Centrov ("we", "us") is an operating system for people-powered service businesses: quoting, scheduling and shift coverage, a crew mobile app with GPS-verified check-ins, invoicing with proof of work, and financial reporting. This policy explains what data we collect, why, and your rights over it. We aim to collect the minimum needed to run the product.
What we collect
- Account data — your name, email, company name, and password (stored hashed, never in plain text).
- Quote data — the quotes you build: clients, line items, totals, and the PDFs generated from them.
- Client contacts — names and emails of the clients you send quotes to, which you provide.
- Worker records — the details you enter about the people you schedule: name, contact information, role, pay rate, availability, shifts assigned, and hours worked.
- Location data — the GPS coordinates of a worker's device at the moment they check in to a shift in the crew app, used to verify that the shift was covered on site.
- Job photos — photos your crews upload as proof of completed work, along with the job, site, and time they were attached to.
- Billing data — payment details are handled by the payment processor identified during checkout when paid billing is enabled. Our billing integrations support Helcim and Stripe. We retain subscription and payment references, status, and amounts, not full card numbers.
- Public website activity — page views, broad device type, known referring service labels, campaign tags, calls-to-action, scroll milestones, and accepted demo requests or questions. We do not use third-party advertising pixels or store raw IP addresses for this measurement.
- Operational logs — minimal request/error logs to keep the service running and debug issues.
How we use it
We use your data only to operate the product: store and render your quotes, build and publish your schedules, record shifts and hours, attach proof to the work you invoice, produce your reports, send the emails you trigger, process your subscription, and provide support. We do not sell your data, and we do not use it to train external models.
Public website measurement
We use a first-party, cookie-free system to understand which public pages and campaigns lead to engagement or a demo request. The request IP address and browser identifier are used transiently to create keyed, one-way estimates of visitors and daily sessions; the raw IP address is not stored in the marketing event. Visitor estimates rotate monthly, session estimates rotate daily, and the underlying marketing events are retained for up to 90 days. This measurement stays in Centrov's Canadian-hosted database and is not used for cross-site advertising profiles.
With your separate opt-in, we also send limited public website measurements to Better Stack in the United States: approved public page paths, named button clicks, numeric performance measurements and generic error categories. A random, short-lived session identifier links these events. We do not send form contents, full URLs or query strings, visitor IP addresses, account identifiers, customer workspace records or QuickBooks data through this integration. Session recording and browser fingerprinting are disabled. Better Stack may retain these measurements for up to 90 days. Your choice is stored in this browser for 180 days; you can withdraw it using Website measurement settings in the footer. Browser Do Not Track and Global Privacy Control signals disable this optional measurement.
Worker data, location, and photos
If you use Centrov to schedule a workforce, you decide what worker information goes into the product and you remain responsible for it. We process it on your behalf to run the features you use — building schedules, recording hours, and producing the reports and invoices you send.
- Location is a single reading, not a trail. The crew app asks the device for its position at check-in and stores that one point against the shift. It does not follow a worker between check-ins, and it does not run in the background.
- Location is optional at the device level. If a worker declines the browser's location permission, or their device can't get a fix, the check-in is still recorded — just without coordinates.
- Photos are attached to jobs. Photos uploaded as proof of work are stored with the job they belong to and shown to you and, where you share a client portal link, to that client. Ask your crews not to include people or anything private in the frame.
Workers can ask you, their employer, for the worker data and check-in records held about them; if you can't produce them from the app, contact us and we'll help.
Where it's stored
Centrov's application database is hosted in Canada. Providers used for email, SMS, voice, payments, and owner-authorized connected services process the information needed for those features under their own privacy terms. Canadian application hosting does not mean that all processing by connected providers takes place in Canada.
Data sharing
We use service providers for hosting, transactional email (Resend), SMS and voice (Twilio), and enabled subscription billing (Helcim or Stripe). We also exchange information with services that a workspace owner chooses to connect, as described below. Information is limited to what is needed for the feature being used. We may disclose data when legally required to do so. We do not sell customer data or use QuickBooks data to benefit other customers.
Connected accounting services
When a workspace owner connects QuickBooks Online, Centrov uses Intuit authorization to verify the selected company and read the information required for the enabled features. This may include company details, customer and employee records, products or services, tax codes and rates, accounting preferences, and invoice details. If QuickBooks omits the company currency from its preferences, Centrov may read a Balance Sheet report to verify it.
When invoice export is enabled and an owner requests it, Centrov sends the selected invoice and its accounting references to Intuit. We retain mappings, invoice export snapshots, reconciliation results, and an audit history to operate the connection and resolve export problems. Authorization tokens and the QuickBooks company identifier are encrypted before persistent storage. Tokens are excluded from ordinary workspace exports and operational logs. QuickBooks data is used to provide the connected features for the originating workspace.
An owner can disconnect in Settings → Integrations → QuickBooks Online. Disconnecting stops further use of the connection in Centrov and requests revocation from Intuit. If revocation cannot be confirmed immediately, encrypted credentials remain in a restricted retry queue until it succeeds. Disconnecting does not erase invoices already created in QuickBooks or the mappings, export history, and financial evidence retained in Centrov. Retained records and protected backups remain subject to access controls and applicable retention obligations.
Intuit processes information shared with QuickBooks under its own terms and privacy practices. Contact our privacy address below for access, correction, or deletion requests relating to information held by Centrov.
Your rights
- Access & export — you can export your quotes and data at any time.
- Correction — edit your account and quote data directly in the app.
- Deletion — request deletion of your account and associated data by emailing us; we'll remove it within 30 days, except where we're legally required to retain records.
Security
Passwords are stored using salted, one-way password hashing. New and reset passwords use scrypt; legacy password hashes are verified until the password is replaced. Connections use HTTPS, and access to production data is restricted. Operational diagnostics use error classifications and support references, excluding credentials and QuickBooks financial payloads. No system is perfectly secure, but we take reasonable measures to protect your information.
Contact
Questions about this policy or your data? Email us at privacy@centrov.ca.