Techpool platform, website, and mobile apps
Last updated: October 26, 2026
Techpool Inc., a Delaware corporation (“Techpool,” “we,” “us,” or “our”), provides the Service. Techpool is the data controller for the account, billing, website inquiry, and usage information described in Sections 2.1, 2.2, 2.4, 2.6, and 2.7. For field and service data submitted to a company workspace (Section 2.3), including personal data about a company’s staff or customers, the company is the data controller and Techpool acts as its processor, processing that data to provide the Service, as described in this policy, and for the training use described in Section 3. Business customers may request a Data Processing Addendum using the contact details in Section 13. This policy explains how we collect, use, share, and protect your information when you use the Techpool web platform, the Instant Capture and Techpool mobile apps, and this website (together, the “Service”). Section 11 covers what applies only to the mobile apps. Your use of the Service is also governed by our Terms of Service.
This is the data you create while doing the work. Depending on what you use, it includes:
Card details are entered into Stripe-hosted fields and go directly to Stripe. We do not receive or store your full card number. We keep your subscription status, plan, seat counts, and invoice records. If you buy through the Apple App Store or Google Play, the store processes the payment and we receive your subscription status through RevenueCat.
With your permission, we collect GPS coordinates and derive a physical address so field work can be tied to where it was performed. You can withdraw this permission at any time in your device or browser settings.
If you request a demo, apply to become a referral partner, or use a contact form on techpool.tech, we collect the name, work email, company, team size, and message you submit. We store it in our AWS-hosted database and use it to respond to you.
If your company uses Techpool Books and chooses to connect a business bank or credit-card account, the connection is made through Plaid Inc. (“Plaid”). You sign in to your bank inside Plaid’s own window; Techpool never sees or stores your bank username or password. With your authorization, Plaid shares with us read-only data for the accounts you select: account name, type, and the last four digits of the account number; current and available balances; and transactions (date, amount, description, and merchant). We use this data only to keep your company’s books (categorizing, matching, and reconciling transactions) and it is visible only to people your company has given access to Books. We cannot move money through this connection.
Plaid’s handling of your data is governed by the Plaid End User Privacy Policy. You can disconnect an account at any time in Techpool (Books › Bank) or through Plaid Portal at my.plaid.com. After you disconnect, we stop receiving new data; lines already recorded in your books stay part of your accounting records unless you ask us to delete them.
We use the data you submit, including receipt images and the corrections you make to AI-generated content, to train and improve our own AI models so the Service gets better at structuring field work. Aggregated data that cannot identify you, your company, or your customers may also be used to develop and improve the Service.
Where the GDPR applies, we rely on: performance of our contract with you (account, sync, billing, and core features); our legitimate interests (security, service improvement, training as described above, and responding to inquiries); your consent (location collection, which you may withdraw at any time); and legal obligations (invoice and tax records). You may object to the use of your personal data for training at any time using the contact details in Section 13, and we will stop that use going forward.
Our personnel may access customer data only to operate, secure, and support the Service, under confidentiality obligations. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only in these situations:
We do not use third-party analytics or advertising trackers. These providers process data for us or make specific features work:
| Provider | Purpose and data |
|---|---|
| Amazon Web Services | Hosting and storage of your account, records, and uploaded media, and of website inquiries |
| Plaid | Read-only connection to the business bank and credit-card accounts your company chooses to link in Techpool Books (balances and transactions) |
| Stripe | Subscription payments and, where your company enables it, client payments. Stripe scripts load on payment screens and receive technical data such as your IP address |
| Apple, Google, RevenueCat | In-app purchases in the mobile app: the store bills you and RevenueCat tells us your subscription status, using your Techpool user ID |
| Google and Apple sign-in | Optional sign-in. The Google script loads on the sign-in and sign-up screens and receives technical data such as your IP address |
| Anthropic | AI drafting, structuring, summarizing, and receipt reading from your captures |
| Groq | Transcription of voice recordings |
| OpenAI and TypeSafe | Decision models that rank and classify work items. Companies on the Enterprise plan can have these requests routed only to zero-data-retention accounts |
| Email delivery provider | Sending account, invitation, billing, and notification emails to the addresses involved |
| QuickBooks (Intuit) | Only if your company connects it, to sync accounting records |
| OpenStreetMap, Apple, Google | Turning coordinates into a place name. In the web app this happens when a contract is signed, using coordinates rounded to about one kilometer. The mobile apps use the geocoder built into your device operating system |
| Google Fonts | Some of our emails and payment screens load fonts from Google, which receives technical data such as your IP address |
These providers handle data under their own privacy policies and our agreements with them. The other components we rely on handle things like network communication, storage, and media recording. They process data on your device or communicate with our own servers, and they do not send data to advertising networks.
We use only the cookies and browser storage the Service needs to work. We do not use advertising or analytics cookies.
You can clear these in your browser settings. Signing in will not work without the sign-in cookies. We do not respond to Do Not Track signals because we do not track you across other sites.
We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.
Depending on where you live, including under the GDPR if you are in the EU, EEA, or UK, or under state privacy laws such as California’s, you may have the right to:
How to delete your account.The web platform does not currently offer self-serve account deletion; contact us using Section 13 and we will close your account. In the mobile app you can choose Delete Account. This closes your account, blocks sign-in, ends your sign-in links to Google or Apple, and frees your email address. To have us also erase or de-identify the personal data we hold about you, or to use any other right above, contact us using Section 13. Records that belong to a company workspace, such as timesheets, reports, and invoices, are that company’s business records, so you may need to ask the company as well. We may keep what the law requires us to keep.
We respond within one month where the GDPR applies, within 45 days where California law applies, and within the period other applicable laws require, and we will tell you if we extend that period as the law allows. We may need to verify your identity first. If you are in the EU, EEA, or UK, you also have the right to complain to your local data protection authority. Where we rely on legitimate interests to process your data, such as securing and improving the Service, you can object using the contact details below.
California residents. In the last 12 months we collected the categories of personal information in Section 2 (identifiers, commercial information, internet activity, geolocation, audio and visual information, and professional information) for the purposes in Section 3, and we keep them as described in Section 8. We do not sell personal information or share it for cross-context behavioral advertising. We use precise geolocation only to tag field work at your direction.
We are based in the United States, and your information is processed there and wherever our service providers operate. If you are in the EU, EEA, or UK, that means your data is transferred to the United States. Where the law requires a safeguard for that transfer, we rely on standard contractual clauses or another mechanism the law recognizes.
The Service is a business tool and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.
Everything above applies to the Instant Capture app and the Techpool iPhone and Android apps. This section covers what is specific to them.
Each permission is requested at the point of use and can be revoked at any time in your device settings.
| Permission | Purpose |
|---|---|
| Camera | Capture photos and video of job sites |
| Microphone | Record voice notes describing field observations |
| Photo Library | Select existing images for captures (Instant Capture) |
| Location (GPS) | Tag captures with job site coordinates and record where you clock in and out |
| Internet | Sync captures to the server and authenticate |
We may update this policy from time to time. We will change the “Last updated” date above, and for significant changes we will give notice in the Service.
Questions about this policy or our data practices, or want to use your rights? Get in touch.