JobSilo Privacy Policy

Effective October 13, 2026 · Last updated October 13, 2026

1. Who we are

JobSilo is made by Silo Surgo LLC, a Florida limited liability company (Florida document L26000488499), 12606 Halfmoon Lake Terrace, Bradenton, FL 34211 ("Silo Surgo," "we," "us"). This policy covers the JobSilo apps for iPhone and Mac (including the JobSilo App Clip and any JobSilo Siri, Shortcuts, and widget features), the website jobsilo.app, and the customer quote pages at jobsilo.app/q (together, "JobSilo").

JobSilo is a business tool for spray-foam and polyjacking contractors ("shops"). It is offered in the United States only.

App Store seller name. Until our Apple developer account moves to Silo Surgo LLC, the App Store may show Hugo E. Lemmen, Manager, Silo Surgo LLC, as the seller. In every case, Silo Surgo LLC provides JobSilo and is responsible for this policy.

Contact: support@jobsilo.app (privacy requests and support) · (786) 878-2685 · hello@jobsilo.app (general).

2. Summary

• We collect what we need to run JobSilo: your account, your company, and the work your shop puts into it.
• We do not sell personal information. Today we do not share it for cross-context behavioral advertising or use it for targeted advertising, and jobsilo.app sets only strictly necessary cookies. We may use analytics and advertising or marketing tools in the future to improve and promote JobSilo. If we do, we will update this policy first and give you the choices the law requires (Sections 7 and 12).
• Your shop's records about its own customers belong to your shop. We process them only to provide JobSilo to the shop.
• Drives (Auto Mileage) keeps the detailed route on your iPhone. Each saved trip's start and end points, distance, and driver sync to our servers with your company records.
• You can export and delete your data in the app. We give the privacy rights in this policy to everyone in the United States.

3. Notice at collection

This table is our notice at collection under the California Consumer Privacy Act (CCPA) and a summary for every other state. Sections 4 to 9 give the detail. We do not sell any category below. Today we do not share any category for cross-context behavioral advertising or use it for targeted advertising, and we have not done either in the past 12 months.

We do not collect Social Security numbers, driver's license numbers, financial account or card numbers, biometric data, health data, or contacts from your address book. We do not draw inferences to create profiles about anyone.

4. Information we collect

4.1 From account holders

Shop owners and their team members:

• Sign-up details: name, company, email, and trade, entered on jobsilo.app.
• Account details: name, email, phone, password (stored only as a salted hash), role, and team invites.
• Passkeys: if you sign in with a passkey, the private key stays in your Apple Keychain. We store only the public key and a credential ID linked to your account.
• Company details: business name, address, logo, and settings.
• Device details: a device record and key, so you can see and revoke signed-in devices, plus push notification tokens.
• Subscription details: plan, status, first charge dates, billing email, and Stripe customer and subscription IDs. You subscribe on jobsilo.app through Stripe. Subscriptions are offered in the United States only and billed in US dollars. Stripe collects your card details. We never receive your card number.
• Support messages and feedback you send by email or from the app.

4.2 Content you put in JobSilo

Customers, quotes, jobs, schedules, invoices, expenses, payment records, notes, job and receipt photos, and other records. These sync to our servers so your team can use them on every device.

• Voice notes: Apple's speech recognition turns your speech into text, on your device when it can. If it can't, Apple may process the audio on Apple's servers. JobSilo deletes the temporary audio file and keeps only the text. We never upload or store your audio.
• Drives (Auto Mileage): if you turn on Drives, your iPhone uses location (including in the background) and motion to detect drives. The detailed route stays on your iPhone and is not uploaded. Each saved trip's start and end points, distance, purpose, labels, and driver name are stored with your company records on our servers. JobSilo does not stream your live location to us.
• Photo locations: if your iPhone has a location fix when you take a photo in JobSilo, we save that latitude and longitude on the photo record, or "No GPS" when there is no fix. A photo taken with the JobSilo camera is recompressed, and the app does not add a location tag to the file. A photo you choose from your library is kept as chosen, so any location tag already in that file may remain. Our servers store photo files as received and do not read or remove location data in them. Location is optional; you can type addresses by hand.
• Calendar: if you allow it, JobSilo adds jobs to your device calendar. We do not upload your calendar.
• Weather: to show a forecast for a job, your device asks Open-Meteo directly, sending the job's coordinates. Open-Meteo also sees your device's IP address.
• Siri, Shortcuts, and widgets: when you use Siri, Shortcuts, or a JobSilo widget or control, the app reads your JobSilo data on your device to answer or to show your next job. We do not send that data anywhere else for these features. Apple handles your voice request to Siri under Apple's privacy policy.
• AI features: JobSilo's suggestions use Apple's on-device Foundation Models. That processing happens on your device. Your data is not sent to us or to any third party for AI processing, and we do not use your content to train AI models.

