on the jobPrivacy Policy
Last updated: September 14, 2026 · Effective immediately for all users
This policy explains what Flex Services, LLC ("Flex", "we", "us") collects when you use Flex on the Job — the web app at app.flexonthejob.com, the sync service, the Windows desktop app, the Android apps, and this website — and what we do with it. We wrote it in plain English on purpose. If anything is unclear, email support@flexonthejob.com.
1. Who this covers
Flex is a business tool. The "customer" is the company that opens an account; "users" are the people that company invites (office staff, technicians, crew). Users' data is processed on the customer's instructions. If you're a user and want something changed or deleted, start with your company's Flex administrator — we'll help them do it.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, phone, company name, role, password (hashed, never stored in clear) | Sign-in, seat counting, notifications |
| Business data you enter | Jobs, customers, inventory, locations, purchase orders, invoices, estimates, notes, photos and barcode scans | That's the product — storing and syncing it is the service |
| Device & technical | Device identifier used to register a phone/PC with your account, IP address, browser/OS, timestamps, error logs | Security, fraud prevention, sync, troubleshooting |
| Billing | Plan, seat count, invoices, payment status. Card numbers never reach us — they go straight to Stripe. | Charging you, receipts, tax records |
| Support | Emails you send us and anything in them | Answering you |
We do not collect precise GPS location, contacts, or anything from your device beyond what the app needs to do the job you asked it to do (for example, the camera is used only while you're scanning a barcode or taking a job photo).
3. Cookies
The web app sets a session cookie so you stay signed in, and an anti-forgery cookie so forms can't be spoofed. That's it. On this marketing site, the only cookie is one Google reCAPTCHA sets on the pages with a contact form, to tell real visitors from bots — see reCAPTCHA below. There is no advertising, retargeting, or third-party analytics on any Flex property.
reCAPTCHA
Our contact and demo-request forms are protected by Google reCAPTCHA v3. It runs in your browser while you're on those pages and sends Google signals about how the page is being used — mouse and touch behaviour, your IP address, and a cookie — so it can score how likely you are to be a person. We only ever see that score; we never see the underlying signals. Google's Privacy Policy and Terms of Service apply to that processing. It runs only on pages with a form — not while you're using the app, and not on your business data.
4. How we use data
- Provide, sync, back up and secure the service
- Bill you and send receipts, trial and payment notices
- Answer support requests and send service announcements (outages, changes to these terms)
- Investigate abuse, fraud or security incidents
- Comply with law
We don't use your business data to train AI models, build marketing profiles, or benchmark you against other customers.
5. Who we share it with
Only the vendors needed to run Flex, each bound by their own privacy commitments and only receiving what they need:
| Vendor | Purpose | Data |
|---|---|---|
| Stripe, Inc. | Payments and invoicing | Billing email, company name, plan, card (entered directly with Stripe) |
| Cloudflare, Inc. | DNS, inbound email routing, encrypted off-site backup storage | Email to our support addresses; encrypted database backups |
| Zoho Corporation | Outbound transactional email | Your email address and the message we send you |
| Our U.S. hosting provider | Servers that run the app and database | Everything above, at rest and encrypted in transit |
| Google LLC | reCAPTCHA bot protection on our contact forms | Your IP address and in-browser interaction signals on pages with a form |
| Brevo (Sendinblue SAS) | Handling demo requests and enquiries from our website | Only what you type into the form: name, email, company, phone, message |
| Intuit (QuickBooks) | Only if you export to or connect QuickBooks | The invoices/customers you choose to send |
We'll also disclose data if the law requires it, to protect our rights or someone's safety, or as part of a sale or merger of the business (in which case this policy still applies to your data until it's updated with notice). We never sell personal data and never have.
6. Where it lives and how it's protected
- All data is stored and processed in the United States.
- Traffic is encrypted with TLS; database backups stored off-site are encrypted at rest.
- Passwords are salted and hashed; staff access to production is limited to what's needed to operate the service and is logged.
- Each customer's data is isolated by organization — one company can never see another's records.
No system is perfect. If we discover a breach affecting your data we will notify the account administrator without undue delay and tell you what happened and what we're doing about it.
7. How long we keep it
- While your account is open: for as long as you need it. Suspended accounts (for non-payment) keep their data in read-only mode.
- After you close your account: you can export everything first. We delete or anonymize your data within 90 days of closure.
- Backups: rolling backups are kept for up to 30 days, then age out automatically.
- Billing records: kept as long as tax and accounting law requires (typically 7 years).
8. Your rights
Wherever you are, you can ask us to access, correct, export or delete your personal data, or to stop sending you non-essential email. Account administrators can do most of this directly in the app (users, export). For anything else email support@flexonthejob.com — we'll respond within 30 days and we won't treat you differently for asking. If you live somewhere with specific privacy laws (for example California or the EU/UK), those rights apply to you and this is how you exercise them.
9. Children
Flex is for businesses and is not directed at anyone under 16. We don't knowingly collect data from children; if you think we have, tell us and we'll delete it.
10. Changes
If we change this policy in a way that matters, we'll email account administrators and post the new date at the top of this page at least 14 days before it takes effect. Minor edits (typos, clarifications) just get a new date.
11. Contact
Flex Services, LLC · South Carolina, USA
support@flexonthejob.com
See also our Terms of Service.