Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how Refuge & Sword Publishing LLC (“GuildWright,” “we,” “us,” or “our”) collects, uses, and shares information when you use the GuildWright web and mobile application and related services (the “Service”). By using the Service, you agree to this Policy.

1. Who this applies to

GuildWright is a business tool used by construction and renovation companies (each a “Customer”) and the people they invite (owners, staff, and crew). If you were invited to a GuildWright account by your employer or a company you work with, that company is the controller of the data in its account, and this Policy describes how we process it on their behalf.

2. Information we collect

Account information. Your name, email address, phone number, role, and password credentials when you create or are added to an account.

Company and project data you enter. Information you or your team put into the Service, including company details, clients, projects, estimates, invoices, expenses, materials, subcontractors, tasks, schedules, timecards, pay rates, and uploaded files or photos.

Usage and device data. Standard technical data such as IP address, browser and device type, pages viewed, and actions taken, used to operate, secure, and improve the Service.

Location. If your company uses location verification, the Service records the precise location of your device at the moment you clock in and clock out, to confirm the shift happened at the job site. Your company's owners and administrators can see it on your timecard. It is collected only at those two moments, never continuously, never in the background, and never while the app is closed. The app asks before it is used for the first time, and you can decline and still clock in without it.

3. How we use information

We use the information to provide and operate the Service, authenticate users, process subscriptions, sync with services you connect, send transactional messages and notifications, provide support, maintain security, prevent abuse, and improve the product. We do not sell your personal information.

4. How we share information

We share information only as needed to run the Service:

5. Payments

Subscription payments are processed by Stripe. We do not store full payment card numbers; Stripe handles card data under its own terms and security standards. We receive limited billing details such as your plan, subscription status, and the last four digits of your card.

6. Third-party integrations

If you connect QuickBooks Online, we exchange invoice, customer, and item data with Intuit to keep your books in sync. That connection is optional and controlled by your company. Data shared with Intuit is governed by Intuit's terms and privacy policy.

7. AI features

GuildWright offers optional AI-assisted features, such as extracting details from a receipt photo. When you use these features, the relevant content (for example, the receipt image) is sent to our AI provider (Anthropic) to generate the result. This content is processed to provide the feature and is not used to train third-party models.

8. Sub-processors

We rely on the following providers to deliver the Service:

9. Data retention

We keep account and company data for as long as the account is active and as needed to provide the Service. When a company closes its account, its data is deleted or de-identified within a reasonable period, except where we must retain records to comply with law or resolve disputes. When we act on a deletion request we aim to confirm within a few business days and to complete deletion within 30 days of confirming. Encrypted backups roll off on their own schedule, so a copy can persist there for a short period afterwards before it is overwritten.

10. Security

We use industry-standard measures to protect information, including encryption in transit, access controls, and tenant isolation so each company's data is separated. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Your choices and rights

You can access and update most account information in the app. If you want to correct, export, or delete your personal information, contact your company's account owner or email us at the address below, and we will respond consistent with applicable law. Because companies control their own accounts, some requests are handled by the company rather than by us.

12. Deleting your account

You can ask us to delete your account and personal data at any time, with or without the app installed. In the app, open Settings, find Your account, and choose Request account deletion. Without the app, email us from the address on your account with the subject “Delete my account”. Full details of what is removed, what your company keeps as its business records, and what happens if you own the company account are at guildwright.app/delete-account.

We confirm every request before acting on it, so nobody loses an account because somebody else asked.

13. Data location

The Service is operated in the United States, and information is processed and stored there.

14. Children

The Service is for business use and is not directed to children under 16. We do not knowingly collect information from children.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes will be communicated through the Service or by email.

16. Contact us

Questions about this Policy? Email support@guildwright.app. GuildWright is a product of Refuge & Sword Publishing LLC.