Privacy Policy

1. Information We Collect

• Account information. When you create an account, we collect your email address and password (handled securely by our authentication provider — we never see or store your password in plain text).
• Payment and billing information. If you subscribe to a paid plan, your payment details (such as your card information and billing address) are collected and processed directly by Stripe, our payment processor — we never see or store your full card number.
• Business information you provide. Your company name, logo, and any data you enter to operate your business through Thickit — customers, properties, jobs, estimates, invoices, payments, equipment, expenses, and similar records.
• Your customers' information. If you use Thickit to manage your own customers, you may enter their names, addresses, contact details, and other information necessary to run your business (for example, gate codes or pet notes for a service visit). If you enable the optional Customer Form, a prospective customer's name, contact details, address, and message are submitted directly by them rather than typed in by you, and are stored the same way as any other customer record. You are responsible for having the right to collect and store that information about your own customers, and for complying with any laws that apply to you as their data controller. We act as a processor of that data on your behalf.
• Uploaded files. Photos and logos you upload are stored with our cloud storage provider.
• Support messages. If you message us through the in-app Support page, we keep your message, your email, and your company name so we can respond and keep a record of the conversation.
• Technical and diagnostic data. If the app encounters an error, we may automatically log the error message, a technical stack trace, the page URL, and your browser's user agent string, so we can find and fix problems. This is never used for marketing or shared with third parties.

2. How We Use Information

To provide, operate, and maintain the Service; to authenticate your account and keep your data isolated from other accounts; to diagnose and fix bugs; to communicate with you about your account; to comply with legal obligations. We do not sell your information, or your customers' information, to anyone.

3. Administrative Access

Authorized Thickit personnel may access your account to provide support, troubleshoot issues, investigate suspected abuse, or maintain the security of the Service. All such access is logged.

4. Where Your Data Lives

We use reputable third-party service providers to host our application, store data, and provide authentication and security services. These providers act as sub-processors and may store or process data in multiple regions. A list of our current sub-processors is available upon request.

Property addresses you enter may be sent to mapping and geocoding services (including OpenStreetMap and the U.S. Census Bureau) to locate them on a map and plan routes, and to a weather-data provider to show a forecast for that location. If you subscribe to a paid Thickit plan, Stripe processes your payment details directly as described in Section 1 above. Separately, if you connect a Stripe account to accept online payments from your own customers, your business contact information is shared directly with Stripe as part of that setup. If you choose to email an estimate or receipt to a customer directly from the app, that customer's email address and the estimate/receipt details are sent to our email delivery provider, Resend, solely to send that one message.

We use AI-assisted development tools (including Anthropic's Claude) to help build, maintain, and troubleshoot the Service. These tools may have visibility into application code, system architecture, and — in limited troubleshooting scenarios — account or customer data, in order to diagnose and fix technical issues. We take reasonable steps to limit this access and to avoid exposing identifying customer information unless necessary to resolve a specific issue.

5. Data Retention

We retain your account data for as long as your account is active. Diagnostic error logs are automatically deleted after 30 days. If you'd like your account and its data deleted, contact us through the Support page in the app and we will delete it, except where required to retain records by law.

6. Your Rights

Pro accounts can export their own data at any time using the built-in export tools — a full copy of your data from the sidebar's "Export Data," a .vcf file of your customer contacts from "Export Contacts," or CSV exports within Reports — or by requesting a copy through the Support page. This export right is a Pro plan feature. Regardless of your plan, you can request correction or deletion of your data at any time by contacting us through the Support page in the app.

We may decline a request under this section if we're unable to reasonably verify that you're the account holder, or if the account was terminated for violating our Terms of Service.

7. Children's Privacy

Thickit is a business tool, not directed at or intended for use by children. We do not knowingly collect information from anyone under 16.

8. Changes to This Policy

If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

9. Contact Us

Questions about this policy: if you already have an account, reach us through the Support page in the app (Settings → Support). If you don't have an account yet, use our contact form.