Privacy Policy

Anvil is a customer-relationship tool for field-service contractors. This policy describes what the app collects, why it exists, and which third parties process it. It reflects how the software is actually built, not a template.

What we collect about you

• Identity: your name and email address, supplied by Apple or Google when you sign in. Anvil never sees or stores a password for new accounts.
• Account data: your subscription tier and trial status.
• Support data: anything you send us in a bug report, including a description you write and basic device details.

What you put into Anvil about other people

Most data in Anvil is business data you enter about your own customers — contacts, organizations, deals, jobs, quotes, invoices, photos, and signed contracts. You are the controller of that data. We process it to run the service for you, and we do not sell it, mine it, or use it to train models.

Sign in with Apple and Hide My Email

Accounts are created only with Apple or Google. If you use Apple's Hide My Email, we receive a private relay address and never learn your real one. Your account is matched on the provider's stable identifier, not your email address, so hiding your email does not break anything.

Who processes your data

• Google Firebase — authentication, database, file storage, and server functions. Data is stored in the United States.
• Stripe — payment processing when you take a deposit or invoice payment. Card details go to Stripe directly and never touch Anvil's servers.
• RevenueCat — subscription entitlement management.
• SendGrid — sending email you choose to send, such as quotes and follow-ups.
• Anthropic — used only for optional spreadsheet-import column matching. Column headers are sent; we do not send it your customer records for training.

How long we keep it

Your data lives as long as your account does. Deleting your account erases your user record, and — if you own the team — the team and every record in it. That deletion is immediate and cannot be undone. Backups may retain copies for a short window before rolling off.

Your choices

• Export your contacts and organizations to a spreadsheet at any time.
• Delete your account and all its data from the account page or the iPhone app.
• Turn off notification categories you don't want.
• Email support@anvilsales.com to ask what we hold about you.

Security

Access is scoped per team and enforced on the server, so one account cannot read another's records. Signed contracts are sealed with a cryptographic signature and an audit trail. Payment card data is handled entirely by Stripe.

Children

Anvil is a business tool and is not directed at anyone under 18.

Changes

If this policy changes materially we will say so in the app before the change takes effect.