Privacy Policy

1 What we collect

• Account data: name, email, mobile number, language preference, profile photo, business details.
• Operational data you enter: properties, leases, tenant records, maintenance requests, jobs, bids, invoices, documents, and photos.
• Things you post or send: marketplace listings and offers, questions and answers, reviews, business-page text, messages to other members, and photos added to a worksite. See “Conduct, and content you post” in the Terms.
• Location, only for work tracking: if you are on a contractor’s crew and turn on Work tracking in the app, your phone reports its position. What we keep is described in the next section; nothing is collected while the switch is off.
• Photos and camera: photos you take or choose in the app to attach to a job, a worksite, a receipt, or a document. We never read your photo library beyond what you pick.
• Voice notes: if you describe a job by voice, the recording is sent to a transcription provider and the text becomes your note; the audio is not kept.
• Assistant conversations: what you type to Mikey, our in-app assistant, and a snapshot of your account context (role, plan, counts of jobs or units) so it can answer accurately.
• Device and notifications: a push-notification token for each device you allow notifications on, device type and app version, and error reports.
• Payment data: handled by Stripe. We store references (customer and transaction identifiers, amounts, statuses), never card or bank numbers.
• Verification data: license numbers checked against public state registers (e.g. Oregon CCB), insurance certificates you upload, and, when you verify your identity to claim a listing, the result Stripe Identity returns to us. Stripe processes the government ID and selfie; we do not receive or store the images.
• Usage data: page views, feature events, sign-in history, device and browser type, and error reports, used to operate and improve the service.

2 Location and work tracking

Work tracking is a feature for contractors and the people on their crew. It exists so a crew member can show, and a contractor can see, who was on which worksite and for how long. It is the only feature that uses location in the background, and the only one that shares your location with anyone else. Latchkey also uses location in the foreground, only while you are using the app and only when you ask it to, to show jobs and pros near you, to set the area a business covers, and to check in at a job. Work tracking works like this:

• You control it. Tracking runs only while the crew member has turned Work tracking on in the app. The same screen turns it off. Nobody can turn it on for you, and the screen tells you which business receives the information.
• Only on a worksite or nearby. The app watches the worksites your contractor assigned you to. When you enter one, it records your arrival and, about once a minute, confirms you are still there. When you leave, it records your departure and stops. Where you are away from those worksites is not recorded — not stored, not shown to anyone.
• In the background. So that you do not have to keep the app open while you work, iOS lets it keep reporting with the app closed. iOS shows its location indicator while this is happening.
• What the contractor sees. Whether you are on one of their worksites or nearby, which one, since when, and your time on site for the day. They can also open a map showing your last reported position and how far it is from the worksite — but only while that position is on or near one of their sites. Away from every worksite no position is kept at all, so there is nothing for the map to show and no trail of where you went.
• What we keep. Arrival and departure times are kept with the job records. Individual location reports are kept for 90 days and then deleted. Turning tracking off or deleting your account stops everything immediately.

We do not sell location data and we do not use it for advertising.

3 How we use it

To run the product you signed up for: creating and signing leases, collecting rent, matching jobs with contractors, sending the notifications you would expect (a lease to sign, a bid received, rent due), verifying licenses, preventing abuse, and support. We do not sell personal data, and we do not use your data for third-party advertising.

4 AI features

Some features send the relevant text or images to an AI provider to produce a result for you: job scoping and estimates, website copywriting, document analysis, and Mikey, the in-app assistant (your question plus a snapshot of your account context). Voice notes are transcribed by a speech-to-text provider. Our providers process this under their API terms, which prohibit using it to train their models. We do not use it to build advertising profiles.

