Privacy Policy

This Privacy Policy explains how Headjacks, Inc. (“Headjacks,” “we,” “us,” or “our”) collects, uses, discloses, and protects information across:

• our marketing website at headjacks.com;
• the Headjacks customer portal (portal.headjacks.com), used by our business customers (“Customers”) and their managers; and
• the Headjacks mobile app, used by Customers’ field workers (“Field Users”) to complete jobs, capture verification photos, and interact with our AI assistant.

Headjacks is a business-to-business platform. Our Customers are employers, retailers, and field-service organizations. Field Users generally access the mobile app because their employer (a Headjacks Customer) has engaged Headjacks to manage and verify their field work — in most cases, the Customer, not the individual Field User, is the contracting party. Where our Customer is acting as the data controller for its workers’ information, we act as a data processor / service provider on the Customer’s behalf, and this policy describes our practices as that processor. If you are a Field User with questions about your employer’s own policies, please also contact your employer.

Account & profile information. When an account is created for the portal or mobile app, we collect information such as name, email address, phone number, employer/tenant assignment, role, and authentication credentials (passwords are stored in hashed form by our authentication provider, Firebase Authentication — we never see or store plain-text passwords).

Job & work data. The platform is designed to verify field work. We collect the work data Customers configure their teams to capture, which may include job assignments, checklists, survey responses, timestamps, and verification photos of completed work (e.g., retail endcap or merchandising photos).

Device camera & photos. With permission, the mobile app uses your device’s camera to capture job-verification photos, and may access your photo library to attach existing images to a job.

Microphone & voice. With permission, the app uses your device’s microphone to support voice interaction with our AI assistant (“Ask Jax”) and, where enabled, voice commands relayed through a paired wearable device (see below). Speech may be converted to text on-device or sent to our AI processing providers as described in Section 4.

Location. With permission, the app collects precise or approximate device location to verify that job-related check-ins occur at the correct work site (geofencing) and to support location-based reporting for Customers.

Bluetooth & paired wearables. The app uses Bluetooth to pair with supported smart-glasses hardware (e.g., Meta-made smart glasses) so Field Users can capture photos and issue voice commands hands-free. Bluetooth pairing data stays local to your device and the paired accessory; we do not share your data with the hardware manufacturer through this pairing.

Push notifications. If enabled, we collect a device push token to deliver job alerts, messages, and reminders.

Usage & device information. We automatically collect limited technical information — such as app version, device model, operating system, and crash/error diagnostics — to keep the platform reliable and secure.

Website visitors. If you submit a form on headjacks.com (e.g., an early-access or contact request), we collect the information you provide, such as your name, work email, and company.

We use the information described above to:

• provide, operate, and maintain the website, portal, and mobile app;
• verify that field work was completed at the correct location and to the expected standard, and generate the reports, exceptions, and analytics our Customers configure;
• power the Ask Jax AI assistant and on-device AI features described in Section 4;
• send job-related notifications, service messages, and — where you’ve agreed to receive them — product updates;
• maintain the security, integrity, and proper functioning of our systems, including detecting fraud and misuse; and
• comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use Field User data to build advertising profiles.

Some AI features run entirely on your device (on-device models), meaning the relevant data is processed locally and is not sent to our servers for that specific feature. Other AI features — including the Ask Jax assistant’s conversational and job-analysis capabilities — send the relevant text, photo, or job data to our cloud AI processing providers (currently Google Cloud Vertex AI, which may route requests to underlying model providers such as Google and Anthropic) strictly to generate a response. These providers process that data as our service providers, under contractual terms that prohibit them from using it to train their own general-purpose models.

We share information only in the following circumstances:

• With your employer (Customer). Because the platform exists to give employers visibility into field work, job data, verification photos, and related activity are visible to the Customer that engaged Headjacks and to authorized managers within that Customer’s account.
• Service providers. We use trusted infrastructure and processing providers to operate the platform — principally Google Cloud / Firebase (hosting, authentication, databases, file storage, push notifications, and AI processing via Vertex AI) and Google Maps Platform (mapping and geocoding). These providers are contractually bound to protect information and to use it only to provide services to us.
• Legal & safety. We may disclose information if required by law, legal process, or government request, or where necessary to protect the rights, property, or safety of Headjacks, our Customers, or others.
• Business transfers. If Headjacks is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Privacy Policy (or a policy providing at least equivalent protection).

Every tenant/Customer’s data is logically isolated from every other tenant.

Headjacks is architected as a multi-tenant platform: each Customer’s job data, photos, survey responses, and user records are logically separated from every other Customer’s data, and access is scoped to the Customer’s own tenant.

We retain information for as long as needed to provide the platform to the Customer whose account it’s associated with, and thereafter for as long as required to meet legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Retention periods for job and verification data are generally governed by the agreement between Headjacks and the relevant Customer. When information is no longer needed, we delete or anonymize it.

• Device permissions. You can allow or deny camera, microphone, location, Bluetooth, and notification permissions through your device’s settings at any time. Denying a permission may disable the related feature (for example, job photos can’t be captured without camera access).
• Access, correction, deletion. Depending on your location and role, you may have the right to request access to, correction of, or deletion of your personal information. Field Users should generally start with their employer (our Customer), since the employer typically controls the underlying account; you may also contact us directly at privacy@headjacks.com and we will route your request appropriately.
• California & other state privacy rights. Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA), including the right to know, delete, or correct personal information, and to be free from discrimination for exercising these rights. We do not sell or “share” personal information as those terms are defined under CCPA.

The Headjacks platform is intended for business use by adult employees of our Customers and is not directed to children. We do not knowingly collect personal information from individuals under 16.

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction, including encryption in transit, tenant-scoped access controls, and audited infrastructure providers. No system is completely secure, and we cannot guarantee absolute security.

Headjacks is based in the United States, and information we collect is processed and stored in the United States. If you access the platform from outside the United States, your information will be transferred to, and processed in, the United States.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Effective Date” below and, where appropriate, provide additional notice (such as an in-app or portal notification).

Questions about this Privacy Policy or our data practices can be sent to privacy@headjacks.com.