Privacy Policy

Front & Field Privacy Policy Effective date: October 21, 2026.

Front & Field, LLC provides business administration and communication software for service contractors. This policy explains our handling of information through Front & Field. The contractor you contact is responsible for its services, customer relationship and instructions about its customer records. For information about a contractor's own practices, contact that contractor.

Information we handle. Depending on the enabled features and information you or your contractor provide, we handle account and contact information; service addresses; requests, appointments and job records; estimates, invoices, recorded payments and expenses; job notes and photographs; communications, delivery status and consent records. Enabled AI telephone services may process call audio, transcripts and extracted details. The currently configured Sarah test agent stores recordings and transcripts in Retell with no automatic expiration. Live contractor calling is not enabled. Recording notice, retention and access settings must be approved before customer calls begin. Front & Field stores extracted service details and summaries; it does not copy the full recording or transcript into its service-request record. Please do not send payment-card details, passwords or sensitive identity documents through service messages.

Why we use it. We use information to authenticate accounts, provide the requested business workflows, communicate about requested services, maintain consent and audit history, prevent unauthorized activity, diagnose failures and recover data. AI-generated summaries or drafts support these workflows; owners review customer commitments and outgoing messages. An AI-captured appointment preference is not itself a confirmed booking.

Service providers and access. Authorized users of the relevant contractor can access that contractor's records. We use infrastructure and communication providers for functions such as hosting, database/authentication, storage, authentication email, enabled voice/text services, encrypted backup storage and error monitoring. Our implementation uses Vercel, Supabase, Resend, Retell, Backblaze B2, Sentry and Healthchecks.io; Twilio SMS is not active until separately authorized. Providers process the information needed for their role. Operational monitoring is configured to exclude customer message bodies, financial details and credentials. We may disclose information when required by law or to protect lawful rights and security. We do not promise that data never leaves the United States or that providers never retain operational records.

SMS privacy. We never sell, rent, or share customer mobile numbers or SMS opt-in and consent information for third-party marketing. Necessary service providers may process this information solely to provide authorized services, subject to appropriate protections. Consent belongs to the identified sender and approved purpose; it is not transferred between contractors. Messaging providers and carriers process information needed to deliver messages and administer consent. This delivery processing does not authorize them to market to you.

Security and retention. We use access controls and business isolation, private photo storage, and encrypted independent recovery copies. No service can guarantee absolute security or uninterrupted access. Application records do not currently have a general automatic deletion schedule. Existing encrypted independent backup copies are retained without an activated pruning schedule. Records are retained for operating the service, audit/security needs and applicable obligations; a deletion request is handled through a reviewed process rather than an automatic deadline. Deletion requests may require identity verification and coordination with the contractor; retained records and encrypted recovery copies may not disappear immediately. We will explain applicable limitations rather than promise an unimplemented deletion deadline.

Choices and contact. For service corrections or questions, contact your contractor. For privacy requests concerning Front & Field, contact scott@frontandfield.com. You can decline optional texting or withdraw texting permission without losing the option to request service through other available channels. Session technologies are used for authentication and security. Our public website does not currently use advertising trackers or marketing analytics.

Privacy requests. Depending on applicable law, you may have rights to request access, correction, deletion or a copy of your personal information, or to object to or restrict certain processing. Contact scott@frontandfield.com; we may verify your identity and coordinate with the relevant contractor. These rights can have exceptions, including records required for legal, security or audit purposes. We do not currently offer a self-service deletion portal. Withdrawing SMS consent stops covered future texts; it does not itself delete business or opt-out records.

Updates. Material changes will be reflected in this policy with an updated effective date and appropriate notice. A policy update does not expand an existing SMS consent scope.