Privacy Policy

This policy covers what ForeFront Systems collects, why, and what we will never do with it. It applies to the ForeFront platform and to the client websites we host.

What we collect

• Account information: your name, email, business details, and the team members you add.
• Your business records: customers, quotes, jobs, schedules, photos, and messages, entered by you or synced from services you connect.
• Operational data: sign-in timestamps, error reports, and the device information needed to deliver push notifications you turn on.

On your phone

The ForeFront app, from the App Store or Google Play, asks for each of these only when you first use the thing that needs it, and works without any of them:

• Location: where you were at the moment you start or finish a job, or clock in or out, so your business has a record of the visit. Only at that moment, while you are using the app. Never in the background, and never tracked between those moments.
• Camera and photos: only the photos you choose to add to a job or a message.
• Notifications: a token from Apple or Google that lets us send the alerts you turn on. Turn them off in the app or in your phone's settings at any time.
• Face ID or fingerprint: if you turn on the app lock, your phone checks it. We never receive or store anything about your face or fingerprint.

What we use it for

Running the service you pay for. Your data trains no AI models, feeds no advertising, and is sold to nobody. Ever.

Who else touches it

The platform runs on established providers under their own security programs: Vercel (hosting), Neon (database), Stripe (payments, which means we never see full card numbers), Resend (email delivery), Google (maps and imagery), Anthropic (the AI that helps write your website and posts, which does not train on what it is sent), Apple and Google (delivering notifications to the app), and the messaging providers connected to your account. Each receives only what its job requires.

Facebook and Instagram

When a business asks us to post to its Facebook Page and Instagram account, we connect to Meta with the business's permission. We receive and keep only what posting needs: the Page's name and id, the linked Instagram account's name and id, and an access token to publish the posts the business has approved. We do not read or keep followers, messages, or anyone's personal profile. This information is used only to publish that business's posts, is never sold, and is never used for advertising.

A business can disconnect at any time, from its Meta settings or by asking us. To have the Facebook and Instagram information we hold deleted, see our data deletion page.

Text messages

When you give ForeFront your mobile number and agree to receive texts from us, we use it to send messages about your account, your service and your setup (for example appointment details, reminders and replies to your questions). Message frequency varies. Message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Your text messaging opt-in and consent are never shared with anyone. The only exception is the providers that deliver our messages, which receive only what they need to deliver them.

Your customers' information

The people YOUR business serves are your customers, not ours. We process their contact details and job history on your instructions, and questions or removal requests from them route through you. Their mobile numbers and texting consent are likewise never shared with third parties or affiliates for marketing or promotional purposes.

Keeping it safe

Data is encrypted in transit and at rest, access tokens are encrypted with dedicated keys, uploads live in private storage served through authenticated proxies, and production access is limited to the people who operate the platform.

Keeping and deleting it

We keep your data while your account is active. When your service ends, we email you an export of it. If you would like us to delete your data, ask us and we will, minus what payment and tax law requires us to retain. You can request an export at any time.

You can delete your own login at any time in the app, under Me, then Delete my account. How that works, and how to ask without the app, is on our account deletion page.

Questions

Email support@forefrontsystems.io and a person answers. We do not hide behind a form.