This explains what information DuctWright ("we") collects when you use DuctWright,
what we do with it, and who we share it with. We don't sell personal information.
Information we collect
- Your account: your name, email address, shop name, and a hashed
(scrambled, not readable) password. We also record the network (IP) address you signed up
from.
- Your business data: what you enter, including your customers' names,
phone numbers, email and street addresses, equipment records, photos of equipment, quotes,
invoices, jobs and maintenance agreements. For this information, you decide what to collect and we act on
your behalf.
- Billing: Stripe handles your card. We keep only the Stripe customer and
subscription IDs and your plan, never your card number.
- Security records: login attempts (email and IP address), kept briefly, to
block password guessing and abuse.
- Cookies: one cookie that keeps you logged in. We don't use advertising
or analytics cookies inside the app. Our public website (the marketing pages, Terms,
Privacy and Help) uses Google Analytics, which sets cookies and records how visitors use
those pages, such as pages viewed and approximate location. You can block it with your
browser settings or an extension.
How we use it
To run the service, bill you, send account emails (like password resets), protect against
abuse, fix problems and answer your questions. We don't use your customers' information for our
own marketing.
Who we share it with
Only the companies that help us run DuctWright, and only what they need:
- Cloudflare — hosting, the database and photo storage.
- Google Analytics — usage statistics for our public website only. It is
not used inside the app or on your customers' quote and invoice links.
- Stripe — subscription billing.
- Postmark — account emails and emails you send to your customers.
- Mapbox — turns a job address into a map location when you use route
features.
- Twilio and QuickBooks — only if you connect them. Data goes to your own
accounts there, using the credentials you provide. We store those credentials
encrypted.
We may also disclose information if the law requires it, or to protect the safety and rights
of others.
Your customers' information
Your customers' details are yours. You are responsible for having the right to store them
and for how you use them. If one of your customers asks us about their information, we'll
direct them to you.
Keeping it safe
Connections use HTTPS. Passwords are hashed. Connected-service credentials are encrypted.
Every shop's data is kept separate from other shops'. No system is perfectly secure, so we
can't promise absolute security.
How long we keep it
Photos stay until you delete them. We keep your information while your account is active and for a reasonable time afterward.
You can ask us to export or delete it at support@ductwright.com.
Your choices
You can ask to see, correct, export or delete the personal information we hold about you by
contacting support@ductwright.com. Depending on where you live, you may have additional legal rights, and we
will honor them.
Children
DuctWright is for businesses and isn't meant for anyone under 18.
Changes
If we change this policy in a significant way, we'll let you know before it takes effect.
Contact
Privacy questions: support@ductwright.com.