Privacy Policy

Effective Date: September 4, 2026 · Last Updated: October 14, 2026

Clamp ("the App") is developed and operated by Contractor School ("we," "us," or "our"). We are committed to protecting your privacy and being transparent about what we do — and do not — collect.

This Policy covers the App and the clamppro.com website, including the free web estimator, which you can use without an account. Section 11 covers the free web estimator.

1. Your Clamp Account

Clamp can be used without an account. You create an account when you subscribe, or the first time you use a feature that requires our servers — cloud backup, AI estimate drafting, document signing, the customer portal, the web view, or Teams. Everything local — your leads, estimates, invoices, mileage, and time tracking — works without an account, fully offline.

To create an account we collect your email address. We use it to sign you in (we email you a six-digit code — we do not use or store passwords), to send transactional messages about your account, and, if you opt in, occasional product updates. Your email address is stored in our Cloudflare infrastructure and is used to link your subscription, backups, and team membership.

You can delete your account at any time in the App from Settings → Account → Delete my account. See "Data Deletion" below.

2. Usage Analytics

We use PostHog, a third-party product analytics service, to understand how contractors use Clamp so we can improve the app. PostHog collects interaction data such as which screens you visit, which features you use, and basic technical information about your device (app version, operating system, device model).

Before you create an account, this data is associated only with an anonymous device identifier. When you create a Clamp account, we associate your analytics data with your account identifier so we can support you and understand how the app performs for real businesses. We do not collect the contents of your leads, contracts, or photos. PostHog also receives your device's IP address when events arrive. PostHog stores it with your analytics events and uses it to estimate your approximate location (city, region and country), which we use to understand where Clamp is used. This estimate comes from your internet connection, not your phone's GPS, and applies whether or not you turn on Clamp's location features. PostHog acts as our service provider and processes this data on our behalf.

Website analytics. The clamppro.com website uses Google Analytics to understand aggregate site usage (pages visited, approximate location, device type). Analytics data is not used to identify you personally. You can block analytics with standard browser tools without affecting the site.

3. Subscriptions and Payment

Purchases are processed through the Apple App Store or Google Play; we never see your payment card details — those stay with Apple or Google. We use RevenueCat, a third-party service, to manage subscription entitlements. RevenueCat receives metadata about the purchase — which tier you bought and when — along with your Clamp account identifier and email address, which we set so your subscription follows your account across devices and so we can find your purchase when you contact support. RevenueCat does not receive your business data or payment card information.

4. Data Storage and Local-First Architecture

Clamp is local-first: without an account, your business data is stored only on your device and we cannot access it.

If you subscribe to Clamp Assistant or Teams and enable cloud backup, your business data — leads, documents, photos, attachments including voice notes, mileage trips and time-on-site records, and financial records such as vendor bills, payments, and job costs — is uploaded to our Cloudflare infrastructure so it can be restored to a new device and viewed in the Clamp web view. This data is stored under your account, is not used for any purpose other than providing the backup, web view, and team features, and is deleted when you delete your account. Restoring an existing backup is never blocked by subscription status — your data is yours even if you stop paying.

You remain able to export a local backup file at any time from Settings; we do not receive a copy of that file. The same applies to the accountant package: when you share those files with your bookkeeper, you are sending them directly, and we do not receive a copy.

5. The Web View

The Clamp web view lets you sign in with your account email in a browser and see a read-only view of your business data, rendered from your most recent cloud backup, plus your project photos. Signing in on the web sets a session cookie so you stay signed in on that browser. The web view does not write or change your data.

6. Teams and Jobsite Links

If you subscribe to Clamp Teams, you can invite people to your business account. To send an invitation we collect the name, email address, and (optionally) phone number you enter for that person. We email them an invitation; if they accept, they create their own Clamp account.

Team members' work records — time entries, mileage, receipts, and jobsite photos they log against jobs you assign them — are stored in your business account and are visible to you as the business owner. Team members see only the jobs you give them access to, and their personal records are never visible to other team members. If you record pay rates or payments for a team member, that information is stored in your business account and is used only to calculate what your jobs cost. Pay information is never visible to other team members.

You can also link an outside subcontractor to a specific jobsite. To send that invitation we collect the email address you enter for them; if they accept, they create their own Clamp account, and the photos and activity they add to your jobsite are stored in your business account.

As the business owner you are responsible for having a lawful basis to enter another person's contact details and to hold their work records.

7. Vendors, Subcontractors, and Job Costs

To track what you owe and what your jobs actually cost, Clamp lets you record the vendors and subcontractors you work with. For each one we store the name you enter, and optionally a phone number, email address, and notes. Bills, payments, credits, and any retainage you withhold are recorded against that vendor, along with the jobs and cost categories you assign them to.

We do not collect tax identification numbers. Clamp can produce a worksheet listing what you paid each vendor over a period, to help you or your tax preparer prepare 1099 forms. The tax identification number itself stays with you and the W-9 forms you already hold.

