Legal · Effective September 26, 2026

Privacy Policy

This policy tells a shop owner what Doing Work LLC collects, who we share it with, and how to ask for a copy or deletion.

Who we are

Doing Work LLC, an Idaho limited liability company in Coeur d’Alene, Idaho, runs Doing Work and this website. Contact contact@doingwork.work.

Doing Work is offered to businesses in the United States, and this website isn’t aimed at people outside the US.

What we collect

We collect account information: owner and staff names, work email, mobile phone, and shop name. We collect shop data you enter: customers and their contact details, jobs, visits, quotes, invoices, payment status, and notes. Stripe holds card details. We get the card brand, last four digits, expiry, and payment status. We keep text message records, described in Text messages below. We keep sign-in and security logs: IP address, browser, and sign-in times.

If you use them, we also collect photos and signatures taken on a visit. When you accept our terms, we record the time, IP address, and browser. For ad measurement, we keep ad click IDs and the IP address and browser you signed up from while your account is open.

This website uses cookies to count visits and to see which of our ads worked. Details are in Ads and cookies below. It also loads fonts from Google Fonts, which receives your IP address.

How we use it

We use this information to run Doing Work for your shop, sign you in, bill you, send the emails and texts you ask it to send, support you, keep the service secure, measure our own ads, and meet legal duties. We don’t sell personal information for money. Some state privacy laws may treat sharing data with Google and Meta to measure ads as “selling” or “sharing.” You can opt out of that at Your privacy choices, and we honor Global Privacy Control. We don’t use your shop’s customer list to market to them.

Ads and cookies

We advertise Doing Work on Google and on Meta (Facebook and Instagram). To see which ads bring in paying shops, this website uses Google Tag Manager, Google Analytics, the Google Ads tag, and the Meta Pixel. They set cookies in your browser that record the pages you view on doingwork.work and whether you came from one of our ads.

If you arrive from an ad, we also save that ad’s click ID in our own cookie for 90 days. That way the Doing Work app can tell which ad you came from if you sign up later.

When you create a Doing Work account, and again when you make your first payment, our server tells Google and Meta. We send:

• your work email, hashed with SHA-256 first, so what leaves our server is a long string of letters and numbers, not the address
• the click ID from the ad you clicked, if you came from one
• for Meta only: the Meta cookie ID in your browser, the browser type and IP address you signed up from, and a hashed copy of your Doing Work account ID
• for your first payment, the amount and currency

Google and Meta compare the hashed email with hashed emails of their own users to match your signup to an ad. For our own ads, we never send your phone number, your name, your card details, or anything from your shop’s records or your customers.

Google and Meta handle this data under their own policies: the Google Privacy Policy and the Meta Privacy Policy. To turn all of this off, see Your privacy choices.

Your shop’s customers

For customer data the shop enters, the shop decides how it is used. Doing Work LLC handles that data as the shop’s service provider. A customer who wants their data seen, corrected, or deleted should ask the shop. We help the shop do it. A customer can also email contact@doingwork.work, and we pass the request to the shop.

When a shop deletes a customer, Doing Work removes their name, email, phone number, and street address. Invoice amounts and the city, state, and ZIP code needed for tax records stay.

If a shop connects its own Google Ads or Meta account and turns on ad uploads, Doing Work sends that shop’s ad account a hashed email address, the ad click ID, and the invoice amount, only for customers the shop marked as agreeing to marketing. This goes to the shop’s ad account, not ours. We never send phone numbers.

Who we share it with

• For hosting, Fly.io runs the app, Neon stores our database, and Cloudflare runs this website and our DNS.
• For payments, Stripe processes our subscription charges. When your customers pay your invoices, they pay your shop through your own Stripe account, and Stripe is your payment processor for those payments.
• For email, Resend delivers sign-in codes, quotes, invoices, and reminder emails.
• For texting, Twilio delivers text messages.
• For measuring our own ads, Google (Tag Manager, Analytics, and Ads) and Meta (the Meta Pixel and Conversions API). See Ads and cookies.

Each gets only what it needs to do that job. When your shop connects QuickBooks Online, Google, or Meta, we send that company the data needed for what you turned on. When you give an AI agent a key, that agent can read and act on shop data within the access you gave the key.

We also share information if the law requires it, or if the business is sold. The buyer keeps this policy’s promises for existing data.

Text messages

Shops use Doing Work to text their own customers about visits. Doing Work also sends account texts to shop owners who ask for them at signup. Sample messages and the full program details are on our text messaging page. Customer texts turn on after the shop’s texting number is approved, which can take from a few days to a few weeks.

