FiveStarJob respects your privacy. This policy describes what personal information we process, why, and the rights you have. Product cookie choices in the signed-in app are covered by the Cookie Policy on the FiveStarJob application.
Who is responsible
FiveStarJob is a multi-tenant platform. For data you provide as a customer of a business using FiveStarJob, that business is the data controller and FiveStarJob acts as a data processor. For your FiveStarJob account itself, FiveStarJob is the controller.
Information we process
- Account data: phone number, email, name.
- Usage and security data: activity logs, device and IP information.
- Operational data: jobs, appointments, calls and recordings where applicable.
- Location data (mobile technician app): precise GPS coordinates, accuracy, and related device location signals when you grant location permission. On supported devices this may include location collected while the app is in the background or the screen is off, so dispatch can keep receiving updates during active field work.
Why we process it
- To provide and secure the service (authentication, fraud and abuse prevention).
- To operate the features you use.
- Location (technicians): to show your position on dispatch maps, support job routing and arrival verification against a job address, and help authorized office staff coordinate field work. Location is sent to our servers for your company (tenant) and is visible only to users in that company who are permitted to see technician location. We do not sell location data.
- To comply with legal obligations.
Google user data (Local Services Ads integration)
If you connect a Google account (for example, to import your Google Local Services Ads leads), FiveStarJob accesses your Google Ads data through the Google Ads API using only the scope you approve. We use this access solely to read your Local Services Ads leads and the related account information and bring them into your FiveStarJob CRM, and — where you enable it — to send replies that you initiate. We store only the OAuth access and refresh tokens needed to maintain the connection and the lead data you choose to sync. You can disconnect the Google account at any time from the integration settings, which revokes our access.
FiveStarJob's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide the feature you enabled, to comply with applicable law, or as part of a merger or acquisition with appropriate safeguards.
Sharing
We share data only with sub-processors necessary to run the service, such as payment processing, telephony and voice providers, under appropriate agreements. We do not sell your personal information.
Security & retention
We protect all data — and in particular sensitive data such as Google user data and authentication credentials — with layered safeguards:
- Encryption in transit: all connections use HTTPS/TLS.
- Encryption at rest: sensitive credentials, including Google OAuth access and refresh tokens, client secrets and developer tokens, are stored encrypted in our database.
- Access controls & isolation: role-based access control (RBAC) and strict per-company (multi-tenant) data isolation ensure that only authorized users of the same company can access its data; all timestamps are stored in UTC.
- Least privilege: Google data is limited to the account you connect and is used only to display your Local Services Ads leads.
- Revocation & deletion: you can disconnect a connected Google account at any time, which revokes our access and deletes the stored OAuth tokens; you may also request deletion of your data as described below.
- Monitoring: access to production systems is logged, monitored and restricted to authorized personnel.
We keep data only as long as needed for the purposes above or as required by law.
Your rights
Subject to applicable law (including Canada's PIPEDA and Alberta's Personal Information Protection Act (PIPA)), you may request access, correction or deletion of your data, and withdraw consent for optional cookies (and for a connected Google account) at any time. To exercise these rights, contact your administrator or the FiveStarJob privacy team at support@fivestarjob.ca. To delete your FiveStarJob account, follow the steps on Delete your account.
Contact
For privacy requests, contact your administrator or email support@fivestarjob.ca.