Payment accounts in Clamp are labels you name yourself, such as “Operating Checking” or “Business Card.” Clamp never stores bank account numbers, routing numbers, or card numbers.

As the business owner, you are responsible for having a lawful basis to record another person’s contact details and payment history.

8. AI Estimate Drafts in the App

If you use AI estimate drafting in the App, the job description you provide (typed or spoken) is sent to Anthropic (Claude) to generate a draft. If Anthropic is temporarily unavailable — a rate limit, server error, or timeout — your request is sent to OpenAI instead, and only in that case. Under our current commercial API arrangements and settings, Anthropic and OpenAI do not use your inputs to train their models.

Voice input is transcribed by your phone's built-in speech recognizer (Apple's on iPhone, Google's on Android). Depending on your phone's settings and language, that recognizer may process audio on Apple's or Google's servers under their terms. Clamp itself never receives or stores dictation audio — only the resulting text is sent to us. Voice notes you record and attach to a lead are audio files you keep; they leave your device only inside cloud backup, like any other attachment.

"Help improve AI estimates" is on by default. When it is on, we keep a copy of the job descriptions you write, the estimate drafts they produce, the corrections you make to those drafts, and the job's ZIP code. We use that copy to make estimates more accurate, including to train and evaluate Clamp's own estimating models. We collect the ZIP code only, never the street address, and we do not link the copy to a specific customer record.

A description you write is your own text, so it may occasionally include customer details if you type them. Anything in that copy stays on Clamp's own systems, is never sold and never shared, and is deleted after 24 months, or when you delete your account, whichever comes first.

You can turn this off at any time in Settings → AI & Data. Turning it off stops new collection of prompt data for estimate accuracy. You can also remove what has already been collected with Delete saved AI estimate data on the same screen, which permanently removes every saved copy for your account.

This setting covers that saved copy only. It does not change or delete your leads, your customers, your documents, or your customer portal, and nothing your customers see is affected by it.

9. Document Signing

Our Cloudflare-hosted signing service processes documents you send to customers for signature. Signed PDFs and signature metadata (such as the timestamp and the signer's IP address) are stored in order to make the signing process enforceable. This data is retained until deletion.

10. Customer Portal and Email

Customer portal sign-in links and document emails are sent via Postmark from [email protected]. Team and jobsite invitations are also sent by us, on your behalf, to the addresses you enter. Your customers never need to create a Clamp account to view or sign documents.

11. Free Web Estimate on clamppro.com

You can request a free estimate draft on clamppro.com/estimate without creating an account. This section describes what that tool collects. It does not change anything above about the App.

What we collect. When you request a draft we receive:

• the job description you type;
• the email address you give us, so we can send you the draft and limit each address to a small number of free drafts;
• whether you chose contractor or homeowner;
• that you joined the Clamp newsletter, and when. Requesting a free draft adds your address to the newsletter;
• a hashed form of your IP address, used only to limit how many drafts can be requested from one connection each day;
• the campaign parameters in the link you arrived through (such as utm_source), the page you first landed on, and when that was, so we can tell which sources lead people to request an estimate. These are held in your browser for up to one hour while you move around the site, and are saved with your request if you submit one. We do not record the full address of the page that referred you. When the link you arrived through carries no campaign parameters, we record only the referring site's domain (such as google.com) as its source;
• if you rate a draft, your rating and any comment you add.

What we remove first. Before your description is sent to an AI provider, stored, or emailed, we automatically try to detect and mask common phone-number, email-address, and access-code or password patterns. Automated masking may not catch everything, and it does not remove names or street addresses, so please do not include addresses, names, phone numbers, or access codes in your description. The estimator does not need them.

Who processes it. Your description is sent to Anthropic (Claude) to generate the draft, or to OpenAI only if Anthropic is temporarily unavailable. Your request is checked by Cloudflare Turnstile to block automated abuse; Turnstile may process technical information about your browser and connection. Data is stored on Cloudflare. The draft is emailed to you through Postmark. A notice of each request may also be emailed to the Clamp team for abuse monitoring and product review; it may include the masked description, the email address you gave, the estimate total, and campaign/source information. Under our current commercial API arrangements and settings, Anthropic and OpenAI do not use your inputs to train their models.

How we use it. To create and send the draft you asked for, to prevent abuse, to understand which pages and sources bring people to the estimator, and to improve the estimator's accuracy, including reviewing drafts that were rated poorly and using descriptions and drafts to train and evaluate Clamp's own estimating models. That training stays on Clamp's systems, and we do not sell or share the data. Requesting a free draft adds your address to the Clamp newsletter, and you can unsubscribe at any time without losing your drafts. Addresses that gave a draft request before the newsletter came with it (October 14, 2026) receive marketing email only if they opted in, and addresses collected before the opt-in choice existed are treated as transactional only. We never sell this information.

