Privacy Policy

DugIt ("we," "our," or "us") operates an AI-powered operations platform for high-liability trades, including septic, HVAC, and electrical services. This Privacy Policy describes how we collect, use, store, and share your personal information when you use the DugIt web application, mobile application, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, and business information. Authentication is managed through AWS Cognito, and we store a reference to your identity within our systems.

Customer Contact Information

When you create jobs, we collect your customers' names, email addresses, phone numbers, and service addresses to facilitate job scheduling, quoting, and communication.

GPS Location Data

With your permission, we collect precise GPS coordinates when you log evidence at job sites. This data is used to verify technician presence, generate tamper-proof evidence records, and support dispute defense.

Photos and Images

We collect photos you upload of job sites, equipment, and completed work. These images are stored securely and used for evidence documentation, quote generation, and dispute resolution.

Voice Recordings

When you use the voice note feature, we record audio and transcribe it using AI. Voice recordings are used to generate job notes, checklists, and quotation details. Recordings may be retained for a limited period to support dispute defense.

Payment Information

We process payments through Stripe. We do not store your full credit card numbers or bank account details on our servers. Stripe handles payment data in compliance with PCI DSS standards. We retain transaction records (amounts, dates, and payment status) for accounting and dispute purposes.

Device and Usage Data

We automatically collect device identifiers, operating system version, app version, IP address, and usage patterns (pages visited, features used, timestamps) to improve the Service and diagnose issues.

2. How We Use Your Information

• Service delivery: scheduling jobs, generating quotes, processing payments, and facilitating communication between your team and customers.
• Evidence and compliance: creating GPS-verified, timestamped evidence records to protect your business in disputes.
• AI-powered features: transcribing voice notes, validating job evidence, generating quote recommendations, and automating checklists.
• Dispute defense: compiling and presenting evidence packages (photos, GPS data, voice transcripts, timestamps) to support dispute resolution and chargeback defense.
• Business analytics: providing job costing, profit margins, scheduling efficiency, and operational insights through your dashboard.
• Communication: sending appointment reminders, quote notifications, review requests, and service updates.
• Platform improvement: analyzing usage patterns to improve features, fix bugs, and enhance user experience.

3. Third-Party Services

We share data with the following third-party services, each governed by their own privacy policies:

• Amazon Web Services (AWS): cloud hosting, authentication (Cognito), file storage (S3), and database hosting (RDS). Data is stored in AWS data centers in the United States.
• Stripe: payment processing for customer invoices and contractor payouts via Stripe Connect. Stripe is PCI DSS Level 1 compliant.
• OpenAI: voice transcription and AI-powered analysis features. Voice data sent to OpenAI is processed in accordance with OpenAI's data usage policies and is not used to train their models.

We do not sell your personal information to third parties. We may share anonymized, aggregated data for analytics purposes.

4. Data Retention and Deletion

• Account data is retained for as long as your account is active and for 30 days after account deletion.
• Job evidence (photos, GPS logs, voice recordings) is retained for 3 years after job completion to support potential dispute claims and regulatory requirements.
• Payment records are retained for 7 years in accordance with tax and financial reporting obligations.
• Voice recordings are retained for up to 1 year after transcription, after which the original audio files are deleted. Transcripts are retained with the associated job record.
• Usage and device data is retained for up to 2 years.

You may request early deletion of your data by contacting us (see Section 7). Certain data may need to be retained to comply with legal obligations or to defend against claims.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to our retention obligations.
• Data portability: request an export of your data in a machine-readable format.
• Opt-out: withdraw consent for optional data processing, such as marketing communications.

To exercise any of these rights, contact us at support@dugit.com. We will respond within 30 days.

6. Security Measures

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Authentication through AWS Cognito with support for multi-factor authentication.
• Role-based access controls to limit data access to authorized personnel.
• Regular security reviews and monitoring of our infrastructure.
• Secure file storage in AWS S3 with access policies restricting unauthorized access.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please contact us:

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and notify you of material changes via email or an in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.