Privacy Policy

HudsonWorks (“HudsonWorks”, “we”, “us”) provides a multi-tenant SaaS platform for trade service businesses. This policy describes how we handle data collected through our website, our platform, and our mobile apps.

• Account data: tenant business name, owner name and email, password hash, and chosen plan.
• Tenant content: customers, projects, tasks, time entries, proposals, contracts, invoices, and other records you create inside HudsonWorks. This data belongs to your tenant.
• Operational logs: request logs, error reports, and aggregated usage statistics — used to operate and improve the service.
• Billing data: subscription identifiers and invoicing records. We do not store your card details — payments are handled by a PCI-DSS compliant processor.

• We do not sell your data or your customers' data.
• We do not process payments from your customers through HudsonWorks. You record customer payments manually on your end.
• We do not pull events from your connected Google Calendar back into the CRM.
• We do not see the contents of envelopes signed via your connected DocuSign account.

We use the following sub-processors to operate the service:

• Amazon Web Services (S3) — file storage
• Algolia — search index for tenant-scoped data
• DocuSign — contract signing (per-tenant authorized account)
• Google APIs — Calendar push and Maps geocoding

Every tenant's data lives behind a strict tenant_id scope. Search queries enforce tenant isolation at the index level. HudsonWorks staff with super-admin access can view tenant lists and subscription state but do not access tenant business records as part of normal operations.

You may request an export of your tenant's data at any time. On cancellation, we retain the data for a 30-day grace period in case of recovery, then delete it.

Questions about this policy? Email privacy@hudsonworks.com.