EFFECTIVE 2026-08-14

Privacy Policy

This policy explains how RepeatWork handles information for contractor accounts, customer records, integrations, communications, memberships, and service workflows.

1. Scope and privacy roles

This Privacy Policy applies to RepeatWork websites, applications, customer portals, and related services. It does not replace the privacy notices of contractors or third-party platforms connected to RepeatWork.

RepeatWork is the controller or business for account, billing, website, support, security, and product-usage data we collect for our own purposes. For contacts, leads, customers, workers, service records, and communications a contractor places in RepeatWork, the contractor is the controller or business and RepeatWork acts as its processor or service provider.

2. Information we collect

Account and business information: Names, email addresses, phone numbers, company details, user roles, credentials, preferences, support requests, and account settings.
Lead and customer information: Names, contact methods, addresses, properties, lead status, source, project details, work history, notes, communication preferences, consent evidence, and follow-up status.
Communications and imported content: Messages, conversation history, files, filenames, attachments, screenshots, call metadata, delivery events, replies, opt-outs, and source records submitted through an import or connected platform.
Membership and service information: Plans, purchased terms, payment status, service requests, photos, scheduling, visits, home reviews, findings, reports, and customer-portal activity.
Payment information: Payment-provider identifiers, subscriptions, invoices, payment status, and transaction metadata. RepeatWork does not store complete payment-card numbers.
Technical and usage information: IP address, device and browser details, timestamps, session and login records, pages and features used, diagnostics, security events, and analytics identifiers.

3. Sources of information

We receive information:

directly from account users, customers, and portal users;
from files, exports, screenshots, and conversation records users upload;
from integrations a contractor explicitly authorizes;
from payment, authentication, hosting, email, storage, and messaging providers;
automatically from use of our websites and applications.

4. How we use information

provide, operate, support, and secure RepeatWork;
create customer records and preserve source provenance;
process imports and identify possible duplicates;
operate memberships, portals, requests, scheduling, billing, and reports;
deliver contractor-directed communications and record replies and opt-outs;
provide support, detect abuse, troubleshoot, and improve product reliability;
comply with law, provider agreements, and valid legal process.

5. AI processing

When a contractor enables an AI feature, relevant conversation text, files, customer context, prompts, and structured output may be processed by RepeatWork and an AI service provider. Uses may include classification, extraction, summarization, deduplication, recommendations, and message assistance.

RepeatWork does not use Customer Data to train generalized AI models. Contractors should not submit sensitive data that is unnecessary for the workflow. AI output is retained with source evidence when needed for review, auditing, and the customer record.

We disclose information only as needed:

to the contractor organization controlling the relevant account and record;
to authorized users and customer portal users within their permitted scope;
to service providers processing information on our behalf;
to third-party platforms at the contractor's direction;
for legal process, security, fraud prevention, or protection of rights;
as part of a merger, financing, acquisition, or sale, subject to appropriate safeguards.

We do not sell Customer Data. We do not use customer mobile numbers or messaging consent for RepeatWork's independent marketing, and we do not share SMS opt-in data with third parties for their own marketing.

7. Service providers

Hosting and database providers: Application hosting, database operations, backups, and infrastructure.
Cloudflare R2: Private object storage for uploaded files and import content.
Stripe: Connected-account onboarding, checkout, billing, and payment status.
Resend: Account, portal, payment, scheduling, and service email.
AI providers: Optional classification, extraction, summarization, and assistance.
Twilio or contractor-selected providers: Phone and SMS delivery when a communications feature is enabled.
Umami: Website and product analytics configured by RepeatWork.
Connected platforms: Data exchange requested and authorized by the contractor.

8. Retention and deletion

We retain information while an account is active and as reasonably needed to provide the Service, preserve contractor-directed business records, enforce opt-outs, comply with payment, tax, legal, security, and provider obligations, and resolve disputes. Retention depends on data type, account settings, contractor instructions, and applicable law.

Verified deletion requests are handled according to our Data Deletion Instructions. Suppression and opt-out evidence may be retained as needed to prevent unlawful contact. Payment, tax, security, and legal records may be retained after other content is deleted.

For Thumbtack API Data, RepeatWork follows Thumbtack's deletion requirements, including the five-business-day requirement applicable when RepeatWork stops using the API or receives a qualifying Thumbtack request, subject to the exceptions stated in Thumbtack's API Terms.

9. Security

We use safeguards appropriate to the nature of the Service, including encrypted transport, access controls, organization-scoped authorization, expiring sessions and signed links, credential protection, private file storage, logging, backups, and incident response. No method of transmission or storage is completely secure. Account owners are responsible for managing their users and protecting connected-account credentials.

10. Privacy rights and choices

Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Account users may contact RepeatWork. Leads and customers should normally contact the contractor that controls their record; we will assist that contractor with a verified request.

Communication recipients may use the opt-out instructions in a message. Contractors must honor requests received through any channel. Browser settings may control cookies, but disabling required cookies can prevent authentication or other functionality.

11. Changes and contact

We may update this policy as our product, providers, or legal obligations change. The effective date identifies the current version. Questions and verified privacy requests may be sent to [email protected].