4.3 About your shop's customers

A shop may enter its customers' names, phone numbers, emails, job-site addresses, and notes.

• Quote links: when a customer opens a quote link, we record that the link was opened and the quote viewed.
• Signatures: if the customer signs, we record their typed name, signature image, the time, and the consent they gave. On the web quote page, we also record the signer's IP address, browser user agent, consent version, and a fingerprint of the quote content. Quotes opened in the JobSilo App Clip use Apple's CloudKit to deliver the quote and the signature.
• Payments: if the customer pays, Stripe processes the payment for the shop, on the shop's own Stripe account. A shop either connects its own Stripe account to JobSilo through Stripe Connect, or uses a Stripe Payment Link from its own Stripe account. With a connected account, the charge is made directly on the shop's account. The money goes to the shop and never passes through our Stripe account, and we take no fee from it. We receive the payment status, amount, currency, and the quote it pays. For a connected account, we also keep its Stripe account ID and whether it can accept charges and payouts. We never receive card details.
• Texts and emails to customers: the shop sends these itself, from its own phone or email app or, for texts, through its own Twilio account connected in the app. We do not send them. For texts sent through the shop's Twilio account, Twilio reports delivery status to us (see Section 8).

For this information, the shop decides what is collected and why, and we process it for the shop (see Section 13). Silo Surgo LLC is not a party to any sale between a shop and its customer.

4.4 Technical data

Our servers log each request, and our host may record request metadata such as IP address. These logs are kept up to 7 days. To stop password guessing, we keep the IP address (shortened for IPv6) and the email used in sign-in attempts for about 2 days.

5. How we use information

We use information to:

• run JobSilo: sign-in, sync across your devices, team access, quotes, scheduling, photos, invoices, payment status, and Drives;
• send account emails, such as team invites, email verification, password resets, and billing links;
• bill your subscription and send the notices the law requires, such as renewal reminders and price-change notices;
• keep JobSilo secure and prevent fraud and abuse;
• answer support requests;
• send service notices about billing, security, and changes to our terms;
• understand how JobSilo is used, fix problems, and improve and develop JobSilo;
• tell account holders about JobSilo features and offers, where the law allows (you can unsubscribe at any time); and
• meet legal duties and enforce our terms.

We do not use your shop's customer information for our own marketing. We will ask before using personal information for a new purpose that is not compatible with these.

6. Who we share information with

We share personal information only with the service providers (subprocessors) below, under contracts that limit their use to providing their service to us. Each must protect personal information at least as well as this policy does. This table, together with Open-Meteo below, is the full list of companies that receive personal information through JobSilo. It also answers requests for a list of specific third parties under Oregon, Delaware, Maryland, and Minnesota law. If we add analytics, advertising, or marketing providers, we will add them to this list before they receive personal information.

Payments to shops. When a shop's customer pays, Stripe processes the payment as the shop's payment processor, under the shop's own agreement with Stripe.

Services a shop connects. If a shop connects its own Twilio account to send texts, the app sends each text from the shop's device to Twilio under the shop's own Twilio account. The recipient's number and the message go to Twilio as the shop's provider, not ours. Twilio sends us the delivery status.

Services your device contacts directly. Open-Meteo provides weather forecasts. Your device sends it a job's coordinates, and Open-Meteo sees your device's IP address.

We also disclose information:

• inside your company account, to team members according to their roles;
• to your shop's customers, when you send them a quote, invoice, text, or email;
• for legal reasons, when the law, a court order, or legal process requires it, or to protect the rights, safety, or property of our users, the public, or Silo Surgo; and
• in a business transfer, such as a merger or sale of the business, in which case this policy continues to apply to the information.

