Privacy Policy

• Account identity: name, mobile phone number (for SMS one-time-password login and role assignment), and email when one is given.
• Customer and lead details: the names, phone numbers, email and street addresses, project descriptions, estimates, invoices and payments a Tenant records about its customers, including leads that arrive from its website or from lead services it connects.
• Calls: calls to and from a Tenant's business number are recorded, and both parties hear a notice that the call may be recorded. Recordings are transcribed and summarised for the Tenant's records.
• AI phone assistant: a Tenant can add an optional AI phone assistant that answers some of its calls on its behalf. Callers hear that the call may be recorded. We process the call audio, the transcript and summary, and the details a caller gives (such as name, phone number, address and project details) for the Tenant, as its processor. The assistant saves those details to the Tenant's customer records and may text the caller a follow-up or a link to send photos.
• Communications: text messages and Instagram and Facebook Messenger threads between a Tenant and its customers, so the Tenant's office can keep one conversation history per customer.
• Meeting recordings: if a Tenant connects a voice recorder (such as Plaud), recordings and transcripts of site visits and meetings.
• GPS location: captured only during clock-in, to verify a crew member is on the job site or at home base for a travel job. We do not track your phone's location in the background. If a Tenant connects vehicle GPS trackers (such as Hapn), we receive those trackers' locations from the Tenant's tracker account about every 5 minutes, to show where its vehicles are. That is the tracker's location, not your phone's.
• Photos: images you upload from your camera or photo library, for job-site documentation and estimate reference.
• Work records: hours, jobs assigned, earnings, and, for subcontractors, the tax details a Tenant needs to issue a 1099.
• Device: push notification token, OS and device class — used to deliver job assignment and payment notifications.

Hewer data is used to operate the CRM platform for our Tenants. We do not sell, rent, or share your information for advertising; do not use your data to train AI models, and our AI providers do not use it to train theirs; and do not track you across apps you don't own. Tenants can only access the data of the workspace they administer.

We use these service providers, each under contract to use the data only to provide their service to us:

• Supabase — database, authentication and file storage.
• Vercel — application hosting, and anonymous page-speed measurements (how long pages take to load and respond; no cookies and nothing that identifies you).
• Twilio — text messages, calls, call recording, and sign-in codes.
• ElevenLabs — the optional AI phone assistant: voice AI that answers a Tenant's calls, converts speech to text and back, and keeps the call's recording and transcript.
• Stripe — payments and card-transaction feeds. Card numbers are entered directly with Stripe and never reach our servers.
• Anthropic (Claude) — AI features: drafting messages and estimates, reading estimate photos, and summarising calls, meetings and site visits.
• OpenAI — converting call, voicemail and meeting audio to text, and reading answers aloud.
• Firebase Cloud Messaging — push notifications. We send a device token, not message content.
• Cloudinary — hosting and resizing of job photos and video.
• Google Maps Platform — turning job addresses into coordinates for scheduling and drive-time estimates.
• Sentry — error and crash reports, so faults can be diagnosed.

A Tenant may also connect its own accounts with other services, and data then flows between Hewer and that service on the Tenant's instruction: Gmail (reading payment notifications in the business inbox, and sending invoices and payment links from it), Google Calendar (syncing job dates), QuickBooks Online (syncing customers, invoices, payments and expenses), Instagram and Facebook (business messages), Thumbtack (new leads), and Plaud through Zapier (meeting recordings). Hewer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Gmail content is not sent to any AI provider.

What the AI features receive. The AI features send the provider what the task needs, and sometimes that includes personal details:

• Call summaries. The call audio goes to OpenAI to be transcribed. Before the transcript goes to Anthropic, we replace the names, phone numbers, email and street addresses we hold with placeholders. Anything said aloud that we have never stored, such as a family member's name, is not removed.
• AI phone assistant. For a Tenant that turns it on, the caller's voice goes to ElevenLabs as the call happens, as spoken. The assistant also receives the Tenant's business details and, for a caller the Tenant already knows, their first name, upcoming visits and the stage of their open jobs. To suggest improvements to the assistant, recent call transcripts go to Anthropic with the names, phone numbers, email and street addresses we hold replaced with placeholders.
• Meeting and site-visit recordings. When a Tenant's recorder uploads a meeting, its transcript is sent to Anthropic automatically, as recorded, to fill in the job and note details the customer mentioned. These can include personal circumstances the customer chose to share.
• Message drafts. When a Tenant asks for a suggested reply, the customer's name, the conversation, and the job's status and balance are sent.
• Estimates from photos. The photos are sent when a Tenant asks for an estimate to be drafted from them.

