Privacy Policy

WireHQ is operated by Heron Networks LLC. This policy covers prewire.tech and the WireHQ application. Short version: we hold your shop's operating data so the software can work, we share it with four named processors and nobody else, we run no advertising, we count visits with cookieless Cloudflare Web Analytics, and we do not sell anything to anyone.

The two kinds of people in here

You, our customer — the shop and its users. We are the controller of your account data.

Everyone your shop records — your techs, your customers, a general contractor, a building inspector. For their information you are the controller and we are your processor: we hold it on your instructions, and if one of them asks us about their data we will point them to you and help you answer.

What we collect from you

• Account — company name, your name, work email, a salted password hash (never the password itself), your role, and your hourly cost rate. Collected at signup because live job costing is impossible without a cost rate.
• Company profile — address, phone, email, licence number, logo.
• Session token — a bearer token stored in your browser's localStorage so you stay signed in.
• Agent API keys — only if you create one in Settings ▸ Agent access: the key's name, scope and a SHA-256 hash (never the key itself), plus a record of each call an agent makes with it (which action, whether it worked, when). Call records are deleted after 90 days; keys are deleted with your account.

What your shop puts in about other people

• Your customers — name, email, phone, billing address, job site address, and any notes you write.
• Your crew — names, roles, base and cost rates, job assignments, and time entries including clock-in/clock-out times, labor type (straight/overtime/double) and category (work, supply run, drive, shop). This is timekeeping data about identifiable employees; treat it accordingly.
• Jobs and money — estimates and line items, change orders, purchase orders and vendors, material pulls, price book entries, invoices, and the Stripe payment id for an invoice that was paid online.
• Permits and inspections — jurisdiction, permit numbers, inspection results and the inspector's name where you record it.
• Vehicles — make, model, year, plate and VIN, and truck stock levels.
• Photos — job photos you upload, stored as files with the job, phase tag, caption and who uploaded them. Photos can contain far more than you intended (a face, a document, a licence plate) — you decide what to upload.
• General contractor contact — name and email, used only to send that job's daily report.

What we do not collect

• No card numbers. Card details go straight to Stripe; we store only the payment id and amount.
• No GPS or location tracking of your techs. WireHQ records clock times against a job, not where a person is.
• No third-party advertising, no retargeting pixels, no session recording, no Google Analytics and no cross-site trackers. The one analytics tool is Cloudflare Web Analytics, described below.
• No cookies for tracking. The session token is functional and lives in localStorage, not in an advertising cookie. Cloudflare Web Analytics sets no cookies and uses no local storage, so there is no cookie banner.

Visit analytics

We count visits with Cloudflare Web Analytics, on prewire.tech and inside the application. It sets no cookies, uses no local storage and does not fingerprint visitors. For each page view Cloudflare records the page address, the referring site, the browser, operating system and device type, and the country (worked out from the IP address, which is not kept for analytics). We see only totals, never an individual visitor. We use no Google Analytics, no advertising pixels and no cross-site trackers, so there is no cookie banner.

Who we share it with — the full list

• Cloudflare — hosting, the database that holds everything above, and file storage for photos.
• Stripe — when your customer pays an invoice online. Stripe receives the invoice amount and whatever the payer enters at checkout.
• Brevo (with Resend as a failover) — delivers transactional email, including the end-of-day job report sent to the general contractor address on a job. The provider sees the recipient address and the message.
• Intuit (QuickBooks Online) — only if you connect it, and only in one direction: customers, invoices and payments flow from WireHQ into QuickBooks. We store your QuickBooks OAuth access and refresh tokens so the sync can run; disconnecting in Settings ends the sync.

That is the entire list. We do not sell data and we do not share it with anyone else.

The customer portal and estimate links

Each job can have a public portal link (/job/<token>) and each estimate an approval link (/estimate/<token>). These are unguessable tokens with no login. They deliberately show a sanitised view — job name, address, status, next inspection, your phone number, milestones, and a pending invoice — and never your costs or margins. Anyone you send the link to, and anyone they forward it to, can see that view. These routes are excluded from search engines in robots.txt.

How long we keep it

Your shop's data is kept while your account is open. Deleted records are soft-deleted first so you can recover from a mistake. After cancellation we keep everything for 30 days so you can export it, then delete it. Password reset and session tokens expire on their own.

Getting your data out, and getting it deleted

You can export your shop's data at any time from the app, including after cancelling. To have it deleted sooner than the 30-day window, or to ask what we hold, email support@prewire.tech. We respond within 30 days.

You can also delete your own account in Settings: type your account email to confirm, and a shop's records, photos and sign-ins are removed at once and we email you a receipt.

If you are in the EU, the UK, or a US state with a privacy statute (California's CCPA/CPRA among them), you have rights of access, correction, deletion, portability and objection, and the right not to have your data sold — which we do not do. Where the data is about your crew or your customers rather than about you, we will route the request to the shop that controls it.

Security

If you forget your password, the sign-in page can email you a reset link that works once and expires in 1 hour. Resetting your password, choosing Sign out everywhere in Settings, or deleting your account signs out every session that was open before, on its next request.

The sign-in page can also email you a sign-in link for an account that already exists. It works once and expires in 15 minutes, and Sign out everywhere or a password reset cancels any link sent before it.

Passwords are stored salted and hashed. Data is separated per company at every query, and access requires a bearer token. We do not claim to be breach-proof; if a breach affects your data we will tell you what happened and what was in it, without waiting to be asked.

Children

WireHQ is a business tool and is not directed at children.

Changes

We will update this page and its effective date, and email account owners if the change is material. See also the Terms of Service.

Contact

Heron Networks LLC — support@prewire.tech or by phone at (703) 249-9248. Mailing address: 8401 Mayland Dr Ste A, Richmond, VA 23294.