Privacy Policy

Information we handle

• Account and contact information. Names, email addresses, account identifiers, roles, active status, and authentication information used to provide and manage access. We also receive information you send when contacting support.
• Customer, Job, and service records. Contact details, service addresses and coordinates, Job descriptions and schedules, assignments, notes, equipment details, activities, invoices, and service documents entered by users or imported through connected services.
• Uploaded content. Photos, videos, and documents, together with associated filenames, captions, descriptions, upload details, and available capture or source metadata. Files or imported media may contain location information or other personal information.
• Document responses and activity. Approvals, declines, signer names and contact details, signatures, comments, timestamps, and associated IP addresses and browser user-agent information when responding to shared documents. Records also identify users who create or change application data.

Location and photo-library access

With your permission, the iOS app obtains a foreground device location and sends latitude and longitude to nexCROO to order nearby Jobs. This feature takes a location fix when the Jobs screen loads; it does not run a background location-tracking service. If location access is unavailable, you can still browse and search Jobs.

When you choose location-assisted photo discovery, the app requests Photos access and compares photo locations and dates on your device with the selected Job’s saved coordinates. You review the matching photos before uploading. You can also select photos manually. Camera and Photos permissions support taking photos and saving them to your library. Uploaded photos and their associated Job information are stored in nexCROO.

How information is used and shared

We use information to authenticate users, manage Jobs and customer service, store and synchronize work, generate documents and reports, respond to support requests, and maintain application security. Information is available to authorized users according to application access controls. When a Company shares a Document or Invoice, its token and session grant access only to that resource while the Company remains active.

Service providers and connected features

nexCROO uses service providers to operate its features. The information processed depends on the features used and the services configured:

• Supabase provides authentication and database infrastructure; Cloudflare R2 stores files and media; Vercel provides web hosting. Requests to infrastructure providers can include technical information such as IP addresses and request details.
• Google Maps and Places processes address searches and selections for location entry.
• Resend processes recipient addresses, message content, and attachments when Company emails are sent through the platform.
• OpenAI processes selected equipment model-plate images and relevant Job information when AI-assisted extraction is used.

Authentication, local storage, and security

The web app uses authentication cookies to maintain sessions. The iOS app stores session credentials using device secure storage. Pending notes and photo uploads can be stored locally on the device so they can synchronize when a connection is available.

nexCROO uses authenticated requests, active-account and role checks, and controlled media access, including time-limited media URLs. These safeguards help protect information, but no storage or transmission system can guarantee complete security. Protect your device, account credentials, and shared Document or Invoice links.

Data retention and deletion

Account, Job, media, and service records are retained to support ongoing work and business recordkeeping. Retention depends on the record and its use; nexCROO does not apply a single automatic deletion period to all data. Deactivating an account or removing a media link from a Job does not necessarily erase the underlying records or file. Finalized documents and their response history are retained as business records.

To request account or personal-data deletion, contact your Company Administrator. Some information may need to remain for service history, legal or contractual obligations, security, or resolving disputes. Removing the app from your device does not delete information already synchronized to nexCROO.

Your choices and permissions

You can change Location, Camera, and Photos permissions in iOS Settings, including limiting photo access where supported. Revoking a permission stops future access through that permission but does not remove information you already uploaded. You can choose which photos to upload, use manual photo selection, and review pending synchronization in the app.

Contact your account administrator to request access to, correction of, or deletion of your personal information, or to raise a privacy concern.

Contact and policy updates

For privacy questions, contact your Company Administrator. For technical assistance, visit nexCROO Support. We may update this policy as the platform changes; the date above identifies the latest revision.