What JobBosh keeps, and why
Short version: the public pages set no cookie and run no tracker. The application keeps what you enter about your jobs, under a session cookie, for you alone; nothing is sold, nothing is shared without your approval, and location is off unless you switch a specific use on.
Who is responsible
The controller of the personal information handled by this website is Panacea Bio Chem Ltd (Companies House 16399508), 61 Bridge Street, Kington HR5 3DJ, United Kingdom. Questions about personal information go to admin@panaceabiochem.com.
The public pages
Every public page loads a small script (stats_beacon.js) that records the page viewed, the time, the screen size and a salted one-way hash of the network address, so that visits can be counted without storing the address itself. It sets no cookie and follows nobody across websites. The typefaces are served from this website; no third-party script runs on these pages.
The application
When you open /app/ a session cookie (jb_session, HttpOnly, Secure) is set so that your work can be found again. As a guest, a workspace is created for you and kept for 14 days from your last visit; with a free account it is kept until you delete it. What you enter - jobs, measurements, prices, suppliers, vehicles, journeys, appointments, diary notes, actuals, your business details and logo - is stored to do the work you asked for and for nothing else. The application sends no email and makes no booking or payment unless you approve the specific message or action.
Quotations and the customer
When you share a quotation, the customer's secure link opens that frozen version only. If the customer accepts, asks a question or requests a change, their name, email address, message, the time, a hashed network address and the browser identifier are recorded against that version as evidence of the decision, and shown to you. The link expires with the quotation's validity and you can revoke it.
Supplier enquiries
An enquiry you approve shares with the supplier only the facts in its text: the site postcode or address you chose, the dates, quantities and the attachments you added. Replies are kept with the job as untrusted text and read for figures; nothing in a reply is acted on automatically.
Location
Location is off by default. Planning a route, checking in at a site, estimating travel in work mode and sharing an arrival time are separate switches you turn on and off, each used only while the feature you chose is running. The web application cannot track in the background.
Server logs
The web server keeps standard access logs: the network address, the time, the page requested, the response and the browser identifier. They exist for security and fault-finding, are rotated automatically and are not used for marketing.
Messages you send
The contact form sends your name, your email address, the category you chose and your message to the mailbox of the controller named above, so that you can be answered. The form carries a hidden field that only automated submitters fill; a message with that field filled is discarded.
Donations
Donations are optional and are taken only through a payment provider named at the point of payment, when one is connected; JobBosh does not see card details. Until a provider is connected no payment can be made.
Your rights
You can ask what personal information is held about you, ask for a copy, ask for it to be corrected or deleted, and object to its use, by writing to the controller named above or through the contact form. Under UK data-protection law you can also complain to the Information Commissioner's Office.