7. Cookies and similar technologies

Today, jobsilo.app sets only strictly necessary cookies, and only when you open a link we emailed you: jobsilo_billing on the Manage billing page, jobsilo_verify on the email-verification page, and jobsilo_reset and jobsilo_reset_email on the password-reset page. The link cookies hold the one-time link token. jobsilo_reset_email holds the email from that link so the form can show it. Each cookie is limited to that page and expires after 2 minutes. The site also uses your browser's session storage for a few short-lived settings that make pages work (for example, checking whether a quote link can open), which are deleted when you close the tab. Because these are strictly necessary, the site shows no cookie banner today.

Our host, Cloudflare, may ask your browser to send network error reports so we can keep the site reachable. When you pay or manage billing, you leave jobsilo.app for Stripe's pages, where Stripe's own cookie policy applies. In the future, we and our service providers may use analytics or advertising cookies, pixels, software development kits, and similar technologies to understand how JobSilo is used, to improve it, and to measure and deliver our marketing. Before we do, we will update this section to list them, and we will ask for your consent or give you a way to opt out where the law requires, including the choices in Section 12.5. You can also set your browser to block or delete cookies; strictly necessary cookies are needed for emailed links to work.

8. Device permissions and text messages

JobSilo asks before it uses your camera, photos, location, motion, microphone or speech recognition, calendar, or notifications. Each permission is optional, and paid features never require one. If you decline, you can enter information by hand. To withdraw a permission, open Settings on your iPhone or Mac and go to Privacy & Security, or to Settings → JobSilo.

Text messages. A shop sends texts to its customers itself, either from its own phone's Messages app or through its own Twilio account connected in JobSilo. The shop is the sender. It must have the customer's consent and keep the record of it. Texts relate to the customer's job, such as quote links, "on the way" messages, and receipts. Message and data rates may apply. We do not share phone numbers or text-messaging consent with anyone for their marketing. See jobsilo.app/sms.

9. How long we keep information

10. Deleting your account

On iPhone: Settings → App Settings → This iPhone → About → Delete this account.

On Mac: Settings → App → About → Delete this account.

1. Confirm your email and password. 2. You are offered an export of your company data. Take it if you want a copy. 3. Confirm deletion.

If you are the owner, deleting your account deletes the company and everyone's access to it, and cancels your subscription immediately. No refund is given for the unused part of the period, except where the law requires. If you are a team member, your own account is removed, and the work you did for the company stays in the company's records. If you can't open the app, email support@jobsilo.app from your account email. Full steps: jobsilo.app/delete-account.

11. Your choices and rights

Everyone can, at any time:

• view, correct, and export their data in the app (the owner exports company data);
• delete their account in the app, or by emailing support@jobsilo.app;
• opt out of non-essential emails with the unsubscribe link; and
• turn off device permissions in Settings.

We honor these requests wherever you live, and we will not treat you differently for using them.

12. US state privacy rights

This section applies to residents of California and of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska, Rhode Island, and Florida, and, when their laws take effect, Oklahoma, Louisiana, Alabama, and Vermont. We give these rights to every US resident, whether or not a particular state's law applies to us.

12.1 Your rights

You may ask us to:

• Know and access: confirm whether we process your personal information, and tell you the categories we collect, the sources, the purposes, and the categories of recipients (Sections 3 to 6), and give you a copy of the specific pieces we hold.
• Correct inaccurate personal information.
• Delete personal information we hold about you.
• Portability: receive the personal information you gave us in a portable, readily usable format.
• Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects. We do not sell personal information. Today we do not share it for cross-context behavioral advertising, use it for targeted advertising, or profile anyone, but you may still make the request. If we start sharing personal information for cross-context behavioral advertising or using it for targeted advertising, we will update this policy and notify account holders before we start, add a "Do Not Sell or Share My Personal Information" link to jobsilo.app, and honor opt-out requests, including Global Privacy Control signals (Section 12.5).
• Know the specific third parties we disclose personal information to. Section 6 lists all of them.
• Question profiling (Minnesota). We do not use automated decision-making or profiling that produces legal or similarly significant effects.

We will not discriminate against you for using these rights. We do not offer financial incentives for personal information.

12.2 Sensitive personal information

We process three kinds of sensitive personal information:

• Precise geolocation: trip start and end points from Drives, and the location saved with a photo. We collect it only after you turn the feature on and allow location access in iOS, which is your consent. You can withdraw consent at any time by turning off Drives or location access in Settings. Trips already saved stay in your company records until you delete them or the company is deleted.
• Account log-in: your email with your password or passkey, used only to sign you in and keep your account secure.
• Message content: our account emails, and the delivery status of texts a shop sends through its own Twilio account, processed only to deliver the emails and to show the shop which texts failed.

