Privacy Policy

Pruvek is used by organizations (“Organizations”) to schedule and verify work performed by their workers (“Workers”) at their customers’ sites, and by those customers (“Clients”) to view visit history through a client portal. This policy covers all three: the Organization staff who administer an account, the Workers who use the field app, and the Clients who use the client portal.

If you are a Worker or Client, the Organization that invited you is responsible for the accuracy of the information it provides about you and for how it uses the reports and photos Pruvek generates on its behalf. Questions about how a specific Organization uses your data should go to that Organization first.

Account information. Name, email address, password (or Google account identifier if you sign in with Google), organization name, and role.

Visit and work-order data. Site addresses, checklist responses, free-text notes, and timestamps for scheduled work orders and completed visits.

Location data. When a Worker checks in or out of a visit, we collect the GPS coordinates of the device at that moment, so the Organization and its Clients can confirm a visit happened at the scheduled site. We do not track location outside of an active check-in/check-out action.

Photos and media. Photos, video, and files a Worker attaches to a visit, including any metadata (timestamp, location) attached to that file.

Billing information. Organizations that pay for Pruvek provide billing details through our payment processor, Stripe. We receive limited billing metadata (such as subscription status and seat count) but do not receive or store full payment card numbers ourselves.

Usage and device data. Standard technical data such as IP address, browser type, device type, and pages visited, collected automatically via cookies and similar technologies (including Google Tag Manager).

We use the information above to:

• Operate the Service — scheduling, check-ins, checklists, and reports
• Generate visit history and proof-of-service reports for Clients
• Send transactional notifications (visit completion, flagged issues, missed visits)
• Process subscription billing and seat changes
• Maintain the security of accounts and investigate misuse
• Improve and troubleshoot the Service
• Meet legal and contractual obligations

We do not sell personal information, and we do not use Worker location or photo data for advertising.

Within an Organization. Visit data, photos, and location data collected by a Worker are visible to the Organization that employs them and to the Client the visit was performed for, as part of normal Service operation.

Service providers. We use third-party providers to operate Pruvek, including Supabase (authentication and database hosting), Stripe (payment processing), Postmark (transactional email delivery), and Google (sign-in and tag/analytics infrastructure). These providers process data on our behalf and are contractually limited in how they may use it.

Legal. We may disclose information if required by law, or to protect the rights, safety, or property of Pruvek, our users, or others.

Business transfers. If Pruvek is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

We retain visit records, checklist responses, and photos for as long as the Organization’s account is active, since they serve as the Organization’s proof-of-service history. If an Organization’s account is closed, we retain data for 6 months before deletion, unless a longer period is required by law or requested by the Organization for compliance/insurance purposes.

You can request access to, correction of, or deletion of your personal information by emailing joe@pruvek.com with your name and the Organization you’re associated with. Because Worker and Client accounts belong to an Organization, we may need to verify the request with that Organization before acting on it. We aim to respond to verifiable requests within 45 days.

California residents (CCPA/CPRA). You have the right to know what personal information we’ve collected about you, request deletion of it, and correct inaccuracies. We do not sell or share personal information for cross-context behavioral advertising, so there is no “opt out of sale/share” action to take. To exercise these rights, email joe@pruvek.com — we may ask for information to verify your identity before acting on the request.

EEA/UK residents (GDPR). We process Organization staff and Worker account data to perform our contract with the Organization, and Client portal data at the Organization’s direction. You have the right to access, correct, delete, or restrict processing of your data, and to lodge a complaint with your local data protection supervisory authority. To exercise these rights, email joe@pruvek.com.

We use industry-standard measures — including encryption in transit, access controls, and authentication via Supabase — to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Pruvek is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify Organization admins directly.

Questions about this Privacy Policy can be sent to joe@pruvek.com.

Joe Royston, LLC — 100 Sunnybrook Dr SW, Grandville, MI 49418