Privacy policy

Version: 1.1 · Effective: 7 October 2026

This policy explains what Bootstrap Digital, Inc., a Texas corporation in formation ("Roughneck", "we", "us") collects, why, who receives it, how long we keep it, and the choices people have. It covers:

• users of the Roughneck app: owners, sales leaders, sales representatives and operations staff at the oilfield service companies we serve;
• people whose details our customers record in the app (for example a customer's company man or buyer);
• people named in public filings that the app shows;
• people who sign a document through a link a Roughneck customer sends them; and
• visitors to our websites (roughneckcrm.com and roughneck.app).

Roughneck is built for businesses. It is not for personal, family or household use, and not for anyone under 18.

1. Two roles we play

For our customers' data we act for the customer. A shop (our "customer") uses Roughneck to keep its accounts, contacts, calls, notes, quotes and documents. That information belongs to the shop, and we handle it on the shop's instructions, as its service provider (a "processor"), under our Data Processing Addendum. If your details are in a shop's records, the shop decides what is kept and why. Please contact the shop first; we will help it answer you.

For everything else we decide. For users' accounts, sign-in, device and error records, the public-record data we collect, and our websites, we decide how information is used. This policy is our notice for those.

2. What we collect

From users of the app

Information our customers put in the app

A shop's users record information about their own customers and prospects:

• names, roles, phone numbers and email addresses;
• birthdays and when they met someone;
• gifts given, with their value;
• call logs and notes, meeting dates and next steps;
• office addresses;
• quotes, proposals, field tickets and the signatures on them.

Voice notes (the Tell Todd add-on). A user can log a call or a meeting by speaking instead of typing. Where the phone's own speech recognition (Apple's or Google's, chosen by the browser) can do it, the words never leave the phone. Where it cannot, the recording is sent to our server, turned into words by OpenAI, and the recording is discarded. We keep the words as the user's note, the same as a typed one. We do not keep the recording, and no one else's voice is recorded: the microphone is on only while the user is speaking his own note. OpenAI's handling of the recording during processing is governed by its API terms. When Todd answers out loud, the words of his answer, which can name your accounts and contacts, are sent to OpenAI or ElevenLabs to make the audio in Todd's voice, and the audio is played on the phone. Roughneck does not keep that audio. If neither can be reached, the phone's own voice reads the answer instead. Each provider's handling of the words during processing is governed by its terms.

Documents you bring in. If you attach a quote, contract or invoice you made outside Roughneck, as a PDF or a photo, we store the file on our hosting provider's servers, where only members of your company's account can open it, through a link that lasts a minute. A copy stays on your phone until you sign out. If you ask Roughneck to read it into a quote you can sign (with The Handshake add-on), the file is sent to OpenAI to be read, and the lines, terms, addressee and totals come back. Nothing is read unless you ask. We keep the file and what was read from it. OpenAI processes it under its API terms. Check every line against your original before you send it.

All of this is kept on our servers, not only on the phone, so each user can work on any device and nothing is lost. The shop's owners and sales leaders can see every user's records in the shop, including notes. We process this information for the shop, as section 1 explains.

From public records

For the states a shop buys, the app shows information published by government agencies and other public sources, for example:

• a state oil and gas regulator's operator register and drilling permits (which can include an operator's officer or contact, a phone number, and the person who signed a permit);
• rig counts and completion reports;
• commodity prices;
• weather forecasts.

We collect it from the agencies' own published files, and show the source and the date collected. See section 8 if you are named in a filing.

From people who sign through a link

When a shop sends you a document to sign through Roughneck, we record:

• your name and title as you give them;
• your signature image;
• the time you signed;
• the document's fingerprint;
• the kind of device and browser you use, its screen size, time zone and language, and the country your connection comes from (not your full IP address).

If the shop asks for a photo-ID check, Stripe Identity handles it. You show a government photo ID and, where Stripe asks, take a selfie so Stripe can match the two. The Signer Notice explains this, and asks for your consent, before you start.