We use sensitive personal information only to provide the features you request and to keep JobSilo secure. We do not use it to infer characteristics about you, and we do not sell or share it. Because we use it only for these permitted purposes, the California right to limit the use of sensitive personal information does not apply.

12.3 How to make a request

Email support@jobsilo.app from your account email, with the subject "Privacy request" and the right you want to use. We operate only online, so email is our request method. If you are not an account holder, tell us how we can reach you and which shop you deal with. We verify requests by matching them to the account email or to the shop's records, and we may ask for more information to protect your data. We respond within 45 days. If we need more time, we will tell you why, and we will finish within another 45 days.

Authorized agents. You may use an authorized agent. We may ask the agent for your signed permission and ask you to confirm your identity directly.

12.4 Appeals

If we decline your request, in whole or in part, you can appeal. Email support@jobsilo.app with the subject "Privacy appeal" within 60 days of our decision, and include the decision you are appealing. We will respond in writing within 45 days and explain the result. If we deny the appeal, we will tell you how to contact your state attorney general to submit a complaint.

12.5 Global Privacy Control

If your browser or device sends a Global Privacy Control (GPC) signal or another legally recognized opt-out preference signal, we treat it as a request to opt out of sale, sharing, and targeted advertising for that browser or device, and for your account if we know who you are. Today we do not sell, share, or use personal information for targeted advertising, so the signal does not change how JobSilo works for you. If we start sharing or targeted advertising, we will continue to honor the signal. Because there is no common standard for "Do Not Track," we do not respond to Do Not Track signals.

12.6 California

• In the past 12 months we have collected the categories in Section 3, from the sources and for the purposes listed there, and disclosed each of them for a business purpose only to the service providers in Section 6 and, for shop data, to the shop.
• We have not sold or shared personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
• Shine the Light: we do not disclose personal information to third parties for their direct marketing.

12.7 Florida

Florida residents have the same rights as everyone else under this policy. We protect personal information and give breach notices as Florida's Information Protection Act (Fla. Stat. § 501.171) requires (see Section 14).

13. Shops and their customers: our role as processor

For account, billing, security, and support information, Silo Surgo decides how the information is used and is responsible for it.

For the information a shop puts into JobSilo about its customers, jobs, and team, the shop is the business (or "controller"), and Silo Surgo is its service provider (or "processor"). We process that information only to provide JobSilo to the shop, under the shop's instructions and our Terms. We do not sell it, share it for advertising, use it for our own purposes, or combine it with other data except as needed to provide JobSilo. We pass these limits on to our subprocessors.

If you received a quote or text from a business that uses JobSilo, that business controls your information. Contact it first; its details are on the quote. You can also email support@jobsilo.app with the quote link, and we will pass your request to the business and help it respond.

14. Security

We use encryption in transit, encrypted storage at our providers, salted password hashing, limited staff access, rate limits on sign-in, and the ability to see and revoke signed-in devices. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires, and for Florida residents no later than 30 days after we determine that a breach occurred, unless law enforcement asks us to wait.

15. Children

JobSilo is a business tool for adults and is not meant for anyone under 18. We do not knowingly collect personal information from children under 13. We do not sell anyone's personal information, and we do not knowingly share the personal information of anyone under 16 for cross-context behavioral advertising. If you believe a child has given us information, email support@jobsilo.app and we will delete it.

16. Where information is stored

JobSilo runs on Cloudflare Workers, and the website jobsilo.app is hosted on Cloudflare. Photos are stored in Cloudflare R2 with a location hint of Eastern North America (ENAM). That hint is not a jurisdictional restriction, and the bucket has no jurisdiction set. Company records are stored in AWS us-east-2. JobSilo is offered only in the United States. If you use it from outside the United States, your data is transferred to the United States.

17. Changes to this policy

When we change this policy, we will post the new version here and update the "Last updated" date. If a change is material, we will tell account holders by email or in the app before it takes effect.

18. Contact

Silo Surgo LLC · 12606 Halfmoon Lake Terrace, Bradenton, FL 34211

Privacy requests and support: support@jobsilo.app · (786) 878-2685 · General: hello@jobsilo.app