Privacy Policy

When you connect a business bank account, Junk Compass uses Plaid to retrieve and store incoming and outgoing transaction records for that account: transaction dates, descriptions, merchant names, amounts, and pending status. We do not retrieve or store your bank sign-in username or password — those are handled entirely by Plaid or your financial institution.

Incoming transactions can be matched to jobs or recorded as other income. Outgoing transactions can be categorized as business expenses for cash-basis profit and loss reporting. Transfers and excluded transactions do not affect those reports.

We use bank transaction data to identify income and expenses, match deposits to jobs, reconcile payments, prepare cash-basis financial reports, provide customer support, and maintain security and audit records.

Plaid Inc. is our bank connectivity provider. Plaid processes information according to its own End User Privacy Policy. We encourage you to review it before connecting an account.

Bank transaction data for a business is visible only to its owners and authorized platform administrators. Connection credentials (the token used to sync with your bank) are never exposed to any client application — they are stored in a server-only location that ordinary application requests cannot read.

We share bank connection data with Plaid, our bank connectivity provider, and with infrastructure providers (such as our database host) strictly as needed to operate the service. We do not sell bank transaction data.

Bank access tokens are stored in an isolated, server-only table that ordinary application clients cannot read. Financial fields and transaction descriptions are excluded from application logs and analytics events.

While a bank connection is active, we retain synced transaction records to support job matching, expense categorization, and financial reporting. When you disconnect an account, we immediately revoke our access at Plaid and delete our copy of the access token. Unreviewed transaction records are deleted immediately on disconnect. Transactions you already classified remain as part of your accounting history, since they support financial and audit records.

You can disconnect a bank account at any time from Financials. To request deletion of retained records or exercise other privacy rights, contact us using the information below.

Crew members may opt in to sharing precise device location with owners and setters of their business. We store only the latest coordinates, sharing state, and server timestamp—not a travel history. A crew member can stop sharing at any time. Shared locations disappear from the dispatch view after three minutes without an update and are not selectable after five minutes.

Browser location sharing is best effort. A mobile browser or operating system may slow or suspend updates when the browser is backgrounded or the device is locked. Clock-in location remains a separate, one-time record attached to the shift.

Address suggestions, address resolution, maps, and routes are provided by Google Maps Platform. Address searches and map use may send search text, coordinates, device and network information, and usage data to Google under Google's applicable terms and privacy policy, including the Google Privacy Policy. We store the selected formatted address, place identifier, coordinates, and the time the address was resolved so jobs can be dispatched and opened in Google Maps.

Questions about this policy or requests regarding your data can be sent to our support contact from within the application.