Foremann is a business SMS tool. Every message your clients send, and every reply your foreman drafts, is data we're trusted with. This page explains what we collect, why we collect it, and what you can do about it.
"Foremann," "we," "us," and "our" refer to the company operating the Foremann product — a mobile and web service that provisions a dedicated business phone number for tradespeople and drafts reply suggestions for inbound text messages. If you're a solo plumber, landscaper, electrician, or other contractor using Foremann, you're the "contractor" or "user." The people who text your business number (your customers) are "clients" in this policy.
You can control session cookies through your browser settings, but disabling them will prevent you from staying logged in. Cookieless analytics cannot be blocked because they don't use cookies.
We use the data above only to:
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following lawful bases:
If you have questions about our legal bases or wish to object to any processing based on legitimate interests, email privacy@foremann.app.
Draft replies, summaries, and follow-up suggestions are generated by Anthropic's Claude models via the Anthropic API. To generate a draft, we send the relevant conversation thread and your business profile to Anthropic as a prompt. Anthropic processes the prompt, returns the draft, and — per their API terms — does not use API inputs or outputs to train their models. We use prompt caching to reduce cost, which means portions of your business profile may sit in Anthropic's short-lived cache for a few minutes at a time.
We share your data only with service providers that make Foremann work, and only as needed:
We do not sell your data. We do not share it with advertisers. We do not share it with other Foremann customers.
We may disclose information if required by law, subpoena, or valid government request, or to protect the safety, rights, or property of Foremann, our users, or the public. If we ever merge with, are acquired by, or sell assets to another company, your data may be transferred as part of that transaction; you'll be notified before it moves.
Data Processing Agreements (DPA). If your business is subject to the GDPR, CCPA, or similar data protection laws and you require a formal DPA with Foremann, email privacy@foremann.app. We will execute a DPA with you on reasonable, standard terms.
When a client texts your Foremann business number, we store the message, their phone number, and any name, address, or note you attach to their record. You are the data controller for your client list — the decisions about who to message, what data to collect about your customers, and how long to keep it are yours. Foremann acts as a data processor on your behalf: we store and process that client data only to provide you the Service, not for our own purposes.
You are responsible for having the right to contact those clients under applicable law (including the TCPA in the United States). If a client asks to be removed, archive them in the app and stop messaging them; you can also delete the client and their conversation from your account. If a client contacts us directly about their data, we will route the request to you as the business that collected it, and we will cooperate with any deletion or access request you direct us to fulfill.
We use encryption in transit (TLS) for all traffic between your device, our servers, and our subprocessors. Data at rest in Supabase is encrypted. Access to production systems is restricted to a small set of employees and is credential-protected. We validate Twilio webhook signatures on every inbound message. No system is perfect, though — if we experience a security incident that affects you, we'll notify you as required by law.
Depending on where you live (California, Colorado, Virginia, the EU/UK, and others), you may have the right to:
To exercise any of these rights, email privacy@foremann.app. We'll respond within 30 days (or 45 days if we notify you of an extension). We won't retaliate against you for exercising your rights. We may need to verify your identity before acting on your request.
California residents (CCPA/CPRA): we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding 12 months. We do not use sensitive personal information for purposes beyond those necessary to provide the Service. The categories of personal information we collect are listed in Section 2; the purposes are in Section 3. You have the right to know, delete, correct, and opt out. To submit a verifiable consumer request, email privacy@foremann.app or use the deletion option in the app settings. We will not discriminate against you for exercising these rights. California's "Shine the Light" law (Civil Code § 1798.83) allows residents to request disclosure of personal information shared with third parties for direct marketing purposes in the prior year; we do not share personal information for direct marketing and have no disclosures to make.
Marketing opt-out: every marketing email we send includes a one-click unsubscribe link. You can also opt out at any time by emailing privacy@foremann.app. Opting out of marketing does not affect account-essential communications (billing, security, service notices).
U.S. carriers require that application-to-person (A2P) messaging be registered and
that senders have permission to text recipients. When you use Foremann to send
SMS, you are the sender in the eyes of the carriers, and you agree to follow all
applicable rules, including the TCPA and CTIA Messaging Principles. Standard
message and data rates from the recipient's carrier may apply. Recipients can
reply STOP at any time to opt out; we'll block further messages from
your number to that recipient automatically.
Foremann is a business tool and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, email us and we'll delete it.
Foremann is operated from the United States. If you're accessing the service from outside the U.S., your data will be transferred to and processed in the U.S. and in the regions where our subprocessors operate. By using Foremann, you consent to that transfer.
EEA/UK users: if you are accessing the Service from the EEA or United Kingdom, transfers of your personal data to the United States are covered by appropriate safeguards, which may include Standard Contractual Clauses (SCCs) approved by the European Commission or the UK International Data Transfer Agreement. To request a copy of the applicable transfer mechanism, email privacy@foremann.app.
We'll update this page when our practices change. If the change is material, we'll notify you by email or in the app before it takes effect. The "Last updated" date at the top reflects the current version.
Questions, requests, or complaints?
Email: privacy@foremann.app
General: hi@foremann.app