JobTally
This Privacy Policy explains how John Paul Kobrossi, doing business as JobTally ("JobTally," "we," "us," or "our") collects, uses, shares, and protects information when you use the JobTally web application and related websites at getjobtally.com and jobtallyapp.com (together, the "Service"). JobTally is a mobile-first job-costing and time-tracking tool built for small contractors and their crews.
We know contractors are busy, so we've tried to keep this readable. If anything here is unclear, contact us at support@getjobtally.com.
If your employer invited you to JobTally as a worker, the app captures your device's GPS location at the moment you clock in and the moment you clock out. That location is shared with the business owner who invited you. See "Worker Location Tracking" below for exactly what is collected and how it is used.
JobTally has two kinds of users:
For most data that a business owner enters about their company, jobs, clients, and workers, the business owner is the "controller" of that data and JobTally acts as a service provider / processor handling it on the owner's behalf. For account-level information and for operating the Service overall, JobTally acts as a controller. If you are a worker and have questions about how your data is used within a company's account, you should also contact the business owner who invited you.
When you register or are invited, we collect your name, email address, company name (for owners), and a password (stored only in hashed/encrypted form — we never see your plain-text password).
For workers, we capture GPS geolocation at clock-in and clock-out. See Section 3 for full detail. We do not continuously track location in the background between clock-in and clock-out.
Photos of receipts and jobsite photos that you or your workers upload. Receipt images are also processed by our AI provider to extract the store name and amount (see Section 8).
Subscription billing is handled by Stripe. JobTally does not collect or store full payment card numbers — Stripe does. We receive limited billing metadata such as your subscription status, plan, the last four digits and card brand, and billing history. See Section 7.
Like most web apps, we automatically receive certain technical data when you use the Service: IP address, browser and device type, operating system, timestamps, pages/screens viewed, and basic diagnostic/error logs. This helps us keep the Service secure and working.
What is collected: your device's GPS coordinates (latitude/longitude), captured only at the moment you tap "clock in" and the moment you tap "clock out." An approximate accuracy radius and timestamp are stored with each point.
Why: so the business owner can verify that time was recorded at or near the jobsite and can accurately cost labor to a job.
Who sees it: the business owner (and their authorized account users) who invited you. JobTally personnel may access it only as needed to operate or support the Service.
What is not collected: we do not track your location continuously, in the background, or while you are off the clock. Location is a snapshot at clock-in and clock-out only.
Your device or browser controls location permissions. If you deny location access, clock-in/clock-out may be limited or may record without a location point, depending on your employer's settings. The decision to require location-based time tracking is made by your employer, not by JobTally. If you are uncomfortable with location capture, raise it with the business owner who invited you.
We do not sell your personal information, and we do not use your business's job, client, location, or financial data to serve you third-party advertising.
Where data-protection laws such as the GDPR apply, we rely on the following legal bases:
For worker data processed on an owner's behalf, the business owner is responsible for having an appropriate legal basis and for informing workers about location tracking as required by their local laws.
We share information only as needed to run JobTally. Our key subprocessors and service providers are:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, file/photo storage, and authentication | Account data, job/client data, time & location entries, photos, hashed passwords |
| Vercel | Application hosting & delivery | Technical/request data needed to serve the app |
| Stripe | Subscription payment processing | Billing details and payment card data (handled by Stripe; see Section 7) |
| Anthropic (Claude API) | AI scanning of receipt images to extract store name & amount | Receipt image and extracted text |
| Resend | Transactional email (invitations, clock-in/out notifications, billing/account emails) | Email address and message contents |
| Cloudflare | DNS and email routing | Network/routing metadata |
We may also disclose information: (a) to comply with law, legal process, or a lawful government request; (b) to protect the rights, safety, and property of JobTally, our users, or the public; (c) to enforce our Terms; and (d) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy. Business owners control sharing within their own account (for example, inviting additional users).
Subscriptions are billed through Stripe, a PCI-DSS-certified payment processor. When you enter payment details, they go directly to Stripe. JobTally never receives or stores your full card number, CVC, or full card details. We store only limited billing metadata (such as subscription status, plan, card brand, last four digits, and billing history) so we can manage your subscription. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.
When you upload a receipt photo, we send the image to the Anthropic Claude API to automatically read the store name and amount so you don't have to type them. We use this only to populate your expense entry. The extracted results are shown to you and can be edited. Anthropic processes the image as our subprocessor. AI extraction may occasionally be inaccurate, so you should review scanned values — see the disclaimers in our Terms of Service.
We retain personal information for as long as your (or your employer's) account is active and as needed to provide the Service. After an account is deleted, we delete or de-identify associated personal data within a commercially reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or dispute-resolution obligations, or to enforce our agreements. Backups are purged on a rolling schedule. Because a business owner controls their workers' and clients' data, some worker or client data may persist in an owner's account until the owner deletes it or their account.
No system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and regulators as required by law.
Depending on where you live, you may have some or all of the following rights over your personal information:
To make a request, email support@getjobtally.com. We will verify your identity and respond within the timeframe required by applicable law. Workers: some requests must be directed to the business owner who controls your data; we will help route your request where appropriate. We will not discriminate against you for exercising your privacy rights.
If you are a California resident, you have the right to: know what personal information we collect and how we use and disclose it; request access to and deletion of your personal information; correct inaccurate personal information; and be free from discrimination for exercising these rights.
We do not "sell" your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. The categories of personal information we collect and our purposes are described in Sections 2–4; the categories of recipients are described in Section 6. To exercise your rights, contact support@getjobtally.com. You may use an authorized agent to submit a request on your behalf, subject to verification.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights described in Section 11 under the GDPR/UK GDPR, and you have the right to lodge a complaint with your local data-protection authority. Our legal bases for processing are set out in Section 5. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses. For any GDPR request, contact support@getjobtally.com.
JobTally uses cookies and similar technologies that are strictly necessary to run the app — chiefly to keep you signed in (authentication/session) and to keep the Service secure. We may use a limited amount of privacy-respecting, aggregate analytics and error monitoring to understand performance and fix bugs. We do not use advertising cookies or third-party ad trackers. You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in.
JobTally is a business tool and is not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us information, contact support@getjobtally.com and we will delete it.
JobTally is operated from the United States, and our infrastructure providers may process and store data in the U.S. and other countries. By using the Service, you understand that your information may be transferred to and processed in the United States, which may have data-protection laws different from those in your country.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice (such as an in-app notice or email). Your continued use of the Service after an update means you accept the revised Policy.
Questions, requests, or complaints about privacy? Reach us at:
John Paul Kobrossi d/b/a JobTally
Email: support@getjobtally.com
Mailing address: available on written request via the email above