What texts are sent

A shop can text its customers an appointment reminder before a visit, an On My Way text when the tech heads out, and one follow-up after a finished visit that thanks the customer and links to the shop’s review page. Doing Work sends account texts only to shop owners who opted in. Today these are test previews the owner asks for, so they can see a reminder on their own phone. Neither kind of text is used for marketing.

Who sends them

Visit texts come from the shop, using Doing Work. Each shop texts from its own verified toll-free number, and every text starts with the shop’s name. The shop decides who gets texts and collects each customer’s consent. For those texts, Doing Work LLC handles phone numbers as the shop’s service provider and uses them only to send the shop’s texts. Account texts come from Doing Work’s own toll-free number and start with “Doing Work:”.

How consent is collected

A customer agrees to visit texts in one of two ways: by ticking an optional, unchecked box on the shop’s booking form, or by saying yes when the office asks. Giving a phone number alone isn’t agreement. The office records a spoken yes in the customer record, and Doing Work saves who recorded it and when. Owners opt in to account texts with an optional, unchecked box at signup. Agreeing to texts is never required to book a visit or to buy Doing Work.

What we keep

We keep the mobile number, the consent record (how and when consent was given, and who recorded it), the texts sent, their delivery status, and any STOP or START reply. We keep these records so a shop can show how a customer agreed, and so a number that replied STOP is not texted again.

How often, what it costs, and how to stop

Message frequency varies. Visit texts are usually 1 to 4 per visit. Message and data rates may apply. Reply STOP to any text to opt out, and reply HELP for help. Replying STOP to a shop’s number stops texts from that shop only. Reply START to opt back in. Every customer text ends with “Reply STOP to opt out.”

Who we share it with

Texts are delivered through Twilio, which receives the phone number and the message only to deliver it. Twilio is a subprocessor of Doing Work LLC. Mobile phone numbers and SMS opt-in consent are not sold or shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

Questions

For a shop’s texts, reply HELP to get the shop’s contact details, or call the shop. For Doing Work account texts or anything in this policy, email Doing Work LLC in Coeur d’Alene, Idaho, at contact@doingwork.work.

How long we keep data

We keep account and shop data while your account is open, and after you cancel, so you can come back or export it. To delete your shop, use Delete account in Settings or email contact@doingwork.work from the account owner’s email. After 7 days, in case you change your mind, we remove your customers’ names, emails, phone numbers, and street addresses. We keep invoice, payment, and tax records, subscription billing records, the account owner’s name and email, text consent and STOP records, and security and audit logs, because we need them for taxes, payment disputes, and proving consent. Our database host keeps a short restore history, so removed data can remain in it for up to 6 more hours.

Your privacy choices

You can turn off ad tracking in this browser. After you do, this website won’t load Google Tag Manager, Google Analytics, the Google Ads tag, or the Meta Pixel, and it won’t save an ad click ID. If you then sign up from this browser, we won’t send your signup or your payments to Google or Meta.

Turn off ad tracking in this browser Ad tracking is on in this browser.

The choice is saved in a cookie on doingwork.work for one year. It only covers this browser, so set it again on another device or after you clear your cookies.

If your browser sends a Global Privacy Control signal, we treat it the same as pressing the button. Firefox, Brave, and DuckDuckGo can send it.

Our website doesn’t respond to browser Do Not Track signals, because there is no common standard for them. We do honor Global Privacy Control, as described above.

Signed up from a different browser? Email contact@doingwork.work from the account owner’s email and we’ll stop sending your account’s events to Google and Meta. We can’t pull back ones already sent.

Turning off ad tracking doesn’t change how Doing Work runs for your shop, or the emails and texts you asked for.

Your choices and requests

Email contact@doingwork.work from the account owner’s email to get a copy of your data, correct it, or ask to delete your account. What we remove, and what we keep, is in How long we keep data. We reply within 30 days. Staff with a seat can ask the shop owner. We may need to confirm who you are first. To turn off ad tracking, use Your privacy choices above.

Security

Connections use HTTPS. Sign-in uses one-time email codes. Card details stay with Stripe. Only Doing Work LLC’s owner can access shop data behind the scenes, and only to run, fix, or support the service.

No system is perfectly secure. If a breach affects your data, we’ll tell the account owner by email as the law requires.

Children

Doing Work is for businesses and isn’t meant for anyone under 18. We don’t knowingly collect personal information from children under 13. If we learn we have it, we delete it.

Changes to this policy

We post changes here and update the effective date. We email account owners about material changes before they take effect.

Contact

Doing Work LLC, Coeur d’Alene, Idaho. Email contact@doingwork.work.

Effective September 26, 2026.

Also see Terms · Refund · Text messages.