Privacy Policy

Contract Kraken is scheduling and licence-compliance software for trade contractors. This policy explains what we collect, why, and what we do not do with it.

We serve two kinds of people, and the distinction matters throughout. Contractors are our customers — the businesses that hold an account. Their customers are the homeowners and property managers those contractors serve, whose details reach us only because a contractor entered them.

What we collect

From contractors

• Name, email address and password for each person who signs in
• Company name, address and business details
• Crew records: names, email addresses, employee numbers, pay rates
• Licence and credential details, including licence numbers and expiry dates
• Continuing-education records and supporting documents

About a contractor's customers

• Name, email address, phone number
• Service address, and access notes such as gate codes
• Job history, appointment times, notes and photographs of work
• Invoices, quotes and payment records
• Text messages exchanged with the contractor
• Signatures captured on completion of work

Automatically

• Sign-in times and IP addresses, for security
• An audit record of who changed what, which is kept deliberately: a compliance product has to be able to answer "who changed this licence, when, and from what"

How we use it

To run the service the contractor is paying for: scheduling work, judging whether someone's licence covers a job, sending appointment updates, raising invoices, and taking payment. We also use it to keep accounts secure and to fix problems when something breaks.

We do not sell personal information. We do not share it with anyone for their own marketing, and we do not use a contractor's customer list for our own.

Text messages

Where a contractor has text messaging switched on, we send messages on their behalf about work that customer has requested: appointment confirmations, reminders, notice that a technician is on the way, invoice links, and replies to messages the customer sends.

Mobile numbers are obtained in one of two ways: the customer enters the number on the contractor's online booking form, which discloses that appointment updates will be sent by text, or the customer gives it to the contractor directly while arranging service.

Mobile numbers and text-message consent are never sold, rented or shared with third parties for marketing purposes. Consent is held separately for each contractor: opting out of one company's messages has no effect on another's, and no contractor can see or use another's list.

Reply STOP to any message to opt out. This is honoured immediately and permanently for that contractor. Reply START to resume. Message frequency varies. Message and data rates may apply.

Who we share it with

Only the services needed to operate the product, and only what each needs:

• Microsoft Azure — hosting and file storage, in the United States
• Stripe — subscription billing and card payments. Card details go directly to Stripe and never reach our servers
• Resend — sending email
• Telnyx — sending and receiving text messages, where a contractor has enabled them
• Azure OpenAI and Anthropic — the assistant that drafts notes and quotes. Content sent for drafting is not used to train their models
• OpenStreetMap Nominatim — turning a service address into map coordinates

We also disclose information where the law requires it, or to protect someone's safety.

Keeping it separate

Every record belongs to exactly one contractor's account and is scoped to it at the database level. The scope fails closed: a request that cannot establish which account it belongs to returns nothing rather than everything. This is the single most important protection in the product and it is verified by automated tests on every change.

How long we keep it

For as long as the contractor's account is open. After an account closes we keep data for 90 days so it can be restored if the closure was a mistake, then delete it.

Two exceptions. Records we must keep for tax or legal reasons — invoices and payment records — are retained as long as the law requires. And text-message opt-outs are kept indefinitely, because forgetting that somebody asked not to be texted would mean texting them again.

Your choices

• Text messages: reply STOP to any message
• Email: use the unsubscribe link, or write to us
• Access, correction or deletion: contractors can do this in the app. If you are a contractor's customer, contact the contractor you dealt with — the information is theirs, and we hold it on their behalf. Write to us if you cannot reach them and we will help

Residents of California, Virginia, Colorado, Connecticut and Utah have additional rights over their personal information, including the right to know what is held and to have it deleted. We honour these requests regardless of where you live. We do not sell personal information and we do not share it for cross-context behavioural advertising.

Security

Traffic is encrypted in transit. Passwords are stored hashed and cannot be read by us or recovered. Access to production data is limited to people who need it. No system is perfectly secure, and we will tell affected accounts promptly if something goes wrong.

Children

Contract Kraken is a tool for businesses and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes

We will update the date at the top when this changes, and tell account holders by email if the change is significant.

Contact

Contract Kraken
admin@contractkraken.com
(910) 316-7887
Monday to Friday, 8am–5pm Eastern