Privacy Policy — JobShot
Effective date: July 25, 2026
Updated July 25, 2026 — added U.S. state privacy rights and regional rights sections, clarified the children’s age threshold by region, and noted which retention rules apply outside Korea.
1. Overview
plien (the “Company”) is a sole proprietorship based in the Republic of Korea. We process personal information in accordance with the privacy laws that apply to us and to you — including the Personal Information Protection Act of Korea, the California Consumer Privacy Act as amended by the CPRA, and comparable laws in the other regions where JobShot is available. This policy applies to JobShot, a work-report app for field-service professionals.
JobShot is a tool for business operators (users) to create customer-facing completion reports from before/after photos and notes. You are the data controller of the customer information you enter; the Company stores and processes it to provide the Service.
2. Information We Collect and Process
When you sign up (social login)
- Email address and name from your Apple or Google account (Apple provides the name once, optionally)
- An internal random identifier (UUID)
Information you enter
- Business profile: business name, owner name, phone, profile photo (optional), report signature line (optional), payout account display details (optional — bank name, account/routing number, account holder; shown in the report’s payment section only; the Company does not use it for financial transactions)
- Job details: title, notes, price (optional), and customer information (name, contact details)
- Before/after job photos
When generating a report (generative AI) To write the report, text information (business name, customer name, job title, notes, signature line) is sent through our servers to a generative AI service (Anthropic Claude); only the generated sentences are returned. Photos are never sent to the AI (only photo counts).
When you subscribe Payments are processed by the Apple App Store; the Company never collects card details. To verify subscription status we process Apple-issued transaction data (transaction ID, product, expiry, refund status).
Collected automatically (analytics & errors)
- App version, OS, language, device model; screen and feature usage events; error logs
- To improve the Service, app session replays (screen recordings of app usage) may be captured and may include information displayed on screen
- We do not use the advertising identifier (IDFA) and do not track you across other apps or websites
3. Purposes
- Storing job records and generating/sharing customer reports (core service)
- Account management and subscription verification
- Usage and error analytics to improve the Service
- Operational monitoring (internal alerts)
4. Share Links and Photo Visibility
- Reports are shared via hard-to-guess randomized links that expire after the period you set (90 days by default). Anyone with the link can view the report — you are responsible for managing who you share it with.
- Uploaded photos are stored in storage accessible to anyone who has the (randomized, hard-to-guess) URL so they can be displayed in reports. Avoid capturing sensitive information in photos.
- Report pages are blocked from search engines (noindex).
5. Retention
| Data | Period |
|---|---|
| Account, profile, jobs, photos, reports | Until you delete your account — [Settings > Delete Account] removes everything immediately |
| Report share links | Viewable until the expiry you set (default 90 days) |
| Text sent to the AI | Used only for the time needed to process the request; not retained separately |
| Subscription transaction records | As needed for subscription management and refund handling |
| Analytics and error logs | Until the purpose of collection is fulfilled |
Where laws require retention, we retain for the required period and then destroy. (This mainly applies to records the Korean Act on Consumer Protection in Electronic Commerce requires us to keep; U.S., Canadian, Australian, and New Zealand users are not subject to that Korean retention requirement.)
6. Processors and International Transfers
| Processor | Purpose | Location |
|---|---|---|
| Apple Inc. | Sign-in authentication, in-app payments | USA and others |
| Google LLC | Sign-in authentication | USA |
| Supabase, Inc. | Database and photo storage hosting | USA |
| Railway Corp. | Backend server hosting | USA |
| Anthropic, PBC | Generative-AI report writing (Claude) | USA |
| PostHog Inc. | Usage analytics and session replay | USA |
| Functional Software, Inc. (Sentry) | Error collection and analysis | USA |
| Slack Technologies, LLC | Operational monitoring (internal alerts) | USA |
Processing involves international transfers limited to what each processor needs for its task.
7. Your Rights
You may request access, correction, deletion, or restriction of processing.
- Contact: contact@plien.io
- You can edit or delete jobs, photos, and reports directly in the app.
- Account deletion: [Settings > Delete Account] — removes your account, jobs, photos, and reports; shared links stop working.
- If your customer asks you to access or delete their information, you can edit or delete it directly in the app.
