Privacy Policy

Information you give us

• Account information: your name, email address and password. We store your password only as a bcrypt hash, never in readable form.
• Sign in with Intuit: if you use it, Intuit tells us its permanent ID for your Intuit account, your name, your email address and whether Intuit has verified that address. We store the ID to recognize you next time, and use the name and email for your account.
• Team members: the email addresses of people you invite to your account, when they were invited and whether they accepted, and for a view-only client login, which company it shows. Someone who accepts has their own account information as above.
• Settings and job details: target margins, overhead settings, estimated costs, contract values, percent complete, job types, job status, cost category choices, your time zone, and up to 10 email addresses you choose to receive the Weekly Profit Brief and profit alerts.
• Feedback: answers to our trial feedback survey and messages sent through the in-app feedback form.
• Contact form: your name, company, email, phone number if you provide it, and your message.
• Messages: emails you send us, replies to our emails and LinkedIn messages, and our notes from any conversation we have with you.
• Partner applications: firm name, contact name, phone, website, an estimate of your client count, and the email address you want commission payouts sent to. We do not collect bank account details.

Information from QuickBooks Online

When you connect a QuickBooks Online company, you authorize us through Intuit to read data from it. We process it for you, to provide the Service, and not on Intuit’s behalf. We copy and store the data needed for job profitability analysis:

• your jobs and their names: projects or sub-customers, customers if you make one customer per job, or classes (including class names) if each job is a class, and the customer each job belongs to, including customer names;
• cost lines from bills, checks, expenses, credit card charges and refunds, vendor credits and journal entries that are tagged to a job, including the amount, date, account or product name, cost category and line description (a description can contain whatever text was typed into QuickBooks, such as a vendor or employee name);
• job cost lines from the last 12 months that aren’t tagged to any job, so the Data Health page can list them: the date, amount, form (bill, check, expense and so on), bill or check number, vendor or payee name, account or product name, and the line description or memo (up to 500 characters);
• time entries, as the employee’s name, hours and a labor cost calculated from the cost rate on the entry, which comes from the employee’s cost rate in QuickBooks. We don’t store the cost rate itself, but it can be worked out from a single entry, so anyone with a login to your account can see it. You can turn off labor from timesheets in Settings;
• invoice, sales receipt, credit memo and refund totals, sales tax amounts, dates and payment status, and what is still owed on each open invoice;
• income recorded against a job without an invoice, from deposits and journal entries: the amount and date of each line;
• estimates: the number, date, expiry date, status, whether QuickBooks has emailed it, the customer or project it names, and each line’s product or service name, amount, quantity, cost category and the purchase cost set on that product or service in QuickBooks (not line descriptions); and
• your company name and basic company information.

When you use Check against QuickBooks on a job, we read QuickBooks’ Profit and Loss report for that job’s customer or project to show you beside our figures. We don’t store that report.

We also store the access and refresh tokens Intuit issues for the connection, and your QuickBooks company ID. All three are encrypted with AES-256-GCM before they are saved. We never receive or store your Intuit or QuickBooks password.

We do not store your bank account details, your customers’ payment information, payroll records, or document attachments from QuickBooks. We never write to your QuickBooks company.

Information we create

From the data above we calculate profitability figures, data-quality checks, trends, forecasts and comparisons, and we store the Weekly Profit Briefs, profit alerts and insights we generate for you. We also keep records of sync runs, the emails we send you (type, recipient, time and delivery status), your subscription status, and referral and partner program activity. We also save month-end copies of your Work in Progress schedule (job and customer names, each job’s contract, cost, billing and profit figures, and the totals), and delete them when you delete your account. When you sign up, unless you have opted out, we save with your account the Google Analytics browser ID from your visit and, if you arrived from one of our ads or a link with campaign tags, where you came from (see Section 2).

When you agree to our Terms of Service and this policy, we record which version you agreed to, when, how (the signup box, a later prompt, or Stripe checkout), a keyed one-way hash of your network address and your browser’s user agent. We also record your privacy choices on your account (Section 8) and whether you’ve turned off tips and reminder emails.

