Privacy

Last updated: October 2026

This policy explains what information Shop ("we", "us") collects when you use Shop, why we collect it, and the choices you have.

Who is responsible

Shop runs Shop and is responsible for the personal information described here. Your organisation (the company that invited you or signed up) decides what work information it keeps in Shop; for that information we act on its behalf.

If you are a customer of a business that uses Shop

Businesses (for example a repair shop) use Shop to send you estimates, ask for your approval, take payments, book visits and keep you updated. The business decides what it keeps about you and is responsible for it; we store and process it on the business's behalf, only to run those pages and messages for it. That information is your name and contact details, your vehicle or equipment, the work, photos and inspection notes the business shares with you, your approvals and signature, the address and time you signed from (to show it was you), and payments. Card details go straight to the payment processor; we never see or store your card number. To see, correct or delete this information, ask the business first; you can also write to us through your account administrator. Text messages: reply STOP to stop them.

What we collect

• Account details: your name, email address, phone number, a securely hashed password (we never store the password itself), and, if you use Google or Microsoft to sign in, the identifier those services give us.
• Work information your organisation adds: the records, files, comments, contacts, messages and other information your organisation enters, connects or uploads.
• Sign-up details: when you create an organisation, its name and type of business and your phone number, which we use to review the sign-up and to contact you about it.
• Connected accounts: if you connect a Google or Microsoft account (for example a mailbox), we read and store only what the features you turn on need. Access tokens are stored encrypted. You can disconnect it at any time.
• Usage and security information: sign-in times, IP address, browser type and actions taken in the app, kept to protect accounts and to help with support.

How we use it

• To provide Shop: sign you in, show your organisation's work, send the notifications you choose.
• To review new organisations before they get access, and to contact you about your sign-up or account.
• To send the emails and text messages your organisation sends through Shop (for example shipment or job updates to its customers). Message and data rates may apply; reply STOP to stop text messages.
• To keep the service secure: detect unusual sign-ins, prevent abuse, and keep audit records.
• To support you when you ask for help.
• To bill your organisation for its plan.

We do not sell personal information, and we do not use your organisation's work data to advertise to you.

AI features

Shop AI features (for example reading a document or drafting a reply) are provided by us using AI models from trusted providers or running on our own servers. When your organisation uses them, only the text or file needed for that request is sent to the model, only to produce that answer. Providers we use may not use your data to train their models. AI results are drafts that a person reviews.

Service providers

We use trusted providers to run Shop, such as cloud hosting, backups and file storage, email and text message delivery, maps and address lookup, payment processing and tax calculation, and AI models. They may only use the information to provide their service to us.

Where information is kept, and for how long

We keep backups so information can be restored after a mistake or failure; backups are deleted on a rolling schedule. Information may be stored and processed in Canada, the United States or other countries where our providers operate. We keep it while your organisation's account is active. When an organisation closes its account, its data is deleted within 90 days, except where the law requires us to keep records longer (for example invoices).

Your choices and rights

You can see and update your profile in the app. You can ask us for a copy of your personal information, or ask us to correct or delete it, by writing to us through your account administrator. For work information that belongs to your organisation, we may refer your request to your organisation's administrator.

Security

Every organisation's data is kept separate, connections are encrypted, passwords are hashed, and stored secrets are encrypted. No system is perfectly secure, so please use a strong, unique password.

Changes

If we change this policy in a way that matters, we will let you know in the app or by email before the change takes effect.

Contact

Questions about privacy: us through your account administrator.