Who we are
Fieldwork is a location-based business discovery tool operated by SignalVector LLC, based in New York, USA. The service is accessible at atfieldwork.xyz. Questions about this policy can be directed to info@signalvector.xyz.
What we collect
We collect only what is necessary to operate the service:
- Account data — your name and email address, received via Google OAuth. We never see your Google password.
- Scan history — the search queries you run: grid coordinates, zoom level, effort tier, result set, timestamps, and any AI-ranking preferences you configure.
- Bookmarks and notes — lists and private annotations you create inside the app.
- Usage telemetry — page views, error logs, and performance traces. This data is aggregate and is used solely to improve the service.
- Payment data — handled by Stripe. We store only a Stripe customer ID; we never see or store your card number.
We do not collect your location in the background, sell advertising, run behavioural profiling, or build shadow profiles.
How we use it
- To authenticate you and maintain your session.
- To run searches on your behalf and return results.
- To store and display your scan history, bookmarks, and notes.
- To bill you for paid tiers via Stripe.
- To send transactional emails (billing receipts, invite codes, material changes to these policies).
- To diagnose errors and improve performance.
We do not use your data to train AI models. We do not share it with advertisers. We do not sell it.
Third-party services
Operating Fieldwork requires a small number of third-party processors. Each receives only the minimum data necessary for its function:
- Google OAuth — handles sign-in. Subject to Google's Privacy Policy.
- Mapbox — powers the map tiles and geocoding. Subject to Mapbox's Privacy Policy.
- Stripe — handles payment processing. Subject to Stripe's Privacy Policy.
- Google Analytics (GA4) — aggregated, anonymised usage analytics. IP addresses are anonymised before storage. Subject to Google's Privacy Policy.
- Amazon Web Services — cloud hosting and encrypted storage in the US-East region.
We do not share your data with any other third parties.
Data retention
Your account data and scan history are retained for as long as your account is active. If you delete your account, all personal data — including scan history, bookmarks, and notes — is deleted within 30 days, except where we are legally required to retain it (e.g., billing records, which we keep for 7 years under US tax law).
Usage telemetry is retained in aggregate for up to 24 months and then purged or anonymised.
Your rights
Depending on where you are located, you may have the following rights over your data:
- Access — request a copy of the data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — ask us to delete your account and associated data.
- Portability — request an export of your scan history and bookmarks in a machine-readable format (JSON / CSV).
- Objection — object to processing where we rely on legitimate interest as the legal basis.
California residents have additional rights under CCPA, including the right to know and the right to opt out of sale (we do not sell data, so the opt-out is moot, but the right is yours). EU and UK residents have rights under GDPR, and we honour them globally.
To exercise any of these rights, email info@signalvector.xyz. We respond within 30 days.
Security
Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Access to production systems is limited to authorised personnel and requires multi-factor authentication. We run regular dependency audits and follow responsible disclosure practices.
If you discover a security vulnerability, please email info@signalvector.xyz before publishing. We aim to acknowledge reports within 48 hours.
Changes
We will notify you by email at least 30 days before any material change to this policy. The effective date at the top of this page will always reflect the current version. Continued use of Fieldwork after the effective date constitutes acceptance of the updated policy.
Contact
SignalVector LLC — New York, USA.
Privacy inquiries: info@signalvector.xyz
These terms are accompanied by our Terms of Service.