To limit password guessing we record sign-in attempts as keyed one-way hashes of the email address and network address, never the addresses themselves, and delete them after a day. To give each QuickBooks company one free trial, we record a keyed one-way hash of the company’s ID with the date it started a trial.

Payment information

Payments are handled by Stripe. You enter card details on Stripe’s pages, and they are never sent to or stored by us. We keep only Stripe’s identifiers for your customer record and subscription, your plan, your subscription status and billing dates, and payment amounts.

Information from other sources

• Business contact information: to find contractors and bookkeepers who may want JobProfitAI, we collect business contact information about owners and staff of contracting, construction and bookkeeping businesses from business contact databases (currently Apollo.io), from LinkedIn (including LinkedIn Sales Navigator), from company websites and other public business listings, and from people who refer a business to us. This can include name, job title, company name, industry, size and location, business email address, business phone number and LinkedIn profile address. Section 3 explains how we use it.
• Advertising and analytics reports: Google gives us reports about how our ads and website perform. These are mostly totals, such as how many people clicked an ad or started a trial.

Information collected automatically

Like most websites, our hosting provider records standard request information such as IP address, browser type, pages requested and time. For the contact form we store a one-way hash of your IP address, not the address itself, along with your browser’s user agent, to limit abuse. On our public website pages, analytics and advertising tags also collect information about your visit, as Section 2 describes.

Where our tags run

Our website uses Google Tag Manager to load Google Analytics, which also measures our Google Ads. These tags run only on our public website pages, such as the homepage, pricing, the sample-data demo and our ad landing pages, and on the signup page. They never run inside the JobProfitAI app: not on your dashboard, job pages, reports, settings or billing pages, where your QuickBooks figures, jobs and customers are shown. They don’t load at all if your browser sends Global Privacy Control or you turn them off on our Your Privacy Choices page.

Because our tags don’t run in the app, they can’t see your QuickBooks data, and we don’t send Google or any other analytics or advertising company your QuickBooks data, job or customer names, or financial figures.

Google Analytics

Google Analytics, a service of Google LLC, tells us how people find and use our website. Using cookies, it collects the pages you view; the website, search, ad or link that brought you here, including any campaign tags in the link; your device, browser, screen size and language; your approximate location, worked out from your IP address; and steps you take, such as playing our demo video or starting a trial. We link Google Analytics to our Google Ads account so it can tell us which ad clicks lead to trials and subscriptions. We have set it up so it isn’t used to choose who sees our ads: Google signals and personalized advertising are turned off. Google explains what it does with this information in How Google uses information from sites or apps that use its services. You can stop Google Analytics from collecting information in your browser with the Google Analytics opt-out browser add-on.

Google Ads

We advertise on Google Search. Google Ads tells us which ad clicks lead to trials and subscriptions, so we know which ads work. We don’t use remarketing, which means showing our ads to people because they visited our website, and we don’t send Google your email address, in plain or hashed form. Google may still use its own information about you to choose the ads it shows you anywhere; you can manage that in Google’s ad settings.

Steps reported from our servers

Some steps happen where our tags don’t run: signing up (your browser leaves the signup page straight away), signing up with Intuit, connecting QuickBooks, starting checkout and subscribing. When you take one, our servers tell Google Analytics that it happened, with only the plan, the amount and currency, how you signed up, or Stripe’s reference number for the payment, linked to the Google Analytics browser ID saved when you signed up (and, for the signup itself, the Google Analytics visit it happened in). Google Analytics passes them to our Google Ads account so we can count which ads lead to trials and subscriptions. These reports never include your name, your email address or anything from QuickBooks, they are marked as not to be used for ad personalization, and we send them only in the first 63 days after you sign up.

We don’t send them for an account that has opted out. An opt-out is saved on your account when you make it while signed in to JobProfitAI (on Your Privacy Choices, or by your browser sending Global Privacy Control), when you sign in from a browser where you have opted out, when it was in effect in your browser at signup, or when you ask us by email. From then on these reports stop, including for steps that happen later.

