Privacy Policy
Last updated: September 8, 2026
The Modern Drive (“we,” “our,” or the “Service”) is contractor-billing software operated by Gideon Codeworks. This Privacy Policy explains what information we collect from contractors who sign up for the Service, what we do with it, and the choices those contractors have.
Information we collect
Account information:when a contractor signs up we collect their name, business name, email address, and (if they choose password sign-in) a securely hashed password. If they sign in through Google, we receive their name, email, and public profile image from Google’s OAuth response.
Business content: the customer records, projects, estimates, invoices, photos, and notes that a contractor creates in the Service. This data belongs to the contractor and is scoped to their tenant — no other contractor can see it.
Payment information:we do not store credit card or bank account numbers. Card payments are processed by Stripe under Stripe’s privacy policy. When a contractor connects their Stripe account, we store the Stripe account ID + status flags, not any card data.
Product usage: standard server logs (IP address, browser, timestamps), and event timestamps on records like when an estimate was viewed or signed. We use these to run the Service and detect abuse.
How we use information
- To operate the Service — render pages, deliver emails and SMS, process payments.
- To notify contractors about their own account activity (an estimate was viewed, an invoice was paid, a trial reminder).
- To improve the product and diagnose bugs.
- To comply with legal obligations.
We do not sell contractor or customer data. We do not use contractor data to train machine-learning models.
Data sharing
We share information only with the service providers we use to run the platform:
- Vercel — hosting and edge network.
- Neon — Postgres database provider.
- Stripe — payment processing (Connect + Billing).
- Resend — transactional email delivery.
- Twilio — SMS notifications (when the contractor enables SMS).
- Google — authentication for contractors who choose Google sign-in.
- Google Analytics — anonymized page-view + traffic-source analytics on the marketing pages (landing, pricing, sign-in, sign-up) only. Not loaded once a contractor is signed in.
We may also disclose information if required by law, subpoena, or to protect the security of the Service or its users.
Data retention + deletion
Contractor accounts remain active for as long as the contractor keeps the account. On cancellation, we retain the account’s data for up to 30 days so the contractor can reactivate; after 30 days we delete the data permanently. Contractors can request immediate deletion by emailing us.
Security
We use industry-standard practices — encrypted transport (HTTPS), password hashing (bcrypt), tenant isolation by contractor ID on every query, and least-privilege access to production systems. No system is perfect; report a security concern to the address below.
Your rights
Depending on where you live, you may have rights under laws like GDPR or CCPA — including the right to access, correct, or delete the data we hold about you, and to object to certain processing. Contact us to exercise those rights.
Children
The Service is for businesses. It is not directed at children under 16 and we do not knowingly collect their information.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted here with an updated “Last updated” date, and, where required, notified to contractors by email.
Contact
Questions about this policy or your data: email josh@gideoncode.com.