SwitchHook Privacy Policy
SwitchHook is a construction field-reporting service operated by DDAI Enterprises, LLC ("DDAI," "we," "us"). SwitchHook is a business tool: construction companies use it so that their field and office teams can create daily reports, work orders, patch tickets, safety records, and related project documentation. This policy explains what information the SwitchHook web and mobile applications collect, how it is used, and the choices available to you.
SwitchHook accounts are created by invitation from a customer company. There is no public self-service signup. In most cases, your employer (or the company that invited you) controls the workspace your information belongs to; DDAI processes that information to provide the service to that company.
Information we collect
- Account and profile information. Your name, email address, and mobile phone number, all provided when your invited account is created, together with an internal account identifier. Sign-in credentials are handled by our authentication provider; we never store your password in readable form.
- Field and project information. The content your company's team enters into SwitchHook: project details, daily report text, work order and patch ticket descriptions, safety inspection responses, deficiency notes, receipts, and similar records.
- Labor and work information. Work entries recorded on reports, such as employee or subcontractor names, crews, hours, and trades.
- Photos, videos, and documents. Media that users capture or attach as field evidence — job-site photos (with any markup and captions), short videos, PDFs, and uploaded documents.
- Workflow and audit activity. SwitchHook keeps append-only records of workflow actions (for example, who submitted, approved, sent, or locked a record, and when). These audit records include the acting user's name, email, and role, and exist so that companies have a defensible history of their project documentation.
- Diagnostics. Basic technical information sent with or recorded alongside requests — such as IP address, browser/device user-agent strings, sign-in/session reliability events, and media-upload diagnostic events — used to operate the service, keep sign-in working, and troubleshoot problems. IP address and user-agent are also recorded as part of the audit evidence attached to signed submissions, so a record shows the circumstances under which it was signed. SwitchHook does not use third-party analytics, crash-reporting, or advertising SDKs, does not use IP address to locate app users, and does not collect device location.
How we use information
- To provide the SwitchHook service to your company: creating, storing, sending, and displaying project records.
- To authenticate users and keep workspaces separated between companies.
- To maintain audit histories that companies rely on for contractual and legal record-keeping.
- To send service emails (for example invitations, password resets, and report deliveries to designated recipients).
- To operate, secure, and troubleshoot the service.
We do not sell personal information, and we do not use it for advertising.
Service providers
SwitchHook runs on established infrastructure providers that process data on our behalf:
- Supabase — authentication and database hosting.
- Vercel — application and API hosting.
- Amazon Web Services (AWS) — media storage (S3), media delivery (CloudFront), and video processing (MediaConvert).
- Resend — transactional email delivery (invitations, password resets, report sends).
These providers process data only to provide their services to us. Apart from these service providers, we share information only within your company's workspace, with recipients your company designates (for example, a general contractor receiving a shared report), or when required by law.
Encryption and security
All data is transmitted over encrypted connections (HTTPS/TLS), including uploads of photos, videos, and documents. Access to company data is enforced server-side with per-company and per-project authorization, including database row-level security. Original field records are protected against silent alteration by design.
Retention
Field records — reports, work orders, tickets, safety records, photos, videos, and their audit histories — are business records owned by the customer company. Construction documentation frequently carries contractual, regulatory, and legal significance, so these records are retained for the company for as long as the company's workspace requires them. Account profile information is retained while your account is active.
Deleting your account
You can delete your SwitchHook account at any time:
In the app: open Account → Delete account and confirm with your password.
On the web (no app needed): visit app.switchhook.ai/delete-account.html, enter your account email, and confirm through the link we send you. Links are single-use and expire after 30 minutes.
What is deleted. When your deletion completes, your sign-in account is permanently deleted: your credentials, sessions, name, email address, and phone number are removed from your profile, and you are removed from every company roster, project, and seat. Your email address can no longer sign in, reset a password, or recover the account. If the same email address is later invited again, it starts as a completely new account with no connection to the deleted one.
What is retained, and why. SwitchHook is a construction field-records system. Business records created for your company — submitted daily reports, work orders, patch tickets, photos, safety records, delivery and audit histories — belong to the company's project record and are retained for the company's contractual, legal, and safety obligations. Historical documents keep the name recorded on them at the time they were made, the same way a signed paper form would. Where a record needs an internal reference to the deleted account, we keep only a random identifier that contains no name, email address, or phone number. Current-state screens show “Former user” instead of your identity.
Companies you own. If you are the only owner of a company that still has other members, you must transfer ownership to another member before deletion can proceed — a company is never left without an owner. If you are the only member of a company, you will be asked to confirm that the company workspace is closed as part of your deletion; a closed company keeps its historical records but can no longer accept members.
Drafts on your devices. Locally saved, unsubmitted draft state on your devices is not deleted by account deletion, but it becomes inaccessible to the app once your account is gone. (Parts of a draft that were already uploaded — for example photos attached before submission — may exist on SwitchHook's servers and are handled under the record retention rules above.) Submit any work that needs to be retained before deleting your account.
Timing. Deletion normally completes within minutes of your confirmation. Your access to SwitchHook — your roles, project access, and company memberships — is removed during the deletion process, and your sign-in account is then permanently deleted. If a technical step fails partway through, the system automatically retries until deletion completes; you do not need to do anything, and by that point your access has already been removed.
Children
SwitchHook is a workplace tool intended for business use by adults. It is not directed to children, and we do not knowingly collect information from anyone under 18.
Changes to this policy
If we make material changes to this policy, we will update this page and its effective date. This page is the current version at all times.
Contact
DDAI Enterprises, LLC
Privacy inquiries: support@ddaienterprises.com