Privacy Policy

Last updated: September 30, 2026

1. Introduction

FieldScribe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use FieldScribe, how we use it, and the choices you have. By using FieldScribe, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide

  • Email address — collected when you continue to checkout or request access. We save your email, selected plan, referral information, and checkout status to operate your purchase. If you choose the optional reminder checkbox, we may send one reminder about that checkout.
  • Account password — if you choose to set a password after purchase, we store a salted password hash, not the password itself.
  • Billing and entitlement metadata — plan type, Stripe customer identifiers, subscription status, and report-credit usage needed to operate paid access.
  • Inspection photos — images you upload are transmitted to one of our AI inference providers for analysis. FieldScribe does not save the raw image files in its report database after processing.
  • Voice recordings — audio recorded in the app is transmitted to Groq and, when needed, Hugging Face for transcription. FieldScribe does not save the raw audio file in its report database after processing.
  • Customer branding — if you buy the optional report upgrade, your company details and resized logo are saved with that report. Custom Word templates are processed on your device and are not uploaded to our account storage.
  • Inspection and report content — property address, client name, inspection date, region, dictated notes, and photo-analysis text are transmitted to AI providers to generate a report draft. Draft notes, photo findings, job details, generated reports, and saved report edits are stored in Supabase for your account. Your current inspection and original photos are also saved on your device using browser storage so a refresh can recover your work.

2.2 Automatically collected information

  • Usage analytics — Vercel Analytics and, when configured, Google Analytics collect usage information such as pages visited, device or browser information, referral data, and product events. Vercel also maintains request logs that can include IP addresses and request metadata.
  • Cookies — we use Supabase session cookies and, when applicable, a signed httpOnly cookie (field-scribe-access) to verify paid access. A short-lived checkout cookie connects a completed purchase to the browser that began it. These access cookies do not track you across websites. We also keep hashed request identifiers to limit abuse of checkout and sign-in.

3. How We Use Your Information

  • To provide and operate the FieldScribe service.
  • To verify your purchase and grant access to the dashboard.
  • To manage account sign-in, subscription status, and report-credit usage.
  • To transmit photos, audio, notes, and analysis text to the applicable AI provider for photo analysis, transcription, and report drafting.
  • To send requested sign-in links and, only if you opt in, a checkout reminder.
  • To respond to support requests.
  • To comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

FieldScribe relies on the following third-party services:

Stripe

Processes payments. We never see or store your full card details. Stripe is PCI-DSS Level 1 certified.

Groq

Provides AI inference for transcription and report generation, and fallback photo analysis. Relevant photos, audio, notes, and analysis text may be transmitted to Groq for processing.

Hugging Face

Provides AI inference for photo analysis, processed by DeepInfra or Together AI through Hugging Face, and fallback inference for transcription and report generation. Uploaded photos and other relevant inputs are transmitted to Hugging Face and the processing provider.

Supabase

Provides account authentication, purchase password hashes, entitlement and usage records, checkout details, inspection drafts, and saved report storage.

Vercel

Hosts the FieldScribe application and provides request logs and product analytics.

Google Analytics

May receive site-usage and conversion events when Google Analytics is enabled for the deployment.

5. Data Retention

  • Raw photos and audio — FieldScribe does not save the original files in its report database after the processing request completes. AI providers handle submitted data under their own terms and retention controls.
  • Inspection drafts and photos on your device — the current inspection, including original uploaded photos, remains in browser storage until replaced or you clear site data. Signing out removes the access session but does not erase device storage. Use your own device for sensitive inspections.
  • Saved reports and account drafts — text, findings, and job details are stored in Supabase for recovery. Original photos are not available on another device; report text remains available. Contact us to request deletion.
  • Payment records — retained by Stripe in accordance with their policies and applicable financial regulations.
  • Access cookies — purchase access cookies last up to 30 days; checkout cookies last up to 48 hours. You can sign out or clear cookies using your browser settings.

6. Security

We use HTTPS for data in transit. Inspection inputs leave your device when you ask FieldScribe to analyze a photo, transcribe audio, or generate a report, and generated reports are stored for recovery as described above. Payments are handled by Stripe — we never store card numbers. While no transmission over the internet is 100% secure, we take reasonable precautions to protect your information.

7. Your Rights

Depending on your location, you may have the following rights regarding your data:

  • Access — request a copy of the personal data we hold about you.
  • Deletion — request deletion of your personal data.
  • Portability — receive your data in a machine-readable format.
  • Opt-out (CCPA) — California residents may opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, email us at privacy@fieldscribe.report.

8. Children's Privacy

FieldScribe is intended for professional use by adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of FieldScribe after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this policy? Contact us at privacy@fieldscribe.report.