Privacy Policy

Earthmover ("Earthmover", "we") provides field-operations software for excavating contractors. This policy explains what we collect, why, and what your choices are.

Two roles matter. For your account (name, email, login) and for visitors to our website, we are the data controller. For the operational records your employer or organization enters into the Service — including records about you as a worker — your organization is the controller and we process that data on its instructions. Questions about how your employer uses the Service should go to your employer first; we will assist them.

Account information. Name, email address, and the organization you belong to, collected when you sign up or accept an invitation. Sign-in is handled by Clerk.

Records your organization enters. Projects, bids, schedules, time entries, daily reports and photos, equipment and maintenance records, documents, and safety records. For workers, this can include employee records your employer maintains in the Service: job title, pay rate or salary, wage classification, date of birth, emergency contact, driver's license (CDL) and medical-card expiry dates, time off, and performance notes. Your employer decides which of these it uses.

Location at clock-in and clock-out. When you clock in or out, the app records a single GPS point (and its accuracy) to verify you were at the job site. Location is not tracked continuously or in the background. See section 4.

Technical and usage data. Device type, browser, approximate region, pages viewed, and error reports needed to keep the Service working. Our site analytics are cookieless and do not identify you.

Contact form. Whatever you send us through the contact page, so we can reply.

We use information to:

• Provide, secure, and support the Service for your organization
• Verify clock-in/out locations against job-site geofences
• Calculate hours, labor cost, and job profitability for your organization
• Send invitations, notifications, and service messages (not marketing to workers)
• Keep an audit log of changes to sensitive records
• Diagnose errors and improve the product using aggregate, de-identified usage
• Comply with law and enforce our Terms

Earthmover collects a GPS point only at the moment a worker clocks in or clocks out. Depending on how your organization configures a project, a clock-in outside the job-site geofence may be blocked, flagged for review, or simply noted. Location points are visible to your organization's administrators and to the worker on their own time entries.

Your employer is responsible for telling you that it records location at clock-in/out and for obtaining any consent your state requires. Where the app has permission to use location in the background for travel-time features, that permission is not used to track you continuously.

We do not sell personal information and we do not share it with advertisers. We share data only with providers that help us run the Service, under contracts that restrict them to our instructions:

• Clerk — authentication, user accounts, and organization membership
• Convex — application database, file storage, and backend hosting
• Vercel — web hosting and cookieless site analytics
• Resend — transactional email delivery (invites, notifications)
• Anthropic — optional AI features — only the data you choose to analyze is sent
• Sentry — error monitoring — error reports include the account email and device details
• Open-Meteo — weather autofill on daily reports — receives job-site coordinates
• OpenStreetMap / Nominatim — turning job-site addresses into map coordinates

When paid subscriptions launch, payment details will be collected and processed by Stripe; we will not store full card numbers. We may also disclose information when required by law, to protect the rights and safety of users, or as part of a merger or acquisition (with notice).

Data is encrypted in transit (TLS) and encrypted at rest by our infrastructure providers. Access inside your organization is restricted by role — for example, field roles never receive other workers' pay rates or project budgets — and every organization's data is isolated from every other's. Changes to sensitive records are recorded in an immutable audit log. No system is perfectly secure; if we learn of a breach affecting your data we will notify affected organizations without undue delay.

We keep data for as long as your organization's account is active. When an organization is closed, its owner may request an export for 30 days; after that window we may delete the data, except where we must retain it by law.

Workers who want records corrected or removed should ask their organization, which controls that data. You can request deletion of your own account information from us at any time; we will act on a verified request within 30 days. Audit-log entries are immutable by design and are retained for the life of the organization.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion
• Receive a copy of your data in a portable format
• Opt out of marketing email (workers never receive marketing from us)

Use the contact page to make a request. If your request concerns records your employer entered, we will route it to your employer as controller and help them respond.

We use only the cookies needed to keep you signed in and to protect against abuse. We do not use advertising or cross-site tracking cookies. Site analytics are provided by Vercel and are cookieless.

The Service is for businesses and their workers and is not directed to children under 16. We do not knowingly collect information from them.

We may update this policy as the product changes. Material changes will be announced to organization owners by email or in the Service before they take effect, and the date at the top will be updated.

Privacy questions or requests: use our contact page.