Your data, your clients' data, and deletion
Who controls what, which outside services see which data, what the AI is and is not given, what you can download, and the plain fact that nothing is deleted on a schedule — including your account.
Per ora questo articolo è disponibile in inglese, francese e spagnolo. Stai leggendo la versione inglese. Français · Español
Two kinds of data live in your FieldQuo account. Your company's data — your staff accounts, your plan, your card — is FieldQuo's to look after. Your clients' data — their names, addresses, quotes, photos, calls — is yours: you are the data controller and FieldQuo is your processor, which is why a homeowner who wants their data changed or removed is asked to come to you first.
This article is the honest state of that, read from the code and from FieldQuo's own privacy page: which outside services receive what, what the AI is given, what you can take out, and what deletion means today — a request handled by a person, not a button.
Overview
- Where it lives. One Postgres database hosted by Neon, the product hosted on Vercel, photos and documents stored with Cloudinary, in a folder per company. Encryption in transit everywhere, and at rest through those providers. FieldQuo makes no claim about which country data is stored in, because nothing in the product pins one.
- Who at FieldQuo can see it. Support looks at a customer's account through a read-only, logged, 30-minute session that can view everything and change nothing. The one exception is the paid migration service, which creates new records you asked for and never edits existing ones; see The data migration service.
- Never sold, never shared between companies. FieldQuo AI answers about your data only, and the anonymised pricing benchmark is opt-in, pooled from other opted-in companies, published only once at least five quotes stand behind a figure, and never shows one company's prices.
Which services see which data
FieldQuo's privacy page lists every outside service the product is wired to, and the build fails if the list stops matching the code. This is that list, in the words that matter to a contractor.
One thing is deliberately NOT on it: a web-analytics service. FieldQuo counts which of its own pages are opened by itself, without a tracking cookie, an advertising pixel or a stored IP address — it records the page's route, never which quote or client was on it.
| Service | What it receives |
|---|---|
| Stripe | A client's card or bank details when they pay you — typed on Stripe's page, never stored by FieldQuo — and, separately, your own card for your subscription. See Stripe. |
| Resend | Every email sent on your behalf: the recipient and its full content. See Email delivery. |
| Twilio and Retell | A client's phone number and the text of a reminder; for the receptionist, the live audio, recording and transcript of each call. See Phone numbers and texts. |
| Cloudinary | Every photo and document uploaded, including a homeowner's photos on a quote request. See Photos and files. |
| OpenAI | Property photos for a quote review, call transcripts for a draft or the monthly digest, and — for FieldQuo AI — a client's name only, never their contact details, address or financial history. |
| Google Maps and Solar | An address as typed, and a job's coordinates. See Google Maps and Google Solar. |
| Meta | Your ad account's access token, and in return your own spend and campaign figures. No client data goes to Meta. See Facebook and Instagram. |
| Unsplash | Nothing from FieldQuo — but a visitor to a site with stock photos fetches them from Unsplash directly. See Stock photos on your website. |
The AI never receives your database. It is handed a list of lookups, chooses one, and gets back a small set of numbers already computed by FieldQuo; the company is fixed in code, so no question can reach another company's data, and a person whose access hides prices gets no money lookups at all. See FieldQuo AI.
What your clients can do, and what they cannot
A client's portal shows their quotes and invoices with you and lets them pay; it is not a data-access tool. A client can unsubscribe from marketing email in one click — the record is kept permanently, on purpose — and reply STOP to a text. Nothing lets a homeowner see, correct, export or delete their own information by themselves; they ask you, and you act in FieldQuo or forward the request to FieldQuo. See Client consent and unsubscribes.
What you can take out
- Documents, one at a time — each quote and invoice as a PDF, each payslip, and a job's photo report.
- Nothing in bulk. FieldQuo takes lists in but does not send them out as files: there is no export of clients, jobs, leads, invoices, payments, expenses, the price book, timesheets, pay runs or photos, and no “download everything”.
Before asking for an account deletion, save the PDFs you want; deletion is not reversible and FieldQuo keeps no copy for you afterwards.
Deleting, in the product and by request
In the product, a quote, a job, an invoice or an expense can be deleted from its own screen by someone whose access allows it — the Manager level and above. A client record has no delete button today. Disconnecting Meta Ads deletes the stored token at once; imported spend stays. Photos and documents are never removed from storage by any screen; see Photos and files.
Nothing expires on a schedule. Cancelling your plan deletes nothing: the account is read-only for 30 days and then locked, and starting the plan again brings everything back, exactly as the cancel screen says — Nothing is deleted. Your quotes, clients, jobs, invoices and photos stay exactly as they are. See Cancel your subscription and Closing your account.
- To have data deleted — one client's, or the whole account — send a request from the account owner's email address to FieldQuo's support address, or use the deletion form on FieldQuo's own website. FieldQuo confirms who you are first.
- You receive a reference code and a confirmation email. Deletion is done by hand by FieldQuo's owner within 30 business days; the reference lets you check its status on the same page.
- A completion email closes it. Unsubscribe and STOP records, financial and tax records, and the record of the request itself are kept, by design.
If a homeowner removes FieldQuo from their Facebook settings, Meta sends FieldQuo a deletion request the same way, with a reference code they can check. See How to get help for the support address.
Who can act on this
Cancelling the plan and requesting a migration are for the owner and administrators. A deletion request for the whole account must come from the owner's address.
Domande frequenti
Is my clients' data used to train an AI?
FieldQuo's code sends the AI only what the table above lists, and the assistant gets a client's name alone. What the vendor does with a request afterwards is governed by FieldQuo's agreement with it, which the privacy page names; the product itself makes no claim either way.
Can another contractor on FieldQuo see my prices?
No. The How You Compare benchmark is opt-in, published only once at least five quotes stand behind a figure, and never shows one company's prices. FieldQuo AI is bound to your company in code.
If I stop paying, is my data gone?
No. The account goes read-only, then locked; nothing is erased, and paying restores it. Erasing is a separate written request.
Where is the data hosted?
Neon (database), Vercel (the product) and Cloudinary (files). FieldQuo does not claim a particular country, because it has not pinned one.
È stato utile?