Privacy Policy

1. Who We Are

atyors is a contractor payment and job management platform. We provide independent contractors (plumbers, electricians, landscapers, painters, HVAC technicians, and other tradespeople) with tools to build quotes, collect digital signatures, and accept payment in the field. atyors is operated from Massachusetts, United States, and is accessible at atyors.com.

2. Information We Collect

Contractor account information: When a contractor creates an account, we collect their name, email address, phone number, trade or specialty, and optionally a business title.

Customer information entered by contractors: When a contractor creates a job, they may enter their customer's name, phone number, email address, and service address. This information belongs to the contractor and is used solely to fulfill that job.

Payment information: Payment card details are collected and processed securely by Stripe, our payment processor. atyors does not store full card numbers on our servers.

Job records: We store the quotes, digital signatures, payment records, and job notes associated with each completed job. These records are tied to the contractor's account.

Before and after photos: Contractors may upload photos before and after completing a job. Photos are stored in AWS S3 and attached to the job record.

Location data: With permission, we collect GPS coordinates from contractors during active job routes to support route planning and stop sequencing. Location data is collected only while the contractor is actively using the routing feature.

Device information: We may collect device tokens for push notifications to deliver updates about account activity, payment confirmations, and job status.

3. Identity verification and biometric data (Stripe Identity)

Contractors who use certain payment or payout features may be asked to complete identity verification through Stripe Identity, a service operated by Stripe, Inc. Verification is presented in a Stripe-hosted flow (you may leave the atyors app to complete it in your browser or an embedded web view, depending on your device).

What is collected. Stripe may collect images of a government-issued ID, a selfie or live capture of your face (used as biometric information to compare against your ID photo and for fraud prevention), and related metadata required to perform the check. atyors does not perform its own facial analysis inside our native app code; capture, comparison, and storage of verification imagery are handled by Stripe as described in Stripe's documentation.

How we use it. We use verification results only to confirm that you are eligible to use certain payment methods, reduce fraud, meet financial partner and legal obligations (including know-your-customer requirements), and to gate access to features such as Stripe Connect payouts where applicable.

Sharing and storage. Identity verification data is processed by Stripe as our service provider. Stripe's privacy policy and Stripe Identity materials describe how Stripe collects, uses, stores, and may retain verification data, including biometric data, on Stripe systems. atyors stores on our servers limited status information returned by Stripe (for example, whether verification is pending, verified, requires additional input, or canceled), not your raw ID or selfie images.

Retention. Verification artifacts are retained according to Stripe's retention practices and our legal obligations (for example, fraud prevention and financial compliance). When you delete your atyors account, we cancel or conclude associated verification sessions where technically possible and remove our copies of verification status fields as described in Section 8 (Data Retention), subject to records we must keep for legal or financial compliance.

Nothing in this policy is legal advice. If you have questions about identity verification, contact us using Section 12 below.

4. How We Use Your Information

• To create and manage contractor accounts
• To generate quotes, service agreements, and payment records
• To process payments and issue receipts
• To verify contractor identity where required for payments, payouts, or fraud prevention (via Stripe Identity)
• To send SMS payment links to customers on behalf of contractors
• To send email receipts to customers after payment is collected
• To support route planning and GPS-based job sequencing for contractors
• To send notifications about account activity, job updates, and payment confirmations
• To send password reset emails when requested
• To improve our platform and resolve technical issues

5. How We Share Your Information

We do not sell personal information. We share data only as required to deliver our services:

• Stripe processes all payments securely and operates Stripe Identity when you complete identity verification. Stripe's privacy policy governs how Stripe handles payment data and verification data, including biometric information collected in the Identity flow.
• Twilio delivers SMS messages, including payment links and job notifications, on behalf of contractors.
• Amazon Web Services (AWS) hosts our infrastructure, including file storage (S3) and email delivery (SES).
• Apple Push Notification service (APNs) delivers mobile push notifications to iOS devices.

We do not share contractor or customer data with third parties for advertising or marketing purposes.

6. Customer Data Handled on Behalf of Contractors

When a contractor enters their customer's contact details into atyors, that information is processed on behalf of the contractor. atyors acts as a data processor in this context. Contractors are responsible for obtaining any consent required from their customers before entering customer data into the platform.

7. Data Security

We protect your information using encrypted connections (HTTPS), secure password hashing, account lockout after repeated failed login attempts, and storage of sensitive credentials in AWS Systems Manager Parameter Store rather than in application code. Access tokens expire after one hour.

8. Data Retention

We retain contractor account information and job records for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where records must be retained for legal or financial compliance, such as payment transaction records.

9. Your Rights

You can:

• View and update your profile and account information at any time
• Export or request a copy of your job records by contacting us
• Delete your contractor account from the in-app profile (permanent removal of your data from our active systems, subject to legal retention exceptions above), or request deletion by contacting us at the email below
• Opt out of push notifications through your device settings

10. Children

Our platform is intended for contractors and business professionals. We do not knowingly collect personal information from anyone under the age of 18.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you through the app or by email before the changes take effect.

12. Contact Us

Questions about this privacy policy or your data? Contact us at atyors.support@gmail.com.