Privacy Policy

1. Who this policy is from

This Privacy Policy explains how TrussPath, LLC ("TrussPath," "we," "us") collects, uses, shares, and protects personal information when you use trusspath.com and our field-service software (the "Service"). If you have questions, email sean@trusspath.com.

2. The three groups of people we handle data about

• Account holders and users. Owners, admins, technicians, and other employees your company invites into a TrussPath workspace.
• Visitors. People who browse trusspath.com without signing up.
• End customers of a shop. Homeowners and businesses that a TrussPath shop enters as customers, sends estimates or invoices to, or receives payments from. If you're one of these people, the shop is the "controller" of your information under many privacy laws — please contact them first. We'll help.

3. Information we collect

You give us

• Account info: name, email, password (stored as a hash), phone number, company name, address, role, and time zone.
• Workspace content: customers, jobs, estimates, invoices, photos, notes, time entries, employee profiles, offers, sick-leave balances, and any other content you or your team put into the Service.
• Payroll data: for W-2 employees a shop chooses to store, this may include full legal name, address, date of hire, pay rate, direct deposit reference, and the last four digits of the SSN. TrussPath does not currently store full SSNs.
• Billing info: your subscription plan, billing address, and payment method reference (Stripe stores card numbers — we don't).
• Support conversations: emails, chats, and screenshots you send us.

We collect automatically

• Device and log info: IP address, browser, operating system, referring URL, timestamps, and pages accessed. We use this to keep the Service secure and diagnose problems.
• Cookies: we use a small number of strictly-necessary cookies to keep you signed in and remember your workspace preference. We do not currently use third-party advertising cookies.

From third parties

• Stripe — payment status, receipts, disputes, and payout metadata.
• Google / OAuth providers — if you sign in with Google, we receive your name, email, and profile picture.

4. How we use information

• Provide, secure, and improve the Service.
• Charge you and process payments.
• Communicate with you — product updates, security alerts, and support responses.
• Send occasional product news, offers, or invitations to try new features. You can opt out any time using the "unsubscribe" link.
• Detect fraud, abuse, and violations of our Terms.
• Comply with legal obligations (tax, subpoenas, court orders).

We do not sell personal information. We do not use the private contents of your workspace (like customer lists or job notes) to train large language models we make available to other TrussPath customers.

5. AI features

Some features may use large language models to help you write estimates, categorize jobs, or draft replies. When you use those features, the specific inputs you provide (like an estimate description) may be sent to our AI provider for processing. Providers may retain those inputs briefly for abuse monitoring, but they are not used to train their public models. If a feature ever changes this, we'll say so in-app before you use it.

6. Who we share information with

We share personal information only with service providers that help us run TrussPath, and only under confidentiality obligations. Current subprocessors include:

• Vercel — application hosting (United States).
• Neon — PostgreSQL database hosting (United States).
• Stripe — payment processing.
• Resend — transactional email delivery.
• Twilio — SMS delivery (where enabled).
• Cloudflare — DNS, CDN, and edge security.
• Anthropic, OpenAI, or similar — AI-feature model inference.

We may also share information: (a) with your consent; (b) with your workspace admin (they can see everything you do inside their workspace); (c) to comply with law or protect rights and safety; or (d) in a merger, acquisition, or asset sale — in which case we'll notify you.

7. How long we keep information

We keep workspace data for as long as your account is active. After you cancel, we'll keep it for at least 30 days so you can export it, then we may delete it. Billing records are kept for at least 7 years to meet tax and accounting requirements. Backups may persist for up to 35 days after deletion.

8. Security

We use HTTPS for all data in transit, encrypt data at rest through our database provider, restrict production database access to named engineers, log administrative actions, and use strong password hashing plus optional multi-factor authentication where supported. No system is perfectly secure — please report vulnerabilities to sean@trusspath.com. See our Security page for more.

9. Your rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct information that's wrong.
• Delete your information (subject to legal exceptions).
• Object to certain processing or ask us to limit it.
• Receive a copy of your data in a portable format.
• Opt out of marketing emails at any time.

To exercise a right, email sean@trusspath.com. If you're an end customer of a TrussPath shop, contact the shop first — they control what information they store about you.

Colorado residents (CPA)

Colorado residents may exercise the rights above and appeal a denial by emailing us. We don't engage in targeted advertising, sell personal information, or profile in ways that produce legal or similarly significant effects.

California residents (CCPA/CPRA)

California residents have similar rights. We haven't sold personal information in the last 12 months. Categories of personal information we've collected are described in Section 3.

10. Children

TrussPath is a business tool and isn't directed to children under 16. We don't knowingly collect information from them. If you believe we have, email us and we'll delete it.

11. International users

TrussPath is hosted in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different privacy laws than your home country.

12. Changes to this policy

We may update this Privacy Policy from time to time. If a change is material we'll notify you by email or in-app. The "Effective" date at the top of this page always shows the current version.

13. Contact

Privacy questions: sean@trusspath.com. TrussPath, LLC — Denver, Colorado.