5 Who we share with

Service providers who run parts of the platform under contract:

• Supabase (database, authentication, file storage)
• Stripe (payments, billing, payouts) and Stripe Identity (identity verification for listing claims)
• Vercel (hosting and privacy-respecting site analytics)
• Resend (email delivery)
• Twilio (text-message delivery: sign-in codes, and notifications you opt in to)
• Apple (push notifications to the iOS app, through Apple Push Notification service)
• DocuSeal (electronic signing infrastructure)
• Anthropic (AI features and the Mikey assistant) and OpenAI (voice-note transcription)
• Google / Microsoft (optional sign-in providers you choose, on the website)
• Meta (an advertising measurement pixel on our public marketing pages only — never inside the app or any signed-in area)

Within the product, data is visible according to role: your organization’s members see your organization’s data; tenants see their own rental; a contractor sees the on-site status of their own crew; public marketplace content is public. We disclose data if legally required. We do not sell personal data.

6 Retention and deletion

We keep data while your account is active and as needed for legal and financial records. Signed agreements, payment and invoice records, and audit history have their own retention requirements and are kept with an anonymous identifier once you leave.

Deleting your account takes one step in the app or on the website: open the account menu and choose Delete my account. Your sign-in, name, email, phone, photo and profile text are removed immediately everywhere in Latchkey, push notifications stop, and any work tracking stops. Records the law or the other party requires us to keep stay without your name on them. You can also email hello@latchkey-app.com to request export or deletion and we will act within 30 days.

7 Your choices

You can edit your profile, control your business page’s visibility, and manage payment methods through the billing portal. In the iOS app, the Track screen turns work tracking on and off, and iOS Settings control location, camera, photos, microphone and notifications for Latchkey; Face ID unlock is optional and is checked by your phone, not by us. Transactional emails (leases, payments, security alerts) are part of the service; you can contact us to review anything else.

8 Text messaging (SMS)

If you opt in to text messages, we collect your mobile number to send them through a messaging provider (currently Twilio). Depending on the features you use, texts may include: account and service notifications (for example a new job lead that matches your stated availability, a job award, a payment or payout update, a new message, or a lease ready to sign), reminders (such as rent due or an upcoming appointment), and security or verification codes. SMS is never required to use Latchkey.

How you opt in (express consent). Text messaging is OFF by default. To turn it on, a signed-in member enters their own mobile number and must check a consent box, unchecked by default, that reads word for word: “I agree to receive recurring automated lead and account text messages from Latchkey at this number. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help. Consent is not a condition of using Latchkey.” The number is enrolled only after that box is checked and saved. Opt-in is collected only through this web form - inside the member’s account, or on our public sign-up page at https://latchkey-app.com/sms, which shows the same consent - and is never collected by text message; Latchkey never buys phone numbers or collects consent on anyone’s behalf. SMS consent is not required to use Latchkey and is not a condition of any purchase.

Message frequency and rates. Message frequency varies by the features you use. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help; you can also turn texts off in your account settings at any time.

Your mobile opt-in information is never shared. Latchkey does not sell or rent your personal information. We do not share your mobile opt-in information - your phone number, or the fact that you consented to receive texts - with any third party or affiliate, and mobile opt-in information is never shared with anyone for their own marketing or promotional purposes. Twilio delivers the messages as our service provider only.

9 The iOS app and device permissions

Latchkey Pro for iPhone is the same product as the website, built as an app. It asks iOS for a permission only when you first use the feature that needs it:

• Location — only when a crew member turns on Work tracking (see above).
• Camera and photo library — when you attach a photo to a job, worksite, receipt or document.
• Microphone — when you record video of work.
• Notifications — when you choose to be told about a job award, a payment, a message or a lease to sign.
• Face ID — if you turn on unlock with Face ID. The check happens on your phone; we receive only pass or fail.

The app does not sell anything and contains no advertising. Nothing in the app tracks you across other companies’ apps or websites.

10 Security

Data is encrypted in transit, access is scoped by row-level security in the database, operator access requires hardware-backed two-factor authentication, and every administrative change is logged to an append-only audit trail.

11 Contact

Privacy questions or requests: hello@latchkey-app.com (Latchkey, Portland, Oregon).