• Your face measurement. Only Stripe creates the biometric comparison of your face with your ID. Stripe deletes it within one year. We never receive it.
• Your ID images, selfie and the details read from your ID. They are stored at Stripe, in our Stripe account. Once the result is saved, we ask Stripe to delete them from our account, which Stripe completes within 4 days. Until then, only our staff who run the service can view them, and only to deal with a problem with the check. The shop that sent you the document cannot view them.
• What we keep. Whether the check passed, the name on the ID, and when it was done, with the signed document.
• Stripe's own use. Stripe may keep some of this information for its own purposes, such as preventing fraud, under its own privacy policy. You can ask Stripe about it at privacy@stripe.com.

We do not sell, lease or trade ID images or biometric data, or profit from them, and we disclose them only where the law requires.

From visitors to our websites

On roughneckcrm.com, the request-access form collects your company, what it sells, the states it works, how many people sell, your name, role, phone and email, the billing term you prefer, the page you sent it from and your browser's description. The website uses no cookies and no analytics. It keeps your light or dark setting in your browser, and loads fonts from Google Fonts. Our hosting providers keep standard request logs (IP address, time, page and browser) for security.

3. How we use it

We use information to:

• run the Service: sign you in, keep your work in step across your devices, and show public-record data;
• keep it secure: enforce the two-device limit, detect and stop abuse, and investigate problems;
• fix errors and support you;
• bill our customers and keep business records;
• improve the Service. We use usage and error information for this, not the content of our customers' records;
• comply with the law, and protect our rights and those of others.

We do not sell personal information. We do not use it for targeted advertising. We do not use our customers' records to train any machine-learning model. Roughneck has no advertising, analytics or tracking code.

4. Storage on your device (there are no cookies)

The app uses no cookies. To work offline and quickly, it stores the following in your browser, all needed to run the Service:

• your work and settings;
• your sign-in session;
• a copy of the public-record data for your states;
• a random device identifier;
• recent weather and price data;
• a cached copy of the app itself.

Sign out removes your work, the public-record copy and your session from the device. It first sends anything not yet saved. Wipe this device in Settings removes everything except the random device identifier and a note of whether the app was installed. The identifier stays so that a signed-out device keeps counting against the two-device limit. It contains nothing about you.

5. Who receives it

• Your shop. Everything a user records in the Service is the shop's, and the shop's owners and sales leaders can see it.
• Our service providers, who run the Service for us under contracts that limit their use of the data. They are listed with their locations in our subprocessor list:
• Supabase (database, file storage, sign-in and server functions; it also sends the sign-in email, through Resend);
• Vercel (hosting the app);
• Stripe (only for the photo-ID check; Stripe also decides for itself how it uses some of what it collects in the check, such as for preventing fraud);
• Google (an address lookup, which receives a company's name, city and state and never a person's name).
• OpenAI (for three things only, under the add-ons that use them: a voice note, when the phone cannot turn speech into words itself, where it receives the recording and the words and Roughneck keeps the words only; Todd's spoken answers, where it receives the words of the answer and returns the audio, which Roughneck does not keep; and a document a user asks Roughneck to read into a quote, where it receives the file and Roughneck keeps the file and what was read).
• ElevenLabs (only to make Todd's spoken answers under the Tell Todd add-on, when Roughneck runs Todd's voice on it, where it receives the words of the answer and returns the audio; Roughneck does not keep the audio).

How long OpenAI and ElevenLabs keep what we send. Roughneck sends each of them only what the task needs. OpenAI does not use data sent through its API to train its models. Recordings sent to OpenAI for transcription are not kept by OpenAI for abuse monitoring; other requests, including a document read into a quote and the words of Todd's answers, may be kept by OpenAI for up to 30 days for abuse monitoring, unless the law requires longer. ElevenLabs keeps the words it receives and the audio it returns under its own privacy policy and does not publish a fixed period; items it deletes stay in its backups for up to 30 days. Neither service is given anyone's ID images or biometric data.

• Services your browser contacts directly. To show the app, your browser loads fonts from Google Fonts and a code library from jsDelivr, and asks the US National Weather Service for forecasts by county. Those services see your IP address. They receive nothing else about you.
• Services you open. When you tap a map, a LinkedIn search or a state agency's page, that site opens with the company or person you tapped. What it does is covered by its own policy.
• The other party to a document. A signed document goes to both the shop and its customer. Anyone holding a document's verification code can confirm it exists and see its number, the parties, the date signed and the total.
• For legal reasons. We disclose information where the law or valid legal process requires, or to protect people's safety or our rights. For our customers' records, we tell the customer first unless the law forbids it.
• In a business transfer. If Roughneck is merged or sold, information may pass to the new owner under this policy.

