Privacy Policy

Hand is invoicing, payments, inventory and expense software for small service businesses. It's made by Solo Software("we", "us"). This policy explains what we collect, why, and what you can do about it. The short version: your data is yours, we use it only to run Hand, and we never sell it or use it for advertising.

Who this covers

• Businesses that use Hand: you, the account holder, and anyone you share your login with.
• Your customers. When you add a customer or send them an invoice, Hand stores their details on your behalf. You decide what's collected and why; we process it for you. Customers with questions about their data can ask the business they work with, or write to us.
• People on our waitlist: we keep your email only to tell you when Hand opens.

What we collect

• Your account: name, email address, password (stored only as a secure hash), and two-factor settings if you turn them on.
• Your business: name, contact details, address, logo, tax rate and payment settings.
• Your customers: names, phone numbers, email addresses, service addresses and notes you add, and whether they agreed to get texts.
• Your work: estimates, invoices, approvals and signatures, payments, inventory, expenses, receipt photos and mileage.
• Messages: the emails and texts Hand sends for you, with their delivery status, and replies such as STOP.
• Technical data: basic logs (time, IP address, browser) kept to run and secure the service.

How we use it

• To run Hand: store your records, show them to you, and do what you ask, like sending an invoice.
• To send emails and texts to your customers on your behalf, about their own estimates, invoices and payments.
• To read receipt photos you add, so the amount, date and vendor fill in for you.
• To keep the service secure, fix problems, and contact you about your account.

We don't sell personal information, we don't show ads, and we don't use your data to train AI models.

Text messages

Hand texts your customers only when you've recorded that they agreed to get texts, and only about their own estimates, invoices and payments. Every text says how to stop: reply STOP to opt out, HELP for help. Seehow texting works.

We do not sell, rent or share mobile phone numbers or text-messaging consent with third parties or affiliates for marketing or promotional purposes.Text messaging opt-in data and consent are not shared with any third parties, except the service providers below that deliver the messages.

Who helps us run Hand

These companies process data only to provide their part of Hand:

• Supabase: database, sign-in and file storage.
• Cloudflare: hosting and the network Hand runs on.
• Resend: sending email.
• Twilio: sending text messages.
• Anthropic: reading receipt photos you add on the web. The iPhone app reads them on your device.
• Stripe: processing payments, when you or your customers pay online.

We may also share information when the law requires it, or to protect someone's safety.

How long we keep it

We keep your records while your account is open. Financial records (invoices, payments, expenses and mileage) are kept for 7 years, as tax rules expect. When you delete your account, everything else is deleted.

Your choices

• See, change or delete your information in Hand at any time.
• Export your data whenever you like.
• Delete your account from Hand's settings or by writing to us.
• Customers can stop texts by replying STOP, and ask the business to remove their details.

Security

Data is encrypted in transit and at rest. Each business's data is kept separate from every other's. You can turn on two-factor sign-in. If something ever goes wrong, we'll tell affected people promptly.

Children

Hand is for businesses. It isn't meant for anyone under 18, and we don't knowingly collect children's information.

Changes

If we change this policy in a way that matters, we'll update the date above and tell account holders by email.

Contact

Questions or requests: [email protected].