Where you came from

When you arrive from one of our ads or a link with campaign tags, we save the ad click ID (Google’s gclid), the campaign tags (utm_source, utm_medium, utm_campaign and utm_term) and the first page you landed on in our own cookie, jpai_src, for 90 days. If you sign up, we copy them onto your account, so we can see which ads and links bring customers and not just visits, and remove the cookie. We don’t set this cookie if you have opted out or your browser sends Global Privacy Control, and we don’t copy it if either was in effect when you signed up.

Videos

Some of our website pages, such as our ad landing pages and our partner page, include a demo video. It plays from our own website: the video files are stored with Vercel, our hosting provider, and nothing on our website loads from YouTube. Until you click play, the page shows only a still picture, and the video downloads only when you play it. Where our Google Analytics tags are running, they may count that you started or finished a video. Some of our emails link to our videos on YouTube, a Google service, including a setup video that isn’t on our website. If a video can’t load on our website, the player offers a link to watch it on YouTube instead. If you open one there, YouTube collects information under Google’s privacy policy.

Cookies we use

These cookies are needed for the Service to work. They are first-party and always on:

• jmai_session keeps you signed in. It is a signed, HTTP-only cookie that lasts up to 30 days or until you log out.
• jpai_ref is set only when you arrive through a referral or partner link. It stores the referral code for up to 30 days so the referral can be credited if you sign up, and it is cleared when you do.
• jpai_company remembers which of your QuickBooks companies you were looking at, for up to a year.
• jpai_oidc and jpai_intuit are used only while you sign in with Intuit: the first checks the sign-in came back to the browser that started it (10 minutes), the second holds your Intuit sign-in while you link it to an account (15 minutes).
• jpai_optout is set only if you turn off analytics and advertising on our Your Privacy Choices page. It remembers that choice for about 13 months.

These cookies are for analytics and advertising. They are set only on our public website pages and the signup page, and not at all if you opt out or your browser sends Global Privacy Control:

• jpai_src, our own cookie, remembers where you came from for 90 days, as described above.
• _ga and _ga_ followed by an ID, from Google Analytics, tell visits apart and keep track of a visit, for up to 2 years.
• _gcl_au, _gcl_aw and other cookies starting _gcl_, which Google’s tags may set to connect ad clicks to trials and subscriptions, for 90 days.
• Google’s cookies on its own domains, such as google.com and googleadservices.com, which Google uses to measure ads and prevent fraud.

Google can change the names and lifetimes of its cookies. Its own page has the current list: How Google uses cookies. Our payment pages are hosted by Stripe, which sets its own cookies under Stripe’s privacy policy. You can also block or delete cookies in your browser’s settings; if you block the cookies the Service needs, you won’t be able to sign in.

Global Privacy Control and Do Not Track

We treat a Global Privacy Control signal from your browser as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising. When we receive it, our analytics and advertising tags don’t load, and our Your Privacy Choices page shows that the signal was received and honored. Some browsers also send a “Do Not Track” signal. There is no agreed standard for what it means, so we don’t respond to it. Use Global Privacy Control or our Your Privacy Choices page instead.

Visitors outside the United States

JobProfitAI is for businesses in the United States. For visitors in the European Economic Area, the United Kingdom and Switzerland, our Google tags run with their cookies and advertising features turned off, and we keep no record of which ad or link brought you.

Service providers

We use the companies below to run the Service and our business. They process information on our behalf and under their own terms and privacy commitments, and only for the purposes listed.

Advertising and analytics companies

Google LLC receives information through its tags on our public website pages, the steps reported from our servers, and YouTube if you open one of our videos there, as Section 2 describes. Google uses it to provide its services to us, and also for its own purposes under Google’s privacy policy.

Contractors who help with outreach

We work with independent contractors, who may be located outside the United States, to find and contact businesses that may want JobProfitAI and to answer their questions. They use business contact information, the messages we exchange with those businesses, and the outreach tools listed above. They have no access to the JobProfitAI app, to customer accounts or to QuickBooks data, and they must keep the information confidential and use it only for our work.

People you choose

If you add recipients to the Weekly Profit Brief, we send it to them. The brief contains your job names, customer names and profitability figures. Team members you invite see the companies on your account, and a view-only client login sees only the one company you choose for it.

