VisitIO Privacy Policy

Privacy Policy

Last updated: 18 October 2026 · Version 3

This policy explains what VisitIO collects, why, where it goes and the choices you have. It applies to the VisitIO apps for Android and iOS, the website visitio.site and related services.

1. Two kinds of personal data

  • Your data: information about you as a VisitIO user (account email, settings, subscription status, support messages).
  • Your clients' data: information you capture about the people you work for (names, addresses, phone numbers, emails, photos and videos of property, notes, signatures, and what they send through your request form). For this data you are the controller/business and we process it only on your instructions to provide the service. Your clients should contact you, not us, to exercise their rights; we will help you respond.

2. What we collect and why

  • Account: your email and how you sign in (Google, Apple or email, through Firebase Authentication), to sign you in and sync your data.
  • Job content: photos, job videos, written notes, prices and costs, signatures, contacts, inventory, expenses, payments, your company profile and logo, and the payment-method details you configure. Stored on your device; with Pro, also synced to our cloud so it follows you across devices.
  • Customer requests: when a customer uses your request link (visitio.site/r/…), we receive what they enter (name, phone, email, address, a description of the problem, photos and preferred times) and pass it to you as a new job.
  • Mileage: when you start a trip, the app records your route (a GPS trail), start and end points and distance, only while that trip is running. Trips are stored on your device and, with Pro, synced to your account.
  • Shared links: when you share a job video, a document or a pay link, anyone with the link can open it without signing in. Video links stop working after 180 days and document links after 365 days.
  • Device permissions (only when you use the feature): camera for photos and videos; microphone for the sound on job videos and for speaking to Ask AI through your phone's own speech recognition (on iPhone this can use Apple's speech service); location to fill in a job address, show local weather and record a trip you start (on iPhone, location continues in the background only while a trip is running); photo library to add existing photos or receipts; calendar to add scheduled jobs to your phone's calendar; contacts to import clients (nothing is written back); notifications for new requests and reminders; Bluetooth on Android, to remind you to start a trip when your phone connects to your car.
  • Purchases: the store you installed VisitIO from (Google Play or the Apple App Store) processes subscription payments; we receive a purchase token or signed receipt and its status, never your card details. If you joined with a referral code, the store passes us that code.
  • Feedback: when you send feedback from the app, we receive your message, any screenshots you attach, your account email, contact details you add, your device, operating system, app version and plan.
  • App integrity: Firebase App Check (Play Integrity on Android, App Attest on iPhone) confirms that requests come from a genuine copy of the app. We do not use advertising identifiers, crash-reporting or analytics tools in the apps, and we do not sell data.
  • Website (visitio.site): which pages you view and how you use them (clicks on links and buttons, including the download buttons and where they sit on the page), the campaign tags in the link that brought you (such as utm_source), the site that referred you, your browser, device type and language, and your approximate location (country and city, estimated from your IP address). We use this only to understand which pages and campaigns lead people to try VisitIO. Analytics run only if you accept them in the banner shown on your first visit, and you can change your choice at any time with Privacy choices at the bottom of every page. If you accept, the website stores a random identifier in a cookie and in your browser's local storage so that visits can be counted, and keeps the campaign tags in session storage until you close the tab. Your choice itself is saved in local storage. We do not record what you type into the site or replay your session, and we do not use this data for advertising. If your browser sends a Do Not Track signal, the website records nothing. You can also delete or block these cookies and this storage in your browser settings.
  • Free tools (the invoice and estimate generators and the payment reminder templates on visitio.site): everything you enter stays in your browser and is never sent to us. Invoice and estimate drafts, including any logo you add, are saved in your browser's local storage until you start a new one or clear your browser data; the reminder templates save nothing.

3. Where data is processed

  • Google Firebase: Authentication, the Firestore database for synced data, Cloud Functions (our server code), App Check, and Cloud Messaging with Apple Push Notification service for notifications (a new-request notification includes the customer's name and message).
  • Cloudflare R2 for photos, signatures, PDFs, job videos, your logo and photos sent through the request form; Cloudflare Turnstile checks that the request form is used by a person (it receives a token and the visitor's IP address).
  • OpenAI for Ask AI and Write with AI. When you use them, our server sends OpenAI the information needed to answer. For a job: the client's name, phone and address, the problem, equipment details, notes (including private notes), line items with prices and costs, totals, payments, and that client's earlier jobs and equipment. For business questions: your clients, upcoming jobs, income, expenses and money owed. Anything you type or paste into the chat is sent as well. Photos and videos are never sent. For job questions, OpenAI web search may be used with the job's city, region and country. Earlier versions of the app could record voice notes, which were sent to OpenAI for transcription and then deleted; new recordings are no longer possible.
  • Stripe for card payments: Stripe receives the details you give when you open your Stripe account and, for each payment, the amount, the invoice reference, your business name and your client's email.
  • Google Maps Platform (Places, and Maps on Android) and Apple Maps for address suggestions, job locations, and nearby stores in Ask AI answers; your phone's own geocoding turns addresses into map positions.
  • Open-Meteo for local weather; it receives your approximate location.
  • GitHub, where app feedback is kept in a private repository.
  • Google Drive or iCloud Drive, only if you turn on backup: the backup goes to your own account.
  • Google Play or the Apple App Store for subscription billing.
  • PostHog (United States) for website analytics on visitio.site.

These providers may store data outside your country. Where required (for example transfers from the EEA, UK or Brazil) we rely on the providers' standard contractual clauses or equivalent safeguards.

4. How long we keep it

Your data stays while your account exists. Deleting a job removes its content from your device and cloud. Trips are kept until you delete them. Deleting your account (Settings → Account → Delete account) removes everything on the device immediately and, 30 days later, permanently deletes the account with its synced data, photos and videos, unless you sign in again within that period to cancel. Backups are purged on a rolling basis after that.

Website analytics are kept only as long as they help us understand how the website is used, and no longer than the retention period of our PostHog plan.

5. Your rights

Depending on where you live (including under GDPR/UK GDPR, PIPEDA and Quebec Law 25, LGPD, CCPA/CPRA) you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, to withdraw consent, and to complain to a supervisory authority. You can do most of this directly in the app; for anything else, contact us using the details below. We do not sell or share personal information for cross-context behavioural advertising, and we do not discriminate against you for exercising your rights.

6. Children

VisitIO is a business tool and is not directed at children under 16 (or the applicable age). We do not knowingly collect their data.

7. Security

Data is encrypted in transit. Cloud storage is scoped so that only your signed-in account can read your data. Protect your device with a screen lock: the app's local data is only as safe as the phone it is on.

8. Changes

We will post updates here and, for material changes, ask you to review them in the app.

9. Contact

Data controller for your account data: the VisitIO operator named in the app store listing. Email: support@visitio.site. If you are in the EEA or UK you may also contact your local data-protection authority.