Privacy Policy

Who we are

FieldRank is operated by Scale Systems LLC, doing business as FieldRank. You can reach us at support@getfieldrank.com. This policy explains what information we collect when you use FieldRank, how we use it, who we share it with, and the choices you have.

What we collect

• Account information. Email, name, business name, and (optionally) phone number when you sign up or join the waitlist.
• Google Business Profile (GBP) tokens. When you connect your GBP account, we receive OAuth access and refresh tokens. These are encrypted at rest and used only to post on your behalf. We never sell or share them.
• Field check-in data. GPS coordinates, photos, descriptions, service types, and timestamps you (or your team) submit through the FieldRank app.
• Billing information. Stripe customer ID and subscription metadata. Full credit card data is held by Stripe, our payment processor, and never touches our servers.
• Cookies and similar technologies. Session cookies, CSRF tokens, and (if enabled) basic analytics cookies. See “Cookies” below.
• Logs. Standard server logs (IP address, user agent, request paths, timestamps) used for security and debugging.

How we use your information

• To operate the service: post check-ins to your connected GBP, render your website widget, and send transactional notifications.
• To bill you and prevent fraud, via Stripe.
• To respond to support requests and account issues.
• To improve the product (aggregated usage analytics, error tracking).
• To comply with legal obligations.

Sharing and subprocessors

We do not sell your personal data. We share data only with the subprocessors needed to run the service:

• Supabase: database and file storage for accounts, check-ins, and photos.
• Vercel: web hosting and serverless functions.
• Stripe: subscription billing and card processing.
• Resend: transactional email delivery.
• Google: posting to your Google Business Profile, on your explicit instruction, using the OAuth scope you grant.

Each subprocessor receives only the data needed for its function. We may also disclose information when required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

Google user data and Limited Use

When you connect your Google Business Profile, FieldRank accesses Google user data through the Google Business Profile APIs using the scope you explicitly authorize. FieldRank’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve the user-facing features you request, such as publishing your check-ins to your Google Business Profile.
• We do not sell Google user data, and we do not use it for advertising or to build advertising profiles.
• We do not use Google user data to train generalized or non-personalized AI/ML models.
• We do not allow humans to read your Google user data unless we have your consent for specific support, are required to for security or legal reasons, or the data has been aggregated and anonymized.

Retention

• Account data is retained while your account is active.
• Up to 90 days after cancellation, account data may be retained for billing reconciliation and recovery, then deleted.
• Check-in photos are archived for up to 1 year unless you delete them earlier.
• GBP OAuth tokens are deleted when you disconnect your Google account.
• Logs are retained for up to 90 days for security purposes.

Your rights

You can request access to your data, ask us to correct it, request deletion, or export a copy. Email support@getfieldrank.com and we will respond within 30 days. If you are in California, the EU, the UK, or another jurisdiction with specific privacy rights, those rights apply to you.

Children

FieldRank is built for businesses and is not intended for anyone under 13. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

Cookies

We use cookies for authentication (session and CSRF) and, if enabled, basic product analytics. You can manage cookies in your browser, and we plan to add a cookie settings panel here in a future release. Disabling session cookies will prevent you from logging in.

Security

We use industry-standard practices: TLS in transit, encryption at rest for sensitive fields like GBP tokens, role-based access controls, and audited subprocessors. No system is perfectly secure. If you suspect a security issue, email support@getfieldrank.com.

International transfers

FieldRank is hosted in the United States. If you access the service from outside the US, your data will be transferred to and processed in the US.

Changes to this policy

If we change this policy, we will post the new version here and update the effective date below. Material changes will also be communicated by email to active customers.

Contact

Questions or requests? Email support@getfieldrank.com.

Effective: 2026-04-25