Privacy Policy

Who operates this app

Keystone General Contractors (“Keystone,” “we”) operates Keystone Field, a field book for our Illinois construction crew. We work on America/Chicago time. Questions: horejs.andrew@gmail.com.

Public URL: https://keystone-field-five.vercel.app/privacy

What the app is for

Crew and desk staff sign in to clock time on a job, keep a daily work record, send the homeowner a day-clear report, and (for Admin) keep private HR files. It is a work tool, not a consumer social app.

Information we collect

• Account. Name, email, phone (optional, for SMS), password, role, and language preference.
• Time clock. Clock-in and clock-out, job site, project, notes, lunch and other pauses, and payable hours.
• Location. When you clock in (and usually clock out), the app asks the device for GPS. We store latitude, longitude, accuracy, and time on that card. Default: Geofence is off, so clock-in works from anywhere. We still save a GPS fix when the phone has one, and Desk may see a flag if you were farther than about 75 yards or location was off. Admin can turn Geofence on for a person; then clock-in only works within about 75 yards of the job pin.
• Photos. Optional job photos, a required close-out photo on some projects, and receipt pictures. Admin may also store a driver’s license / ID photo in the HR file.
• Messages. Emails and SMS we send or log: homeowner day-clear reports, office copies, crew notes, receipt notices. Phone numbers and emails of crew, homeowners, and extra job contacts are stored so those sends can happen.
• SMS opt-in form. Optional name, mobile number, role, SMS consent, agreement to Terms and Privacy, consent time, and optionally IP / browser. Used only to record consent and send program texts. Not sold or shared for marketing.
• HR vault (Admin only). Full SSN or last four, ID document, address, date of birth, and payment handles (Venmo, Cash App, Zelle, or other). Sensitive values are encrypted. Reveals are logged with a reason.
• Public quote and apply forms. Name, phone, email, and a short message from people who request a quote or apply to work. Used only to follow up. Not sold.
• Password reset. If you ask to reset a password, we email a one-hour link to that address only when it matches an active account. The form does not say whether the email exists.

How we use it

We use this information to run the job: confirm you clocked at the right site, pay time, keep a day record, email or text the homeowner when Desk sends a held daily report, message crew, and let Admin maintain employment records. We do not sell personal information. We do not use SMS or email for advertising.

Who can see it

• You see your own time, pay estimate, and account email/phone.
• Desk / Foreman see day ops: time cards, jobs, draws, receipts, and Outbox.
• Admin sees the HR vault. Foreman does not.
• Homeowners receive the day-clear email (and a short text if a phone is on the job). The office is copied.

SMS and email

If a phone number is on file, we may send transactional texts (day-clear summary, crew note, receipt notice) through our SMS provider (Twilio when configured). Emails go through our email provider. These are work notices, not marketing. To stop texts to a number, ask Admin to remove that phone or email horejs.andrew@gmail.com. Reply STOP if the carrier message says you can.

Homeowners and crew can also opt in on the public form at https://keystone-field-five.vercel.app/sms-opt-in. Message frequency: Up to 2–3 messages per working day while a project is active (about 15–20 per month). That form collects an optional name, mobile number, role (homeowner / crew / other), two checkboxes (SMS consent, and agreement to Terms and Privacy), the time of consent, and optionally the IP address and browser used to submit. We use that only to prove consent and send the program texts. SMS opt-in data is not sold or shared with third parties for marketing purposes. Twilio may process the number to deliver messages. You can opt out by replying STOP or contacting us.

Location

Location is requested so we can tell whether clock-in happened at the job. It is stored on the time card and visible to Desk. If you deny location and Geofence is on for your login, clock-in is blocked. If Geofence is off, you can still clock in; Desk may see that location was missing or far from the pin.

Sharing and processors

We share data only as needed to run the app: hosting (for example Vercel), the database host, Twilio for SMS, and our email sender. They process data on our instructions. We may share records if the law requires it or to protect the company or a person from harm.

Retention and security

We keep time, job, and payroll records as long as we need them for pay, the job, and ordinary business records. Admin can deactivate a login. SSN and payment handles are encrypted at rest. Access to the HR vault is limited to Admin and audited. Passwords are hashed. No method is perfect; we work to keep the book reasonably secure.

Your choices

Signed-in people can update their own email, telephone, and password from their name in the header. Ask Admin to correct HR or pay fields, or to delete a mistaken time card. You can turn off location in the phone settings (clock-in may fail). This app is for adults on the crew, not for children.

Changes

If this policy changes in a material way, we will update this page and the “Last updated” date. The current version lives at this URL.

Contact

Keystone General Contractors
Illinois · America/Chicago
horejs.andrew@gmail.com