Data Security & Customer Data Statement

Contractors entrust JobClose AI with sensitive business and customer information. This statement summarizes how we protect that data.

Encryption

• All traffic to and from JobClose AI is served over HTTPS (TLS).
• Passwords are hashed using bcrypt and never stored in plaintext.
• Session tokens (JWT) are signed with a server-side secret and rotated when changed.

Access controls

• Every contractor account is isolated — data is scoped to the owning user by ID on every read and write.
• Admin endpoints require an admin role and are not accessible to contractors or unauthenticated visitors.
• Customer information (estimates, proposals, contracts, invoices, customer updates) is not publicly accessible — it requires authentication.

AI processing

When you trigger an AI feature, only the inputs required for that feature are sent to the AI provider. Outputs are stored within your account. JobClose AI does not use your business data to train third-party models.

Payments

Subscription payments are processed by Stripe. JobClose AI does not store full payment-card numbers; we only retain billing references provided by Stripe.

Backups

Our database is backed up on a regular schedule. Backups are encrypted at rest.

Incident response

If we detect a security incident affecting your data, we will notify affected accounts without undue delay and provide remediation steps.

Your responsibilities

• Use a strong, unique password (minimum 8 characters required on signup).
• Do not share your login credentials.
• Review customer-facing documents (proposals, contracts, invoices) before sending.

Contact

Security questions or disclosures: security@jobclose.ai