Privacy Policy

Account and workspace information — your name, email address, and (if you use email sign-in) a hashed password. When you sign in with Google, we receive the profile information you approve (name, email address, avatar).

Business data you enter into Yes Foreman — clients, contacts, leads, quotes, invoices, jobs, schedules, timesheets, products, and any other records you create. This is the data you work with every day; it belongs to you and your business.

Connected accounts — when you connect Gmail, Google Calendar, Google Drive, Outlook, or other providers, we store encrypted access tokens (never your passwords) and sync the data you authorise, such as email, calendar events, contacts, and files.

Call data — if you use Yes Foreman's phone receptionist, we record and transcribe calls you direct through it, and keep those recordings and transcripts in your workspace.

Billing information — payment cards and billing details are processed by Stripe. We store your plan, subscription status, and invoices, but card numbers never reach our servers.

Technical and usage data — log data, error reports, and how you use Yes Foreman, so we can keep the service reliable and improve it.

We use your information to run Yes Foreman: to sign you in, save and sync your business data, send quotes and invoices, schedule jobs, connect the integrations you choose, and answer your requests with AI.

AI features — Yes Foreman uses AI models (from providers such as OpenAI) to draft quotes, summarise emails, and help with other tasks. Content you ask the AI to work on may be sent to those providers to generate a response. We don't use your data to train third-party AI models.

Email delivery — when you send quotes or invoices through Yes Foreman, mail is delivered via your connected inbox, your own SMTP server, or Yes Foreman's default email service.

We don't sell your personal information, and we don't share it with anyone outside the processors needed to run the service.

Yes Foreman's use of information received from Google APIs adheres to Google's API Services User Data Policy, including the Limited Use requirements.

When you connect Gmail, Calendar, Drive, or Contacts, Yes Foreman only accesses the data you have explicitly authorised, and only to provide the features you use: reading and sending email, managing calendar events, working with documents, and maintaining contacts. You can revoke access at any time in Google's account settings or by disconnecting the integration in Yes Foreman — data Yes Foreman has already synced stays in your workspace until you delete it.

We share your information only with the service providers required to operate Yes Foreman, under contracts that limit how they may use it:

Stripe — for payment processing and billing. Stripe's privacy practices are governed by its own policy.

AI model providers — to power Yes Foreman's AI features, as described above.

Cloud hosting and infrastructure providers — to store and serve your data securely.

Email and SMS providers — to deliver emails and messages you ask Yes Foreman to send.

We will also disclose information where the law requires it, or to protect the rights and safety of Yes Foreman, our users, or the public.

Your data is transmitted over encrypted connections (TLS) and stored in controlled data centres.

Integration tokens (for Gmail, Calendar, Drive, Outlook and other services) are encrypted at rest with AES-256-GCM before they touch disk, and are only decrypted in memory when needed.

Passwords are stored as salted hashes — we never keep them in plain text.

We limit access to your data to the people and systems that need it to run the service, and we regularly review our security practices.

No method of storage or transmission is 100% secure — we work hard to protect your data, but we can't guarantee absolute security.

We keep your data for as long as your workspace is active, so your history stays intact and searchable.

You can delete individual records at any time. When a workspace is deleted, we make reasonable efforts to erase or de-identify its data from our systems within 60 days, except where we're required to keep it longer for legal, tax, or billing reasons (for example, invoices you've issued).

You can access, correct, or export your business data from within Yes Foreman at any time.

You can disconnect any integration, which stops new syncs immediately.

You can delete your workspace and its data at any time.

Depending on where you live (for example, in the EU or Australia), you may have additional rights under local privacy law — to ask us what we hold, to have it corrected, exported, or erased, and to object to certain processing. To exercise these rights, contact us using the details below.

If you have questions about this policy or about your data, email us at support@yesforeman.com.

We may update this policy from time to time. When we make material changes, we'll let you know through the app or by email. The latest version is always available at this page.