This policy explains what Pavr collects, why, and what you can do about it. It covers
the Pavr application and the pavr.io marketing site.
What we collect
Account and billing. Name, work email, company details, and the billing contact
and card token held by our payment processor. We never see or store full card numbers.
Pavr Payments, if you turn it on. The details Stripe needs to open a payment account
in your business's name (business, owner and bank account details, entered on Stripe's
pages), and for each payment your customers make: the amount, the invoice, the payment
method's type and last four digits, the payer's name and email, and the outcome. Your
customers' card and bank account numbers go to Stripe directly and never through Pavr's
servers. If you pass card fees to customers, Pavr records who on your account agreed to
that, when, from which IP address, and the exact disclosure each payer was shown.
Job data you create. Customers, requests, estimates, proposals, jobs, work orders,
change orders, invoices, and attached documents.
Files you upload. Job-site photographs, receipts, signed documents and generated
PDFs. Photographs taken on site may incidentally contain people or vehicles.
Time-clock and location data. If you use the time clock, Pavr records clock-in and
clock-out events and, where the device permits, GPS coordinates at the moment of
clock-in and clock-out, to verify presence on the job site. This is not continuous
tracking — Pavr does not record location between those events.
Usage and diagnostics. Sign-in events, IP address, activity history for audit, and
error traces.
Marketing site. Page views via Plausible Analytics, which is cookieless and does
not track visitors across sites.
Contact forms, chat and calls. If you write to us through a form, chat with us or
call Pavr's phone line, we keep what you send and the number you call from, and may
follow up by email or phone. Chat and calls are handled by Chirp, whose assistant may use AI
to reply first. Pavr may also email you about Pavr itself; every one of those emails
has a link to opt out.
Texts and notifications. Where Pavr sends a text, it goes through Twilio. Push
notifications go only to devices that turned them on, through your browser maker's push
service.
Why we process it
To provide the service, bill you, secure the platform, meet legal obligations and
support you. We do not sell personal information, and we do not use your job data to
train machine-learning models.
Who processes data for us
| Sub-processor | Purpose | Data involved |
|---|---|---|
| Amazon Web Services (S3) | File storage | Job photos, receipts, signatures, generated PDFs |
| Amazon Web Services (SES, SNS) | Email sending, bounce and inbound mail handling | Recipient address, message content, delivery events |
| Heroku (Salesforce) | Hosting, database and backups | All account data |
| Stripe | Subscription billing; Pavr Payments (Stripe Connect) if you turn it on | Billing contact, card token, invoice history; with Pavr Payments, your business, owner and bank details for your Stripe account, and your customers' payments: payer name and email, amount, invoice, payment method details Stripe holds, refunds and disputes |
| Intuit QuickBooks Online | Optional accounting sync | Customers, invoices, payments you sync |
| Xero | Optional accounting sync | Contacts, invoices, payments, payouts and fees you sync |
| Twilio | Text messages (signing and payment codes, and links sent to your customers) | Phone number, message text |
| Cloudflare | DNS, encryption and network delivery for pavr.io; spam checks on public forms; caching and image delivery for contractor websites | All traffic to and from pavr.io in transit, visitor IP address, form submissions |
| Mapbox | Maps, address lookup and driving distance | Job addresses and coordinates, visitor IP address |
| Esri (ArcGIS) | Satellite imagery for measuring | Map area being viewed, visitor IP address |
| Satellite and street-level imagery on the site map | Map area being viewed, visitor IP address | |
| Chirp | Chat on pavr.io and in the app; answers Pavr's phone line | Chat messages, caller phone number and call details, visitor IP address |
| Honeybadger | Error monitoring | Error traces, which may include record identifiers |
| Plausible Analytics | Marketing-site analytics | Page views only; no cookies, no cross-site tracking |
QuickBooks Online, Xero and Pavr Payments are optional and receive data only if you turn them on, and Twilio only when Pavr sends a text. We also send a job address or location to public mapping and parcel services (U.S. Census Bureau, USGS, and county, state and provincial parcel portals) to look up a lot, and web-push messages travel through your browser maker's push service (Apple, Google or Mozilla).
Cookies
See the Cookie Policy: the few cookies Pavr sets, the services we load
that may set their own, and nothing for advertising.
Retention
We keep account data while your account is open. After the account closes, at the end
of the period you paid for, you have 180 days to download your records and files. When
the 180 days end we delete them, including photos, plan sheets, drone maps, signed
documents, time-clock and location records, and the personal information of your
employees, subcontractors and customers. Backups and stored file versions age out on
their own schedule after that.
Two things stay longer. The invoices you sent your customers and the payments recorded
against them, with the customer's name and address on them, and your expense receipts
with their images, stay for 12 months from the day you cancel, then they're deleted.
Our own billing records for your account (your company's name, your subscription, and
what you paid Pavr and when) stay in our books and tax records; we don't delete them.
Our own support and sales records about your account (such as your support tickets, our sales
notes, and the log of each time our staff signed in as you to help) stay with Pavr too.
If a contractor sent you a Pavr link, your information is part of that contractor's
account and is deleted on the same schedule. Invoices that name you stay for 12 months
with the contractor's tax records, then they're deleted too. While the account is open, send requests
about it to the contractor.
Your rights
Depending on where you live you may have the right to access, correct, delete or
export your personal information, to object to or restrict processing, and to complain
to a regulator. Employees and customers of a Pavr subscriber should contact that
subscriber first — for their data they are the controller and we are the processor.
Email privacy@pavr.io to exercise a right.
If you live in a U.S. state with a privacy law
You may ask what personal information we hold about you, ask us to correct or delete it,
and ask for a copy. Pavr does not sell personal information and does not share it for
advertising, and we never treat you differently for making a request. Email
privacy@pavr.io; we answer within 45 days.
Security
Encrypted in transit and at rest. Access is scoped per account with role-based
permissions, and sensitive fields are encrypted at the application layer.
Children
Pavr is a business tool and is not directed at anyone under 16.
Changes
We post changes here. If a change is material, we notify you by email at least 30 days before it takes effect.