Firm accounts

A bookkeeper or accounting firm on our Firm plan connects its clients’ QuickBooks companies to its own account. The firm is the account holder: it and the team members it invites see every client company it connects, and it controls each connection, the settings and deletion. One client of a firm never sees another client’s company. Each view-only client login the firm creates sees one company, and can’t change anything. When a client leaves, the firm can delete that client’s company data from Settings without affecting its other clients, and that company’s client logins lose access. If your QuickBooks company was connected by a firm and you ask us about its data, we will direct you to the firm, except where the law requires otherwise.

Referrers and partners

If you sign up through someone’s referral or partner link, they are told that an account was created through their link, and later whether it became a paying account, because that is how credits and commissions are earned. Partners see how many referred accounts are on trial or paying, and the commission amounts earned. They do not see your QuickBooks data, jobs, customers or any financial figures from your account, and a referral never gives anyone access to your data.

Legal and safety reasons

We may disclose information if we believe in good faith that it is required by law, subpoena or other legal process, or needed to protect the rights, property or safety of our users, the public or PWL Solutions. Where the law allows, we will try to tell you before disclosing your data in response to a legal request.

Business transfers

If PWL Solutions is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy or protections at least as strong. We will notify you before your information becomes subject to a different privacy policy.

What you can do yourself

• Change your target margin, overhead settings, and Weekly Profit Brief recipients and schedule in Settings. To change the name or email address on your account, email support@jobprofitai.com.
• Disconnect QuickBooks from Settings or from your Intuit account at any time.
• Cancel your subscription from Billing.
• Delete one company’s data from Settings, connected or not, without deleting your account. A firm can remove a client’s company this way.
• Delete your account and all of its data from Settings at any time.
• Turn off our analytics and advertising tags in your browser on our Your Privacy Choices page.

Requests you can make

You can ask us to confirm whether we process your personal information, give you a copy of it in a portable format, correct it, or delete it. Email support@jobprofitai.com from the address on your account, or tell us how to reach you if you do not have an account. We will verify your request before acting on it, and we respond within 45 days. If we need more time, which the law allows in some cases, we will tell you why. These requests are free of charge. We offer these rights to everyone, including people we have contacted about JobProfitAI, wherever you live and not only where a law requires it.

If we decline your request, you can appeal by replying to our decision or emailing support@jobprofitai.com with the subject line “Privacy appeal.” We will respond to an appeal within 60 days and explain our decision. If you are not satisfied, you may contact the attorney general of your state.

Opting out of sale, sharing and targeted advertising

You can opt out on our Your Privacy Choices page, by turning on Global Privacy Control in your browser, or by emailing support@jobprofitai.com with the subject line “Opt out.” In your browser, opting out stops our analytics and advertising tags and our jpai_src cookie. When we know it’s you, because you’re signed in to JobProfitAI when you opt out or sign in later from that browser, or your browser sends Global Privacy Control, or you email us, we also save the opt-out on your account, so it applies in every browser where you sign in to JobProfitAI and stops anything we would report about your account to Google from our servers. Turning the tags back on from Your Privacy Choices undoes only an opt-out made on that page; one from Global Privacy Control or email stays until you ask us. We don’t use personal information for profiling that produces legal or similarly significant effects. We don’t ask for or deliberately extract Social Security numbers, bank account numbers, health information or precise location, and we use your password only to sign you in. Free-text fields, such as messages you send us and the descriptions and memos copied from QuickBooks, can contain whatever someone typed into them; we handle that text as part of the information it came with and don’t use it for anything else.

Emails and messages

You choose whether the Weekly Profit Brief is sent and to whom, in Settings. Account, security, billing and trial-status emails, such as the notice that your trial is ending, are part of the Service and are sent while you have an account. Tips and reminders, such as setup reminders, product tips, feedback requests and trial extension offers, include an unsubscribe link. Marketing emails, including the emails we send to businesses we contact, include a way to unsubscribe too, and we stop within 10 business days of your request. To stop LinkedIn messages from us, reply to say so.

Data about your customers, vendors and employees

Your QuickBooks data includes the names of your customers, and transaction descriptions can include names of vendors, employees or others. We process that information on your behalf, to provide the Service to you. If one of those people contacts us about their information, we will refer them to you, and we will help you respond to their request.