COVENANT WORKS
Privacy Policy
Short version: Your business data stays in your own Google/Firebase account. We don't sell your data, we don't mine it, and we don't look at it. We collect only what's necessary to run the service and process your subscription.
1. Who We Are
Covenant Works Business Suite is a product of Crafted by Design, LLC, owned and operated by John Sydnor, Augusta, Georgia.
Contact for privacy questions: support@covenantworks.app
2. The Short Version — Your Data Architecture
This app uses an architecture designed to keep your business data yours:
- Your business data (jobs, customers, invoices, inventory, expenses) is stored in our Firebase infrastructure (Google Cloud) in a dedicated, per-user secured space. Firestore Security Rules ensure that only you can read or write your own records. Crafted by Design does not access your business data in the normal course of operating the Service.
- Account data (email, subscription tier, aggregate usage statistics) is stored in our Firebase project to provide, manage, and improve the Service.
- Payment data is handled entirely by Stripe. We never see or store your card number.
3. What We Collect
| Data | Purpose | Stored where |
|---|---|---|
| Email address | Account creation, login, billing notices | Our Firebase Authentication + Firestore |
| Subscription status and tier | Controlling which features you can access | Our Firebase Firestore (users collection) |
| Stripe customer ID | Linking your account to your subscription | Our Firebase Firestore (stripe collection) |
| Your business data | Running your business management tools | Our Firebase Firestore, isolated to your account — only you can read or write your own records |
| AI prompts and inputs | Generating AI responses via Claude API | Sent to Anthropic — see their privacy policy |
| In-app feedback submissions | Improving the product during beta | Our Firebase Firestore (feedback collection) |
| Aggregate usage statistics | Understanding which features are used (tab visit counts, action counts, session frequency) — never linked to individual records | Our Firebase Firestore (user_meta collection) |
| Business-tier beta interest submissions (email, one-line business description, optional product opinion) | Reviewing applications to the Business-tier beta program. Submitted via the public form at /business/; an account is not required to submit. |
Our Firebase Firestore (business_beta_interest collection) — retained 12 months, then deleted |
4. What We Do Not Collect
- We do not collect payment card information (Stripe handles this)
- We do not read your business records, customer names, or financial data
- We do not use cookies for advertising or cross-site tracking
- We do not sell, rent, or trade your data to third parties
- We do not build individual behavioral profiles — usage statistics are aggregate counts only (e.g., "this tab was visited 12 times," not what you did there)
5. Third-Party Services
The Service uses the following third-party providers. Each has its own privacy policy:
- Google Firebase — Authentication, hosting, database infrastructure. Firebase Privacy
- Stripe — Payment processing and subscription management. Stripe Privacy
- Anthropic (Claude API) — AI-generated content (chat, listings, quotes). Anthropic Privacy
6. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process subscription payments and communicate billing information
- Control access to features based on your subscription tier
- Respond to support requests
- Send service-related emails (billing, major updates, security notices)
- Improve the Service based on aggregated, anonymous usage patterns
We do not send marketing emails without your consent. You can opt out of any non-essential communications at any time.
7. Data Retention
Account data (email, subscription status) is retained for as long as your account is active. If you close your account, we will delete your account data within 30 days of your request.
Your business data in your Firebase project is entirely under your control and is not affected by account closure — it remains in your Google account unless you delete it yourself.
Business-tier beta interest submissions are retained for up to 12 months, then deleted. To request earlier deletion of a submission you made via the /business/ landing page form, email support@covenantworks.app with the email address you used. No account is required.
8. Security
We use industry-standard security practices including Firebase Authentication, Firestore Security Rules that enforce per-user data isolation, and HTTPS for all data transmission. However, no system is perfectly secure. We encourage you to use a strong, unique password and enable two-factor authentication on your Google account.
9. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it promptly.
10. Your Rights
You have the right to:
- Access — Request a copy of the account data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your account and associated data
- Portability — Export your business data at any time via the in-app Export feature
To exercise any of these rights, email support@covenantworks.app. We will respond within 30 days.
11. Changes to This Policy
We may update this policy as the Service evolves. We will notify you by email or in-app notice before material changes take effect. The date at the top of this page reflects the most recent update.
12. Contact
Privacy questions or requests: support@covenantworks.app
Crafted by Design · Augusta, Georgia 30901
© 2026 Crafted by Design, LLC · Augusta, Georgia · Veteran-Owned Small Business
← Terms of Service ← Back to app