How long we keep it.

• The hashed IP address is cleared after 30 days.
• Your description, the draft, your rating and comment, and the campaign details are deleted after 24 months.
• Your email address is deleted at the same time, unless you joined the Clamp newsletter. In that case we keep only the address, your consent record, and whether you chose contractor or homeowner, until you unsubscribe or ask us to delete it.

Deleting it sooner. Email [email protected] from the address you used, and we will delete your drafts and email address. Because the per-address limit is counted from stored drafts, deleting them also resets that count.

12. Location: Mileage, Time on Site, and Address Lookup

Two features use your location, and both are optional and off until you turn them on: automatic mileage detection (drives are detected and logged as trips) and automatic time on site (arrivals and departures at your saved job sites are noticed so hours can be logged). Both work in the background, even when the app is closed or not in use, because detecting a drive or an arrival is only useful when you are not looking at your phone. On Android, a visible notification shows whenever either is running. Manual mileage and time entry work without any location access.

Location processing happens on your device. Clamp saves where a trip starts and ends, never the route between, and which saved job site a visit belongs to. Those records leave your phone in exactly two ways: they are included in cloud backup if you use it, and individual points are looked up to show you a street address — trip endpoints through your phone's own geocoder (Apple's or Google's), and lead addresses and visited job sites through the Google Geocoding API, which acts as a service provider and receives the coordinates or address being looked up, not your identity.

13. Crash Reports

If the app crashes, it can send us a crash report: the error and a redacted message, a stack trace, recent app events (breadcrumbs), your device model, operating system version, and app version. Crash reports are not linked to your account. The request's IP address is used only to rate-limit submissions. Crash reporting is on by default and can be turned off in Settings → Data.

To sort crashes quickly, a newly seen crash pattern may be summarized using Anthropic's API; what is sent is the technical crash material described above, not your business data. Crash reports are kept while we investigate the problems they describe.

Permissions

The App may request access to your Camera (jobsite and receipt photos), Photo Library (attaching photos), Microphone (voice notes and dictation), Location (automatic mileage-trip detection and automatic time on site at saved job sites, including in the background if you enable them; see section 12), Calendar (adding appointments and follow-ups), Contacts (saving a lead to your phone's contacts — the App only writes contacts you ask it to save; it never reads your address book), and Notifications (follow-up reminders). Each permission is optional and is requested only when the related feature is used.

Data Sharing

We do not sell your data. We share data only with the service providers that operate parts of the App and website on our behalf — PostHog (analytics), Google Analytics (website analytics), RevenueCat (subscriptions), Cloudflare (infrastructure, storage, and Turnstile bot protection), Postmark (email), Google (address lookup via the Geocoding API, section 12), Anthropic (AI drafting and crash triage), and OpenAI (AI drafting fallback) — and with authorities when disclosure is required by law. When you invite a teammate or subcontractor, we email that person on your behalf.

Data Retention

Data described above is retained only as long as needed to provide the relevant feature, or until you delete your account or request deletion.

Saved AI estimate data. Prompts, drafts, corrections, and job ZIP codes kept under "Help improve AI estimates" are deleted 24 months after they are collected, or when you delete your account, whichever comes first. You can delete them sooner from Settings → AI & Data.

If your subscription ends. Business data stored locally on your device is never affected by a lapsed or cancelled subscription; it stays on your device and remains yours. Cloud backups stay restorable for at least 90 days after a subscription ends, so you can recover your data on a new device during that period even without an active plan. After that period we may delete the cloud copy. New cloud backups stop while a subscription is inactive.

Free web estimate. Hashed IP addresses are cleared after 30 days. Descriptions, drafts, ratings, and campaign details are deleted after 24 months, along with the email address unless you joined the Clamp newsletter. See section 11.

Children's Privacy

Clamp is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Data Deletion

Delete your account in the App: Settings → Account → Delete my account. We email you a confirmation code; entering it permanently deletes your Clamp sign-in, your cloud backups, your project photos, your saved AI estimate data, and the other off-device data associated with your account. Business data stored locally on your device stays on your device.

What survives deletion. Signed documents and their signature evidence are kept as the legal record of agreements between you and your customers, and documents your customers were already sent remain what they received. Deleting your account also does not cancel an App Store or Play subscription — manage that with Apple or Google — and the subscription records our payment provider holds are governed by its own retention.

Delete saved AI estimate data without deleting your account: Settings → AI & Data → Delete saved AI estimate data. This removes every saved prompt, draft, correction, and job ZIP code for your account and does not affect your leads, documents, or customer portal.

Free web estimate: email [email protected] from the address you used and we will delete your drafts and email address.

If you have already uninstalled the App, email [email protected] and we will process your deletion request.

Changes and Contact

We may update this Policy from time to time; the effective date above reflects the latest revision. Questions: [email protected].