6. Where it is kept

The Service's data is stored in the United States (AWS us-east-1, Northern Virginia). Some of our people work outside the United States, including in Saudi Arabia, and may access data from there to run and support the Service. They do so under the same protections.

7. How long we keep it

We will send the full schedule to anyone who asks.

Biometric data: retention and destruction policy

This is our written, public policy for biometric identifiers and biometric information, under the Texas Business and Commerce Code §503.001 and the Illinois Biometric Information Privacy Act (740 ILCS 14/15). It applies to every signer, wherever they live.

• What it covers. The comparison of a signer's face with the photo on their ID that Stripe Identity makes during the optional photo-ID check, and the selfie and ID images used for it.
• The only purpose. Confirming that the person signing a document is the person named on the ID, for that one document. Nothing collected in the check is used for anything else.
• Consent first. Nothing is captured until the signer has read the biometric notice and given a written release on the signing page. A signer who says no is offered another way to sign by the vendor.
• Who holds it. Stripe, Inc. creates and holds the face comparison. Roughneck and the vendor never receive it.
• When it is destroyed. We ask Stripe to delete the ID images and selfie from our Stripe account once the result is saved, which Stripe completes within 4 days. Stripe deletes the face comparison within one year. In every case biometric data is permanently destroyed when the purpose of the check has been met, and no later than one year after the check.
• No sale, no profit. We do not sell, lease, trade or otherwise profit from biometric data, and we disclose it only where the law requires.
• Care. Biometric data is protected with at least the care we give our other confidential information.
• What we keep. Only whether the check passed, the name on the ID, and when. That stays with the signed document.

8. If you are named in a public filing

We show information that state agencies publish, such as the officer or contact an operator filed with its regulator, or the name on a permit. It is shown so that businesses can contact the company. If a filing about you is wrong, the agency that published it can correct it. You may also ask us to correct or stop showing your personal phone number or name at connect@roughneckcrm.com. We will do so unless we need to keep it to show an accurate public record of the company.

9. Security

We protect information with:

• encryption in transit (HTTPS only);
• encryption at rest by our database provider;
• access rules that keep each shop's records to its own members;
• sign-in by one-time code;
• secret server credentials kept out of the app; and
• access for our own people limited to what they need.

No system is perfectly secure. If an incident affects a shop's records, we tell the shop within 72 hours of confirming it, and help it meet its own duties. Where the law requires us to notify people directly, we do.

10. Your choices and rights

• See and take your data. Download your own work from Settings as spreadsheets: your calls, visits, notes, the people you added, your customers and your quotes. It is on for the owner and the sales leader, and the owner can switch it on for reps. The state's filings are public record and stay in the app. You can also ask us for a copy of the account information we hold about you.
• Correct it. You can change your name, title, phone, picture and signature in the app, or ask us.
• Delete it. Ask your shop to remove your seat, or write to us. We delete your account details as section 7 says. The records you made for your shop belong to the shop.
• Records a shop keeps about you. Contact that shop. If you write to us, we will pass your request to the shop and help it respond.
• State privacy rights. Depending on where you live, you may have rights to know, access, correct, delete or obtain a copy of your personal information, and to appeal our answer. We honor these requests from anyone, wherever they live. We never treat you differently for making one. We verify requests by confirming control of the email address involved. You may use an authorized agent. If we decline a request, we explain why and how to appeal.
• How to ask: email connect@roughneckcrm.com, or write to Bootstrap Digital, Inc., 5900 Balcones Drive, Ste 100, Austin, Texas 78731, USA. We answer within 30 days, sooner where the law requires.

11. Changes

We will post any change here with a new effective date. If a change is material, we will tell users in the app, and our customers by email, before it takes effect.

12. Contact

Bootstrap Digital, Inc. · 5900 Balcones Drive, Ste 100, Austin, Texas 78731, USA · connect@roughneckcrm.com