Privacy Policy
Last updated: August 28, 2026
1. What this covers
This Privacy Policy explains what information Own The Field collects, how we use it, and what choices you have. It applies to the Own The Field CRM application (`ownthefieldcrm.com`) and the marketing site (`getownthefield.com`), operated by Own The Field LLC, an Arizona limited liability company.
There are two categories of data here, and it's worth being upfront about the difference:
- Account data — information about you, the Customer (business name, owner email, billing info), which we collect directly.
- Customer's own data — the information YOU (a subscribing business) enter about YOUR customers (names, addresses, phone numbers, service history, invoices). We store this on your behalf; we don't use it for our own purposes beyond operating the service for you.
2. Information we collect
From you directly:
- Name, business name, email address, and trade/industry, provided at signup.
- Billing information — handled entirely by Stripe; we never see or store your full card number.
- Any data you or your team enter into the app: customer records, jobs, quotes, invoices, photos, notes, and similar business records.
Automatically:
- Basic technical logs (IP address, browser type, timestamps) for security and troubleshooting — e.g. the rate-limiting system that protects your account from brute-force login attempts.
3. How we use information
- To provide, maintain, and improve the service.
- To process payments (via Stripe) and send billing-related communications.
- To send transactional emails you'd expect: welcome/account-setup emails, password reset links, subscription and cancellation notices.
- To respond to support requests.
- We do not sell your data or your customers' data to third parties, and we do not use the business data you store in the app to train AI models or for advertising purposes.
4. Third parties we share data with (subprocessors)
We use the following third-party services to operate Own The Field. Each only receives the data necessary for its function:
| Service | Purpose | Data involved |
|---|
| Stripe | Payment processing | Billing name, email, payment method (Stripe handles card details directly — we never touch them) |
| Render | Application hosting | All application data (stored on Render's infrastructure) |
| Twilio | SMS/text messaging (once launched) | Recipient phone number, message content, and the Customer's own business info submitted for A2P 10DLC carrier registration |
| Google (Gmail, app-password SMTP) | Transactional email (welcome, password reset, notifications) | Recipient email address, name, and the content of the specific email being sent |
| Anthropic | AI assistant feature (customer summaries, chat messages, uploaded photos, when enabled) | Content submitted to the assistant |
5. Data isolation between Customers
Each Customer's account uses its own separate database. Customer data is never pooled, mixed, or made visible across different companies' accounts. This isolation is a core architectural property of the platform, not just a policy promise.
6. Data retention and deletion
- Your data is retained for as long as your account is active.
- If you cancel, you have a 7-day window to export your data before the account is locked.
- If a locked account is not reactivated, we retain your data for 30 days after locking, then permanently delete it.
- You can request deletion of your account and associated data by contacting hello@getownthefield.com, subject to any records we're legally required to retain (e.g. billing records for tax purposes).
7. Security
We take reasonable technical measures to protect your data, including password hashing (never stored in plain text), rate-limiting on login and account-recovery endpoints, and encrypted connections (HTTPS) for all traffic. No system is 100% secure, and we can't guarantee absolute security.
8. Your choices and rights
- You can access, export, or correct your business's data directly through the app at any time.
- Depending on where you live, you may have additional rights in the personal information we hold about you (your account data — name, email, billing). For example, the CCPA if you are a California resident, or the GDPR if you are in the European Economic Area or the UK. Those rights, if they apply, depend on your location — not on whether someone from the EU appears in your own customer list.
- You are the controller of the customer records you enter in the app; we store that data on your behalf as a processor (see section 1). Whether a privacy law covers those people depends on how you run your business, not on their name sitting in our database.
- Email hello@getownthefield.com to make a privacy request.
9. Children's privacy
Own The Field is a business tool not directed at children, and we don't knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this Privacy Policy periodically. Material changes will be communicated by email or in-app notice.
11. Contact
Questions about this policy or your data: hello@getownthefield.com.