Privacy Policy
GravyWorks — A Product of ShraderWorks LLC
Effective Date: March 3, 2026 · Last Updated: March 3, 2026
1. Introduction
ShraderWorks LLC (“ShraderWorks,” “we,” “our,” or “us”) operates GravyWorks, a field service management application (“the App”). This Privacy Policy explains how we collect, use, store, and protect your information when you use GravyWorks.
We built GravyWorks on a simple principle: your data belongs to you. We collect only what we need, store it locally on your device by default, and never sell it.
If you have questions about this policy, contact us at: privacy@gravyworks.app
2. Information We Collect
2.1 Information You Provide Directly
- Account information: Name, email address, business name, trade type
- Business data: Customer names, job details, quotes, invoices, payment records
- Payment information: When processing payments, we collect transaction data. Card numbers are processed exclusively by Stripe and never stored on our servers or your device.
2.2 Information Collected Automatically
- Device information: Device type, operating system version, app version
- Crash logs: If the app crashes, we collect an anonymized error report. No personal business data is included.
- Usage data: Feature usage patterns (anonymized) to improve the app
2.3 Location Data
GravyWorks may request access to your device's location to auto-populate job site addresses and enable job-site check-in features.
We do not track your location continuously or in the background. You may deny location permission at any time — the app remains fully functional without it.
2.4 Microphone and Voice Access
GravyWorks may request microphone access for voice-to-text job note dictation. We do not record, store, or transmit audio. Voice data is processed locally using your OS's built-in speech recognition. We never send audio to our servers.
3. How We Use Your Information
We use your information solely to:
- Operate and deliver the GravyWorks app features you use
- Process payments via Stripe on your behalf
- Send transactional emails (receipts, invoices) that you initiate
- Fix bugs and improve app performance (anonymized crash data only)
- Communicate with you about your account when necessary
We do not use your data for advertising. We do not sell your data. Ever.
4. Local-First Data Storage
GravyWorks is built offline-first. Your business data is stored locally on your device using SQLite. This means:
- Your data works with no internet connection
- Your data does not live on our servers by default
- If you lose your device without a backup, your local data may not be recoverable — we strongly recommend enabling device backups
When you use features that require network connectivity, only the minimum necessary data is transmitted.
5. Data Sharing
We share your data only in these limited circumstances:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Transaction amount, email, payment instrument (card data never touches our servers) |
| Supabase | Account entitlement verification | User ID, subscription status only |
| Apple / Google | App distribution | Standard app analytics per their platform policies |
| Law enforcement | Legal obligation only | Minimum required by valid legal process |
We do not share your business data (customers, jobs, quotes, invoices) with any third party. Period.
6. Data Retention
- Local data: Retained on your device until you delete it or uninstall the app
- Account data: Retained for the life of your account plus 90 days after deletion
- Payment records: Retained for 7 years per IRS requirements
- Crash logs: Retained for 30 days, then automatically deleted
7. Your Rights
Right to Access
You may request a copy of all personal data we hold at any time. Contact: privacy@gravyworks.app
Right to Deletion
To delete your account: navigate to Settings → Account → Delete Account, or email privacy@gravyworks.app with subject “Account Deletion Request.” We will complete deletion within 30 days.
Right to Data Portability
Navigate to Settings → Export Data to download a complete copy of your business data in standard CSV format. We hold no hostages.
Right to Opt Out
You may opt out of anonymized crash reporting at any time in Settings → Privacy.
8. California Residents — CCPA Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of categories and specific pieces of personal information we collect, use, and share.
- Right to Delete: As described above.
- Right to Opt-Out of Sale: We do not sell personal information. This right is not applicable, but we disclose it for completeness.
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.
To exercise CCPA rights: privacy@gravyworks.app or write to ShraderWorks LLC, 103 Olive Springs Place SE, Marietta, GA 30060. We will respond within 45 days.
9. Children's Privacy — COPPA
GravyWorks is intended for adults operating field service businesses. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact privacy@gravyworks.app immediately and we will delete it promptly.
10. Security
- All data in transit encrypted via TLS 1.2 or higher
- Payment data handled exclusively by Stripe (PCI-DSS Level 1 certified)
- Stripe webhook signature verification on all payment events
- Secrets stored in environment variables only — never in source code
- Regular security audits conducted by ShraderWorks GRC team
To report a security vulnerability: security@gravyworks.app
11. Georgia Data Breach Notification
ShraderWorks LLC complies with the Georgia Personal Identity Protection Act (O.C.G.A. § 10-1-910 et seq.). In the event of a data breach, we will notify affected Georgia residents within a reasonable time and notify the Georgia Attorney General if the breach affects more than 10,000 Georgia residents.
12. Third-Party Links
GravyWorks may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties.
13. Changes to This Policy
We will notify you of material changes via email to your account address and an in-app notification. Continued use after notification constitutes acceptance.
14. Contact
- ShraderWorks LLC
- Privacy: privacy@gravyworks.app
- Security: security@gravyworks.app
- General: hello@shraderworks.com
- 103 Olive Springs Place SE, Marietta, GA 30060