AI output is a draft for the Tenant to review; Tenants are responsible for what they send to their customers.

Data is stored with Supabase in the United States. Access controls keep each Tenant's data separate and limit each user to what their role allows. Documents, call recordings and other private files are stored behind short-lived signed links. Job photos and video are hosted on Cloudinary. Data is encrypted in transit with TLS 1.2 or later.

You may request: a copy of your data, correction of inaccurate data, or deletion of your account.

Email privacy@hewer.app with the subject "Privacy request" — we respond within 14 days. If your information was collected by a Tenant (the company you work for or do business with), that Tenant controls it, and we will pass your request to them and help them respond.

• We keep a Tenant's data while its account is active, so it can keep its customer and job history.
• When a Tenant closes its account, we delete its data within 90 days after a 30-day export window, and copies in our backups expire within 12 weeks after that.
• We keep records of text-message consent and opt-outs for up to four years, to show that messages were sent with permission, and billing records as long as the law requires.
• For the AI phone assistant, ElevenLabs keeps its copy of a call's recording and transcript for 90 days. The transcript and summary stay in the Tenant's call records like any other call.
• Push tokens are discarded when the device deregisters.

Hewer is a business tool, not directed at children. Accounts are provisioned only for adult employees, contractors, and clients of our Tenants.

We post each version of this policy here with the date it was last updated. For a material change, we will tell Tenant account owners by email or in the app before it takes effect.

Hewer Tenants operate their own SMS programs to send their clients transactional and customer-service messages — appointment confirmations, estimate and invoice links, payment reminders, scheduling updates, project status notifications, and post-project follow-ups. Hewer provides the underlying infrastructure (via Twilio); the messages originate from the Tenant's registered business number.

Opt-in. You consent to receive SMS from a Tenant when you (a) submit a contact form on their website and check the SMS-consent checkbox; (b) text their published keyword to their business number; (c) provide your phone number to them in person or by phone with verbal consent; or (d) message them first on Instagram or another channel and ask them to text you.

No sharing. Neither Hewer nor its Tenants sell, rent, share, or otherwise disclose your mobile phone number or SMS opt-in information to any third party for their marketing purposes. Phone numbers are used solely to communicate with you about your project and are processed through Twilio for delivery.

Frequency. Message frequency varies based on your active projects. A typical client receives 1–20 messages over the course of a project.

Carrier rates. Standard message and data rates may apply, depending on your mobile plan.

HELP. Reply HELP to any SMS to receive support contact details, or email privacy@hewer.app.

STOP. Reply STOP to any SMS to unsubscribe at any time. You will receive a single confirmation message and then no further SMS from that sender unless you re-opt-in.

Texts from Hewer itself. Hewer LLC also runs its own support line. If you text it — the number is on our contact page — you agree to receive replies from Hewer about your question. We only text people who texted us first, never for marketing, and the same rules apply: message frequency varies, message and data rates may apply, reply HELP for help and STOP to opt out. We do not sell, rent or share your number or your opt-in with anyone for their marketing.

Hewer Trade Toolkit is a free, separate app of layout and material calculators. It has no account and no login, and it does not connect to any company's Hewer data.

• Your projects stay on your phone. Layouts, drawings and exported PDFs are stored on the device and are never sent to us.
• Anonymous usage counts. The app sends events such as “app installed”, “tool opened” or “PDF exported”, with the trade and tool involved, a random install identifier made by the app, the platform and the app version. They contain no name, email, contact, location or project content, are not linked to you, and are used only to count how the app is used.
• Request a tool. If you use this optional form, we receive what you asked for, your trade, and, only if you enter them, your name and email. We use these to decide which tools to build and, if you left an email, to tell you when your tool is ready.
• No advertising, no tracking across other apps or websites, and no third-party analytics or advertising SDKs. We never sell this data. To have a tool request removed, email privacy@hewer.app.

Hewer LLC · 11215 Saint Johns Industrial Pkwy N, Unit 13, Jacksonville, FL 32246 · privacy@hewer.app