Privacy Policy — EveryStep FieldWorks by Compliance Matters

1. Introduction

EveryStep FieldWorks (“we,” “our,” or “us”) is a field service management platform operated by Compliance Matters. This Privacy Policy explains how we collect, use, and protect information when you use our application at app.compliancemattersca.com.

2. Information We Collect

We collect information you provide directly:

Account information: name, email address, business name, phone number
Job and customer data: customer names, service addresses, job details, notes, and documents you enter into the platform
Payment information: payment records and billing details (payment processing is handled by Stripe)
Usage data: how you interact with the application

3. How We Use Your Information

We use the information we collect to:

Provide and operate the EveryStep FieldWorks platform
Process and manage jobs, invoices, and payments
Synchronize eligible invoice and recorded payment information with QuickBooks Online when you authorize this integration
Send notifications and communications related to your account
Improve and maintain our services

4. QuickBooks Online Integration

If you connect your QuickBooks Online account, we store OAuth access tokens and refresh tokens to enable synchronization. These tokens are encrypted at rest using AES-256-GCM encryption. EveryStep FieldWorks may synchronize eligible invoice and recorded payment information with QuickBooks Online when an account has enabled the integration. After a payment is successfully confirmed and recorded in EveryStep, EveryStep may create a related QuickBooks Online payment and apply it to the corresponding invoice. If you void an invoice in EveryStep, EveryStep may void the corresponding QuickBooks Online invoice so both systems reflect the same status; an invoice that QuickBooks Online shows as already paid is left unchanged for your review. Synchronization depends on account configuration, provider availability, authorization status, and successful record matching.

QuickBooks Online is used as a downstream accounting synchronization service. EveryStep remains the operational source of truth for job activity, invoices, and recorded payment status. We do not modify or delete data in your QuickBooks account beyond what you explicitly authorize. You may disconnect the integration at any time from your Company Profile settings.

5. Data Storage and Security

Your data is stored on Supabase infrastructure hosted in the United States. We implement industry-standard security measures including:

Encryption in transit (HTTPS/TLS)
Encryption at rest for sensitive credentials
Account-scoped access controls and row-level security protections where applicable
Authentication and secure limited-purpose access controls for protected information

6. Data Sharing

We do not sell your personal information. We share data only with:

Service providers necessary to operate the platform (Supabase, Vercel, Stripe, Twilio, Intuit/QuickBooks)
As required by law

7. SMS/Text Messaging Program

Compliance Matters may send text messages to customers who have consented to receive operational communications. These messages may include appointment confirmations, appointment reminders, scheduling updates, technician or rater on-the-way notifications, service updates, and customer-requested communications. These are transactional, service-related communications and are not marketing messages.

Customers may provide SMS consent verbally during appointment scheduling or through other approved consent methods made available by Compliance Matters. SMS consent is optional, applies only to operational communications, and is not a condition of purchasing or receiving services. Customers can receive services without agreeing to text messages.

Message frequency varies based on customer appointments, service activity, and communication needs. Message and data rates may apply depending on your mobile carrier and plan. Customers may opt out of SMS communications at any time by replying STOP. Customers may request assistance by replying HELP or contacting Compliance Matters directly. Delivery of text messages is subject to carrier and network availability.

Mobile numbers, SMS consent information, and messaging preferences are not sold or shared with third parties or affiliates for marketing or promotional purposes. We may share this information with service providers necessary to operate and deliver authorized messaging communications. SMS consent information is used only for authorized communications.

8. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at eddie@compliancemattersca.com.

9. Contact

Compliance Matters
Stockton, California
eddie@compliancemattersca.com