OpenAI: For AI-powered features such as job description enhancement. When you use AI features, your input text (such as job descriptions) may be processed by OpenAI's API. OpenAI's privacy policy is available at openai.com/privacy
• Intercom: For in-app messaging, customer support chat, and help documentation. Intercom may collect information about your interactions with our support team. Intercom's privacy policy is available at intercom.com/legal/privacy
• HubSpot: For marketing communications, email campaigns, and customer relationship management. HubSpot's privacy policy is available at legal.hubspot.com/privacy-policy
• Cloud Infrastructure: Microsoft Azure and other cloud service providers for hosting, serverless computing, and data storage
• PostHog: For product analytics, usage pattern analysis, and session recording to improve the Service. PostHog may collect device identifiers and usage data. PostHog's privacy policy is available at posthog.com/privacy
• Sentry: For error tracking, crash reporting, and application performance monitoring. Sentry may collect device identifiers and diagnostic data. Sentry's privacy policy is available at sentry.io/privacy
• OneSignal: For push notification delivery and management. OneSignal collects device identifiers to deliver notifications to your device. OneSignal's privacy policy is available at onesignal.com/privacy_policy
• Google: For maps, geocoding, and Street View functionality
• Twilio: For SMS messaging infrastructure, including delivery of transactional SMS messages such as appointment confirmations and ETA updates that field service businesses send to their end customers. Twilio processes the recipient's mobile phone number, the message content, and delivery metadata. No mobile phone numbers or SMS opt-in data are shared with third parties or affiliates for marketing or promotional purposes. Twilio's privacy policy is available at twilio.com/legal/privacy

3.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to meet national security or law enforcement requirements.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

3.5 Referral Program Data

When you share your referral code or use someone else's referral code, limited information is shared between the parties to facilitate the Referral Program:

• The Referred User will see the Referrer's company name.
• The Referrer will see the Referred User's company name and referral status (pending, qualified, or expired).

No additional personal information (such as email addresses, phone numbers, or physical addresses) is shared between referral participants.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained for as long as your account is active and for a reasonable period thereafter for backup, archival, and audit purposes
• Client Data: Business data you enter (clients, jobs, invoices) is retained until you delete it or close your account
• Financial Records: Transaction and billing records are retained for 7 years to comply with tax and accounting requirements
• Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytics purposes

When you delete your account, we will delete or anonymize your personal information within 90 days, except as required by law or for legitimate business purposes.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Secure payment processing through PCI-DSS compliant Stripe
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights and Choices

6.1 Account Information

You may update, correct, or delete your account information at any time by logging into your account settings. If you wish to delete your account entirely, you can do so through the following methods:

• Mobile App: Open the Fieldsity app, go to Settings → Security → Delete Account, and follow the on-screen instructions.
• Web App: Log in at app.fieldsity.com, navigate to Settings → Security → Delete Account.
• Email: If you no longer have access to the app, you may request account deletion by emailing legal@sity.ai with the subject line "Account Deletion Request" and the email address associated with your account. We will verify your identity before processing the request.

6.2 Communication Preferences

You can opt out of promotional emails by clicking the "unsubscribe" link in any promotional email. You can manage push notification preferences in your mobile device settings or within the App. Note that you cannot opt out of transactional communications related to your account or the Service.

6.3 Location Information

You can control location permissions through your device settings. Note that disabling location services may limit certain features of the Service, such as route optimization and property mapping.

6.4 Cookies and Tracking

Most web browsers are set to accept cookies by default. You can usually modify your browser settings to decline cookies if you prefer. This may affect your ability to use certain features of the Service.

7. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as the purposes for collection and use
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Note: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your California privacy rights, please contact us at legal@sity.ai

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us at legal@sity.ai. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to the United States and other countries.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

10. Third-Party Links and Services

The Service may contain links to third-party websites and services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last revised" date at the top of this page. For material changes, we may also send you an email notification.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. SMS Text Messaging Program

Fieldsity provides a Software-as-a-Service field service management platform used by field service businesses (such as plumbers, electricians, HVAC technicians, and landscapers) to send transactional SMS messages to their own customers (the "End Customers"). This section describes how mobile phone numbers and SMS-related information are collected, used, and protected. The corresponding contractual terms governing the SMS program are set forth in Section 10 of our Terms of Use.

12.1 What the SMS Program Does

The SMS program enables a field service business that uses Fieldsity (the "Business") to send transactional messages to its End Customers, including: appointment confirmations, schedule changes, technician en-route notifications with estimated time of arrival ("ETA"), and service completion confirmations. Messages are sent through Twilio, Inc., our SMS infrastructure provider. Messages are strictly transactional and operational — Fieldsity does not use the SMS program to send marketing or promotional content to End Customers.

12.2 How End Customers Provide Consent

Consent to receive SMS messages is obtained by the Business directly from its End Customer at the time the End Customer schedules service with the Business. Consent may be obtained through any of the following methods, as elected by the Business and consistent with applicable law:

• Verbal or in-person consent at intake: When the End Customer schedules service by phone or in person, the Business obtains express verbal consent before adding the End Customer's mobile number to Fieldsity and enabling SMS for that number.
• Written intake forms: The End Customer provides their mobile number on a paper or digital intake form that includes a clear SMS consent disclosure.
• Online booking forms (where used by the Business): The End Customer enters their mobile number into the Business's online booking form and affirmatively checks an opt-in box agreeing to receive transactional SMS messages from the Business.

In each case, before enabling SMS for an End Customer's phone number in Fieldsity, the Business attests that it has obtained the End Customer's consent to receive transactional SMS messages. The Business is contractually responsible under our Terms of Use for ensuring that valid consent has been obtained from each End Customer in accordance with the Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles and Best Practices, and other applicable law.

12.3 Message Frequency and Rates

Message frequency varies based on the appointments scheduled between the End Customer and the Business. A typical End Customer may receive between zero and five messages per service visit. Message and data rates may apply, depending on the End Customer's mobile carrier and plan.

12.4 Opting Out

End Customers may opt out of receiving SMS messages at any time by replying STOP to any message. Other accepted opt-out keywords include CANCEL, END, QUIT, UNSUBSCRIBE, REVOKE, OPTOUT, and STOPALL. End Customers may reply HELP at any time to receive help information. Opt-out requests are honored by Twilio at the carrier level and are also surfaced to the Business so it does not continue to attempt to send SMS to the opted-out number.

12.5 How Mobile Information Is Used and Shared

12.6 Records of Consent and Opt-Out

Fieldsity maintains records of each Business's attestation that consent has been obtained and of any opt-out received. These records may be retained for the duration of the Business's account and for a reasonable period thereafter to demonstrate compliance with applicable law.

13. Contact Us

If you have any questions about this Privacy Policy, your personal information, or our data practices, please contact us: