Bit & GrainBit & Grain

Privacy Policy

Last updated: May 18, 2026

Bit & Grain Technologies LLC ("we," "us," or "our") operates the Bit & Grain platform. This Privacy Policy explains how we collect, use, and protect your information, including how we handle phone numbers and SMS text messages.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, Apple, or Facebook, we receive basic profile information from those providers.

Business Data

Data you enter into the platform, equipment, jobs, clients, invoices, receipts, photos, and other business records, is stored to provide the Service.

Phone Numbers

We collect mobile phone numbers from clients of contractors who use Bit & Grain, when those clients opt in to SMS text messages. We also record the opt-in event itself (date, time, and source, for example a job-request form or a contractor-initiated invite) so we can demonstrate consent.

Usage Data

We collect anonymized usage analytics (pages visited, features used, device type) to improve the Service. We do not collect personally identifiable information in our analytics.

Location Data

If you use GPS mileage tracking, location data is collected only while the feature is active and is stored solely for your mileage records.

2. How We Use Your Information

  • To provide and maintain the Service
  • To process payments (via Stripe and PayPal)
  • To send transactional emails (invoices, payment receipts, password resets)
  • To send transactional SMS text messages (appointment reminders, replies, and follow-ups for jobs, estimates, and invoices) only after the recipient has opted in. We do not send SMS for marketing or promotional purposes.
  • To power AI features (Grain AI uses your business context to provide relevant responses)
  • To improve the Service based on anonymized usage patterns

3. Data Sharing

We do not sell your data. We share data only with:

  • Payment processors (Stripe, PayPal), to process transactions you initiate
  • Infrastructure providers (Vercel, Supabase), to host and operate the Service
  • SMS service provider (Twilio), to deliver transactional text messages (appointment reminders, replies, follow-ups) on behalf of contractors who use the platform. Phone numbers and SMS opt-in data are shared with Twilio solely for message delivery and are never sold, rented, or shared with any third party for marketing purposes.
  • AI providers (Anthropic), to power Grain AI features. Your data is not used to train AI models.
  • Law enforcement, only when required by law

4. SMS Communications

When you receive SMS text messages from Bit & Grain, this section describes what data we collect, how it is used, who it is shared with, and how to opt out. SMS messages are sent on behalf of the contractor whose business invited you, through our SMS service provider Twilio. Bit & Grain Technologies LLC is the sender of record.

What we collect for SMS

We collect your mobile phone number and a record of your opt-in event (date, time, and source) so we can demonstrate consent and route messages to your mobile carrier. We also retain the content of SMS exchanges between you and the contractor for the contractor's business records.

How we use phone numbers

Phone numbers are used solely to deliver transactional SMS related to your relationship with the contractor: appointment reminders, replies to those reminders, and follow-ups for jobs, estimates, and invoices. We do not use phone numbers for marketing or promotional messages. Consent to receive SMS is not a condition of any purchase or service.

Sharing of SMS data

Phone numbers and SMS content are shared only with Twilio, our SMS delivery provider, in order to route messages to your mobile carrier. We do not sell, rent, or share phone numbers or SMS opt-in data with any third party for marketing or promotional purposes under any circumstances.

Opting out of SMS

Reply STOP to any SMS we send to immediately opt out of all further messages. Standard carrier opt-out keywords (STOP, END, CANCEL, UNSUBSCRIBE, QUIT) are honored. There is no fee for replying STOP. Message and data rates from your mobile carrier may otherwise apply. For full details about message types, frequency, and sender identity, see our SMS Terms.

5. Data Security

Your data is encrypted in transit (TLS) and at rest. Database access is protected by Row Level Security policies that ensure you can only access data belonging to your business. We use industry-standard security practices and regularly review our infrastructure.

6. Data Retention

Your data is retained as long as your account is active. Upon account deletion, all your business data is permanently removed within 30 days. Anonymized usage analytics may be retained indefinitely.

7. Your Rights

You have the right to:

  • Access your data at any time through the Service
  • Export your data in standard formats (CSV, PDF)
  • Request deletion of your account and all associated data
  • Opt out of non-essential communications, including SMS (reply STOP) and marketing email

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics are collected server-side without cookies.

9. Children's Privacy

Bit & Grain is not intended for use by anyone under 18. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification.

11. Contact

Privacy questions, including questions about SMS communications? Email us directly at privacy@bitandgrain.app, or use the contact form and select "Legal / Privacy" as the category. We respond within two business days.