Privacy.

MoveWhen is business software for contracting companies, run by House Hues LLC (“we”). Each company that uses MoveWhen (a “customer”) has its own account, and its data is kept separate from every other company's. MoveWhen is in a private beta: companies are invited, and we work with each one directly.

A customer puts its own business records into MoveWhen: its clients and their houses, projects, estimates, proposals, signatures, invoices and payments; its crew and their hours from the crew app; its bank statements or, where it connects one, its bank feed; and its own settings. The customer decides what goes in and owns it. We hold it to run the software for that customer.

About the people a customer works with: its clients' names, contact details, addresses and project records; its crew members' names, wages and clocked hours, and photos they post to a job. Those people should hear about MoveWhen from the customer, who is responsible for having a reason to keep their information.

About people who sign in: name, email, role, a scrambled form of the password (never the password itself), and the second-factor key if two-step sign-in is on, stored encrypted.

Where a company connects a bank account, the connection is made on the bank's own sign-in page through Plaid. MoveWhen never sees or stores bank credentials; it receives a token from Plaid, stored encrypted, that it uses to read balances and transactions. Disconnecting from the panel revokes it. Statements a company uploads instead are read and kept the same way as the feed.

Only to provide MoveWhen to the customer: showing its work, money and schedule, pricing estimates, sending the emails it asks us to send, and keeping its records. We do not sell data, share it with other customers, or use it for advertising.

Some features send text to an AI provider to do their job (drafting a note, reading a photo, asking an assistant which contractors it recommends). What is sent is limited to that task, is not used by the provider to train its models under our agreement with it, and is not shared with anyone else.

Hosting (DigitalOcean), email delivery (Postmark), bank connections (Plaid), card payments where a company uses them (Stripe), maps and addresses (Google), and AI features (OpenAI). Each handles data only to provide its service to us.

Encrypted in transit everywhere. Secrets such as bank tokens and second-factor keys are stored encrypted. Each person signs in with their own password, and can turn on a second factor. Nightly backups are encrypted and kept for fourteen days. The server accepts administrator access by key only, behind a firewall, with security updates applied automatically.

We keep a customer's data while its account is open. A customer can ask for an export of its data, or for it to be deleted, at any time; deleted data leaves our backups within fourteen days. Records a company must keep for its own taxes or contracts are the company's to keep, so ask for an export before deleting.

Anyone whose information is in MoveWhen can write to MoveWhen@househues.com. If it is a company's record about you (as its client or crew), we will pass the request to that company, and help it answer. We reply within thirty days.

If this policy changes in a way that matters, we will tell customers by email before it takes effect, and the date above will change.