Our privacy policy, in plain words.

1What we hold

The firm’s account: its mobile number, an optional email if the firm chooses to give one, and its PIN — stored only as a scrambled hash. We cannot read a firm’s PIN. Nobody here can.

The firm’s working records: its clients, quotes, invoices, bookings and price book; the photos the firm uploads; and the bank details the firm enters so they print on its invoices.

When a pack is switched on, the records that pack needs — for the Crew Pack, that’s the crew’s names, phone numbers, roles and hours.

2What we never hold

Card numbers. InstaJack takes no card payments in the app today, so no card details ever pass through us.

Anyone’s WhatsApp messages or passwords. Quotes and invoices travel through the firm’s own WhatsApp, from the firm’s own number. InstaJack never reads anyone’s WhatsApp — not the firm’s, and not its clients’.

3Why we hold it — and what we don’t do with it

Only to run the service the firm asked for: showing its quotes, keeping its records straight, producing its documents.

We do not sell data. We do not run advertising, and there are no ad trackers in InstaJack.

4Watching this website

This website uses Google Analytics — the public pages at instajack.app, not the app. It counts visits and shows us, in totals, which pages people read and roughly where they visit from, so we can tell whether the site is doing its job.

To do the counting, Google sets cookies in your browser and handles the visit data for us, as our processor. We see patterns, never a named person — and none of it is advertising: the data is not used to follow anyone around the internet with ads, and we do not sell it.

The app itself — where a firm’s real work lives — carries no analytics and no trackers at all.

5The links your clients open

When a client opens a quote, invoice or booking link, they see that one document — nothing else in the firm’s account. They need no account and no password.

So the firm can watch its work move, we record that the document was opened, and when the client approves it. That record sits inside the firm’s own account.

6Who else touches the data

The providers that run the service — hosting, storage and delivery — handle data only to run InstaJack, and only under contract. Nobody else receives it, except when the law compels us to disclose something.

7The firm’s rights

The records belong to the firm. Inside InstaJack, the firm can export its records at any time — CSV exports are built into the product.

The firm can ask us to delete its account and its records. And if a firm leaves, its records leave with it: export them first, or ask us to delete them. We don’t keep a firm’s business as a souvenir.

8How we look after it

Data is encrypted while it travels. PINs are stored hashed, never in plain text. Every firm’s data is kept separate from every other firm’s — one firm can never see another firm’s records. Inside our own team, access is limited to what’s needed to run the service.

9Changes to this policy

When our practices change, we update this page and change the date at the top. If a change is a big one, we’ll say so plainly at the top of this page as well.