JAX Privacy Policy

Effective date: August 10, 2026

This Privacy Policy explains how Jacks of All Co. ("JAX," "we," "us") collects, uses, and shares information when you use the JAX mobile application, website, and related services (the "Platform"). By using the Platform, you agree to this Policy.

1. Information We Collect

Account information. When you create an account we collect your name, email address, and phone number, and credentials are managed by our authentication provider, Clerk. Providers additionally submit a display name, trade, years of experience, and a profile photo.

Property and address information. Homeowners provide property addresses and details about their home (systems, appliances, documents such as manuals or warranties). Providers provide a business or home-base address and service radius. We convert addresses to geographic coordinates to match jobs with nearby Providers.

Home inspection reports. Homeowners may optionally upload a home inspection report (PDF) to set up their maintenance plan. Reports are stored privately with your property documents, and we use an automated analysis service (OpenAI) to extract the report's findings into suggested maintenance tasks, along with basic home details it mentions (such as year built and appliances). Extracted findings become task descriptions that a Provider will see if you choose to book that work; the report itself is never shared with Providers. OpenAI processes the report only to provide this analysis and does not use it to train its models.

Job information. Job descriptions, selected time windows, before-and-after job photos, timelines, ratings, and reviews.

Verification documents. Providers may upload trade licenses and proof of insurance. These are stored privately and reviewed by JAX staff for approval purposes.

Payment information. Payments are processed by Stripe. Your full card number never touches JAX's servers; we store only a reference to your Stripe customer along with the card brand and last four digits for display. Providers onboard to Stripe Connect, and Stripe collects identity and banking information directly under its own privacy policy.

Location information. With your permission, we use your device's location to geocode addresses you type by hand. Address search suggestions are provided through a proxy to Mapbox. We do not track your location in the background.

Device and usage information. Push notification tokens (so we can send booking updates), and diagnostic information — crashes and errors are reported to Sentry with your account identifier attached, but without your name, email, or message content.

2. How We Use Information

• Operate the marketplace: match jobs to nearby, qualified Providers; schedule bookings; process payments and payouts.
• Show relevant information between users (see Section 3).
• Verify and approve Provider applications.
• Send transactional notifications about your jobs (requests, acceptances, starts, completions, payments).
• Maintain safety and quality: reviews, job photos, and dispute investigation.
• Fix bugs and improve reliability (diagnostics).
• Comply with legal obligations (e.g., tax reporting for Provider payouts).

We do not sell your personal information, use it for third-party advertising, or track you across other companies' apps and websites.

3. What Other Users See

• Before booking: Homeowners choosing times see matching Providers' display name, profile photo, rating, review history, and completed-job count. Providers see a job's description and the Homeowner's general area (city/ZIP and distance) — never the street address.
• After a booking is accepted: the Provider sees the property address, and the Homeowner sees the confirmed Provider's details. Names and photos are shared between the two parties to a job.
• Reviews: your first name and last initial appear with reviews you leave.
• Providers' street addresses are never shown to Homeowners.

4. How We Share Information

We share information only as needed to run the Platform:

• Between users, as described in Section 3.
• Service providers / processors: Supabase (database, file storage, and backend hosting), Clerk (authentication), Stripe (payments, payouts, and identity verification for Providers), Mapbox (address autocomplete), Expo (push-notification delivery), Sentry (error diagnostics), and OpenAI (automated analysis of home inspection reports you choose to upload). Each processes data only to provide its service to us.
• Legal: when required by law, subpoena, or to protect the rights, safety, or property of JAX, our users, or the public.
• Business transfers: if JAX is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction; this Policy would continue to apply.

5. Data Retention

We keep your information while your account is active. Records of completed transactions, payouts, reviews, and communications may be retained after account deletion where required for tax, accounting, dispute-resolution, or legal purposes, then deleted or de-identified.

6. Your Choices and Rights

• Access and update: you can view and edit your profile, properties, and account details in the app.
• Delete your account: available in the app [Settings → Delete account] or by emailing dev@jacksofallstl.com. Deletion removes your personal information except records we must retain (Section 5).
• Push notifications and location: controlled in your device settings.
• State privacy rights: depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to appeal a decision. To exercise them, contact dev@jacksofallstl.com. We do not discriminate against you for exercising your rights.

7. Security

We use industry-standard safeguards: encrypted connections (TLS), row-level access controls on our database so users can only read their own records, private photo and document storage with signed, expiring access links, and payment handling delegated to Stripe (a PCI-DSS Level 1 provider). No system is perfectly secure; please use a strong, unique password.

8. Children

The Platform is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, contact dev@jacksofallstl.com and we will delete it.

9. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the app or by email before they take effect. The "Effective date" above reflects the latest revision.

10. Contact Us

Jacks of All Co. 117 S. Lexington Street, Ste. 100, Harrisonville, MO 64701 dev@jacksofallstl.com