1. Information We Collect
We may collect the following types of information:
A. Information You Provide Directly
When you create an account, complete forms, or communicate with us, we may collect:
- Full name
- Company name
- Email address
- Phone number
- Mailing address
- Service areas
- Trade categories and specialties
- Insurance and licensing documents
- Tax or compliance documentation
- Payment information (if applicable)
- Preference and profile information
B. Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address
- Browser type
- Device information
- Operating system
- Pages viewed
- Referral URLs
- Date and time of access
- Usage behavior and analytics data
This information helps us improve website performance and user experience.
C. Cookies & Tracking Technologies
We may use cookies, pixels, and similar technologies to:
- Remember user preferences
- Improve platform functionality
- Analyze website traffic
- Personalize user experiences
- Support marketing and advertising efforts
You can modify your browser settings to disable cookies, though some features may not function properly.
D. Crew Application and Workforce Information
Where a vendor uses NorthPoint to manage their crew, the Service collects information about that vendor’s workers. It is collected on the vendor’s instructions, for the vendor, and it includes:
- Name and email address, and a crew number
- Location information recorded at the moment a worker clocks in and clocks out — latitude and longitude, the accuracy reported by the device, the distance from the job site, and whether that falls inside the site’s boundary
- Photographs taken at a job site as proof of service, and any notes written with them
- Answers to the questions a vendor requires at the end of a job
- Times clocked in and out, hours worked, break time, and timesheet corrections
- Pay rate, overtime exemption, role, and availability, where the vendor records them
Location is recorded at clock in and clock out only. The crew application does not track a worker’s location continuously, does not record location while the application is in the background, and does not follow a worker between jobs or after hours.
Pay rate and any labor cost figure calculated from it are visible to the vendor’s own account, not to other workers, and never to the vendor’s clients.
E. Our Role, and Your Employer’s Role
For the information described in section D, the vendor — your employer — decides what is collected and why, and NorthPoint processes it on their behalf. Where the law distinguishes a data controller from a processor, the vendor is the controller of that information and NorthPoint is the processor. The same is true of the information a vendor records about their own clients and the documents they send them.
This matters for what each of us can do for you. If you are a crew member and you want to know why information about you was collected, to have it corrected, or to have it erased, your employer holds that decision, and we will direct your request to them. We will always help: write to privacy@northpointapp.com and we will tell you what we hold, what we can change, and what we are instructed or required to keep.
Vendors: you are responsible for giving your workers whatever notice, and obtaining whatever consent, the law where they work requires before you invite them to the crew application — including any notice required for recording a worker’s location or monitoring their activity. Several states require this and the requirements differ. NorthPoint cannot give that notice for you.
2. Location Information
The crew application records a worker’s location at two moments only: when they clock in, and when they clock out. At each of those moments we collect latitude and longitude, the accuracy the device reports, the distance from the job site, and whether that falls inside the site’s boundary.
How we use it. For one purpose: to show the vendor who employs that worker where they were when they clocked in and out, so that attendance at the job site can be verified, hours worked can be calculated, and the visit can be evidenced to the vendor’s client.
Who we share it with. The vendor who employs the worker, and the cloud hosting provider that stores it on our behalf. Nobody else. We do not sell location information, we do not use it for advertising or marketing, and we do not share it with any other third party.
When it is not collected. The application does not track a worker’s location continuously, does not record location while the application is running in the background or closed, and does not follow a worker between jobs or after hours. Granting the location permission is required only to clock in and out; the rest of the application works without it.
Location information is retained for as long as the timesheet and proof-of-service records it belongs to, and is deleted with them. See Data Retention below.
3. How We Use Your Information
We may use your information to:
- Create and manage vendor accounts
- Match vendors with opportunities
- Verify qualifications and compliance
- Communicate regarding services and updates
- Send notifications and alerts
- Improve our platform and services
- Provide customer support
- Maintain security and prevent fraud
- Comply with legal obligations
- Record where a worker clocked in and out, so their employer can verify attendance at the job site, calculate hours worked, and evidence the visit to their client
- Conduct analytics and performance monitoring
4. How We Share Information
We may share information with:
A. Clients & Business Partners
Your vendor profile, qualifications, and related information may be shared with facility management companies, contractors, or clients seeking qualified vendors.
B. Service Providers
We may share data with trusted third-party providers that support:
- Website hosting
- Cloud storage
- Analytics
- Email delivery
- Payment processing
- Customer support
- Security monitoring
These providers are only permitted to use information as necessary to perform services for us.
C. Worker Location
Location recorded at clock in and clock out is shared with the vendor who employs that worker, and with the cloud hosting provider that stores it for us. It is not sold, not used for advertising, and not shared with any other third party. See Location Information above.
D. Legal Requirements
We may disclose information if required to:
- Comply with laws or regulations
- Respond to legal requests
- Protect rights and safety
- Prevent fraud or abuse
E. Third-Party AI Integration
Our proposal generation feature utilizes OpenAI's API infrastructure. When you input natural language prompts, this data is securely transmitted to OpenAI to generate your proposal draft. Per our agreement with OpenAI, this data is not used to train OpenAI models, is encrypted in transit and at rest, and is subject to standard data retention limits.
F. Automated Document Parsing
When you upload compliance documents, including Signed Form W-9s, Certificates of Insurance (COIs), and policy declaration pages, these documents are securely processed via third-party API endpoints (OpenAI) solely for the purpose of automated data extraction and formatting. This data includes tax identification numbers (SSNs/EINs), policy limits, and business contact information. Per our data processing agreement, this information is processed securely, is encrypted in transit and at rest, and is never used by the third party to train machine learning models.
5. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, disclosure, or misuse.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain information for as long as necessary to:
- Provide our Services
- Maintain business records
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
We may delete or anonymize information when it is no longer needed.
Deleting your crew app account
Crew members who use the NorthPoint mobile app can delete their account from Settings at any time. Deleting your account removes your login: it is deleted immediately, cannot be restored, and you would need a new code from your employer to use the app again.
Deleting your login does not erase the work record your employer holds. The hours you clocked, the photographs you took as proof of service, and the notes you wrote remain with your employer, and they continue to carry your name. Your employer needs them to pay you correctly, to answer their customers, and to meet record-keeping obligations that apply to them as an employer — obligations that typically require wage and hour records to be kept for several years after employment ends. We keep your name and email address on that record for the same reason: hours that cannot be attributed to a person cannot be paid.
We treat that information as confidential and do not disclose it except as described in “How We Share Information” above, or where we are legally required to do so. If you want your information erased rather than your login removed, contact your employer, who holds the employment record, or write to us at support@northpointapp.com and we will tell you what we are able to erase and what we are required to keep.
7. Your Rights & Choices
Depending on your location, you may have rights to:
- Access your personal information
- Correct inaccurate data
- Request deletion of information
- Opt out of marketing communications
- Restrict certain processing activities
To exercise these rights, contact us at:
Email: Privacy@northpointapp.com
8. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of external sites.
9. Children’s Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes become effective when posted on this page with an updated effective date.
Continued use of the Services after updates constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:
NorthPoint Enterprise
visit: www.northpointapp.com
Corporate Offices:
371 Putaum Pike STE 230
Smithfield, RI 02917
United States
E-mail: privacy@northpointapp.com
Phone: (401) 216-8841
Hours of Operation: Monday - Friday, 9am - 6pm Eastern Time