Privacy Policy

Last updated September 4, 2026

Draft. This policy describes ScheduleDesk as built today and is being reviewed before publication. Questions: support@scheduledesk.app.

ScheduleDesk is made by Deskcraft Toolworks LLC (“we”). It is a scheduling tool that connects to your Jobber account. This policy explains what data we handle, why, and what we don't do with it.

What we collect

  • Your account. Your name and email address, provided by Jobber when you sign in. We do not store a password.
  • Jobber data. With your authorization, we read your Jobber team members, jobs, visits, clients and property addresses, requests, job notes and custom fields, and we write the crew assignments, visit dates and times, job notes and custom-field values you create in ScheduleDesk. Access tokens for Jobber are encrypted at rest (AES-256-GCM) and are never shown to anyone.
  • Schedule data you create here. Team availability events, normal weekly schedules, scheduling notes, skills and preferences, highlights, job categories and the order of your schedule. This data lives in our database, scoped to your company.
  • Billing. Payments are processed by Paddle, our merchant of record. We store your subscription status and Paddle identifiers, not card numbers.
  • Usage and diagnostics. Standard server logs (IP address, browser, pages requested) kept for troubleshooting.

Services that process data on our behalf

  • Jobber — the system of record for your jobs and team.
  • Supabase — database and authentication hosting.
  • Vercel — application hosting.
  • OpenAI — when you type free-text availability (for example “Jim off next Friday”), that text and your team member names are sent to OpenAI to be turned into calendar events. If the Autoschedule beta is enabled for your company, job titles, instructions and notes for the day being scheduled are sent as well. This data is not used to train models.
  • Open-Meteo — weather forecasts for the postal code you enter in Settings.
  • Paddle — checkout, invoicing and subscription management.

What we don't do

  • We do not sell or rent your data.
  • We do not use your Jobber data for anything other than showing and scheduling it for you.
  • We do not read Jobber data you have not authorized through the scopes shown when you connect.

Calendar feeds and shared visit links

If you create an iCal feed, anyone holding that feed URL can read the events it contains. Feed URLs are unguessable and can be regenerated from Settings. Likewise, if you create a view-only share link for a visit, anyone holding that link can view that visit — including the client's name, address and contact details — without signing in. Share links are unguessable and can be revoked at any time from the visit's pop-out window; deleting a link disables it immediately. Treat active links like the information they show.

Disconnecting and deleting

Disconnecting ScheduleDesk from Jobber (from Jobber's app marketplace or from our Settings) removes our access tokens immediately. Cancelling your subscription keeps your schedule data for 30 days so you can come back; email us to delete it sooner, or at any time, and we will delete your company's data within 30 days of the request.

Cookies

We use only the session cookies needed to keep you signed in. No advertising or cross-site tracking cookies.

Changes

We will post updates here and change the date above. Material changes will be announced inside the app.

Contact

Deskcraft Toolworks LLC · Spokane, Washington, USA · support@scheduledesk.app