JobShot is a business tool intended for adults. We do not knowingly collect personal information from children — under 13 in the United States (COPPA) and other regions applying that threshold, and under 14 in Korea. If you believe a child has provided us information, contact contact@plien.io and we will delete it.
8. U.S. State Privacy Rights
This section applies to residents of California and of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and Oregon). It supplements the sections above.
Categories of personal information
| Category (CCPA/CPRA) | What we collect | Source | Purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Email, name, internal UUID | You / your Apple or Google sign-in | Account creation and sign-in | Apple, Google, Supabase, Railway, Slack (email and name in our internal sign-up and feedback alerts), PostHog (internal UUID only) |
| Commercial information | Subscription transaction records (transaction ID, product, expiry, refund status) | Apple App Store | Verifying your subscription | Apple, Supabase, Railway |
| Internet or other electronic network activity | App version, OS, device model, feature-usage events, error logs, app session replays | Automatically from the app | Improving the Service, diagnosing errors | PostHog, Sentry, Slack (app version and platform in our internal alerts) |
| Your business and customer content | Business profile, payout account display details, job titles, notes, prices, customer name and contact details, before/after photos | You | Storing your jobs and generating the reports you send | Supabase, Railway, Anthropic (text only), Slack (job title, customer name and report link in our internal alerts), PostHog (whatever is on screen during a session replay) |
| Professional or employment-related information | Business name, business phone, report signature line | You | Displaying your business on the report | Supabase, Railway, Slack (business name in our internal feedback alerts) |
We keep each category for the periods described in §5 Retention. See §6 for the processors involved and where they operate.
PostHog appears against the content rows above because the app session replays described in §2 are not masked: whatever is displayed on your screen — including customer names and contact details, notes, and before/after photos — can be captured in a replay.
We do not sell or share your personal information
- We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA. We have not done so in the preceding 12 months.
- We do not use the advertising identifier (IDFA) and do not track you across other apps or websites.
- Some information you enter (such as a payout account number) may be treated as sensitive personal information. We use it only to display the payment section of your own reports — never for any purpose that would require offering a “Limit the Use of My Sensitive Personal Information” choice.
- Because of the above, we do not provide a “Do Not Sell or Share My Personal Information” link. There is nothing to opt out of.
Your rights
You may request to know what we collect, access a copy, correct inaccuracies, delete your information, or limit processing. We will not discriminate against you for exercising these rights.
- Fastest route: [Settings > Delete Account] in the app deletes your account, jobs, photos, and reports immediately, and shared links stop working.
- By email: contact@plien.io. We verify requests by confirming control of the email address on the account. We respond within 45 days (extendable by 45 more where the law allows).
- Authorized agents may submit requests on your behalf with written permission; we may still ask you to verify your identity directly.
Notice about your customers’ information
You enter your customers’ names and contact details. For that information you are the business/controller and we act as your service provider — we process it only to provide JobShot to you. Requests from your customers should go to you; you can edit or delete their information directly in the app.
9. Regional Rights Outside the U.S.
- Canada — You have rights of access and correction under PIPEDA and applicable provincial laws. Contact contact@plien.io.
- Australia — We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988. You may request access or correction, or complain to us first and then to the Office of the Australian Information Commissioner (oaic.gov.au).
- New Zealand — You have rights of access and correction under the Privacy Act 2020. Complaints may be made to the Office of the Privacy Commissioner (privacy.org.nz).
- Korea — See §11 below.
10. Security
- All external communication is encrypted (HTTPS)
- Sign-in tokens are stored in the device’s secure storage (iOS Keychain)
- Report links and photo URLs are randomized and non-enumerable; report pages are blocked from search engines
- Access isolation: you can only access data in your own account
11. Privacy Officer and Complaints
- Privacy officer: plien
- Email: contact@plien.io
If you are in Korea, you may also contact the following authorities: Personal Information Infringement Report Center (privacy.go.kr / 118), Personal Information Dispute Mediation Committee (1833-6972), or the National Police Agency Cyber Bureau (ecrm.cyber.go.kr / 182).
12. Changes
This policy may be updated for legal or service changes; we will give prior notice in the app or on plien.io.