We collect only what we need to provide the service. We do not sell your personal data. We do not share your data with advertising networks.
Account information. Your name, email, company name, and password at registration. If you use Google or Facebook sign-in, we receive your name and email from those providers.
Business data. Clients, invoices, estimates, expenses, payments, files, and other records you enter. This data belongs to you.
Billing information. Processed by our payment processor. We store only a tokenized reference and the last four digits of your card — never full card numbers.
Usage data. Pages visited, features used, time spent, errors encountered. Used to improve the product; not linked to your identity in analytics.
Log data. IP address, browser type, OS, referring URL, and timestamp. Retained 90 days.
Approximate location. At registration we use your IP address to estimate your country — used only to set a default currency and timezone.
To provide the service: operating your account, processing invoices, enabling payments, sending transactional notifications.
To improve the service: understanding usage patterns, diagnosing bugs, and testing new features.
To communicate with you: account and billing notifications, product updates (unsubscribable), and security alerts.
To comply with legal obligations: responding to lawful requests, fraud prevention, and abuse investigation.
We do not use your data to train external AI models or sell to data brokers.
We do not sell your personal data. We share data only with vetted service providers operating on our behalf (cloud hosting, payment processing, email delivery, error tracking), when required by law, in the event of a business transfer with advance notice, or with your explicit consent.
Authentication cookies keep you logged in and are essential. Preference cookies remember your settings. Analytics use aggregated non-personal statistics. We do not use advertising cookies.
We retain your data while your account is active. On closure, personal data is deleted within 30 days (some financial records may be retained longer as required by law). Export everything from Settings → Export at any time.
You may have the right to access, correct, delete, or port your data and to object to processing. Email privacy@servicejoy.com — we respond within 30 days.
AES-256 encryption at rest, TLS 1.3 in transit, bcrypt password hashing, role-based access controls, and daily encrypted backups. See our Security & Reliability page. To report a suspected breach contact security@servicejoy.com.
Servicejoy is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete it promptly.
We may update this Privacy Policy periodically. Material changes will be notified by email or in-app notice at least 14 days before they take effect.
Privacy: privacy@servicejoy.com
Security: security@servicejoy.com
General: hello@servicejoy.com