Privacy policy
Last updated
Who we are
How’s the Job is a trading name of Mather Software Ltd (“we”), registered in England and Wales, company number 17443861. We are registered with the Information Commissioner’s Office, registration number ZC256628.
Mather Software Ltd is the controller of the data about tradespeople who use the app and people who join the waitlist. For the details a tradesperson keeps about their own customers, the tradesperson is the controller and we process that data on their behalf (see below). Questions or requests about your data go to support@mathersoftware.com.
If you’re a tradesperson using the app
When you sign up and use How’s the Job we store:
- your sign-in details — your email address and anything else you choose to sign in with — held by our sign-in provider;
- your profile: your name, business name, trade, and optionally a business phone number and review link, plus a copy of your sign-in email address;
- the jobs you create: a job title, your customer’s name, and optionally their phone number and the job address;
- the updates and photos you post to a job, with their captions and the times they were posted. Before a photo is stored we remove the hidden details a camera adds to it, such as where it was taken and what took it: your phone re-saves it smaller first, and our server strips anything left before keeping it. We accept JPEG, PNG and WebP photos of up to 10MB.
- a simple log of what you do in the app — signing up, creating, completing or removing a job, posting an update or photo, editing your profile — and when.
We use this to run the service for you. The one other use is the log: we read it, and get an email when you sign up, create your first job or complete a job (with your name, business name, trade, and your email address or the job title — never your customer’s details) plus a daily summary of totals, so we can see how the service is being used and where it needs work. That rests on our legitimate interest in running and improving it. We do not sell it, use it for advertising, or send you marketing. Your name, trade, business name and business phone number are shown on the job pages you send to customers, and your review link once a job is complete — that is what they are for.
Lawful basis: performance of our contract with you (the terms). Providing your sign-in details and profile is needed to use the app; without them we can’t provide it. The business phone number and review link are optional.
If you’re a customer who was sent a job link
Your tradesperson typed your details into their account: your name, and optionally your phone number and the job address, plus photos and updates about the work. For that data your tradesperson is the controller — they decide what is stored and why — and Mather Software Ltd is their processor, handling it only on their instructions under our terms. If you want something changed or removed, ask them first — or email us and we will pass your request on and help.
Your job page shows the tradesperson’s name, trade, business name and phone number, the job title, the street and area of the job address, the photos and updates posted to it, and their review link once the job is complete. It never shows your name, your phone number, or your house number, flat or full postcode — your tradesperson sees the full address in their own account. The link is random and hard to guess, it is never listed by search engines, and anyone who has it can open it — so share it only with people you’d let see the job.
When you open the page we record the time it was last opened, so your tradesperson knows the link reached you. The app doesn’t record who opened it, your IP address or your device; the only place an IP address appears is our hosting provider’s short-lived request logs, below. We also keep a running count of job-page opens for ourselves, which records only that a page was opened and when — not which page or who opened it. Our website analytics never see your job link either: before anything is sent, the link is replaced with a generic “a job page” placeholder.
Getting a job page taken down: every job page has a “Report or remove this page” link at the bottom, which emails us with the page named. You can also email support@mathersoftware.com with the link. We will pass the request to your tradesperson and help them deal with it, and if the page breaks the law or our terms, or they don’t act on a reasonable request, we can take it down ourselves.
Waitlist
If you join the waitlist we store your email address, a random confirmation code, and when you confirmed it. We email you to confirm the address (again if you sign up again before confirming) and otherwise use it only to tell you when the app opens. When you join, we get an email with your address so we know someone signed up.
Lawful basis: your consent, given when you submit the form and confirm your address. Joining is optional. You can withdraw your consent at any time with the “Remove me from the waitlist” link in our email, or by emailing support@mathersoftware.com; either way we delete your address. Withdrawing doesn’t affect anything we sent before.
Keeping the service safe and working
To protect the service from abuse and fix faults we process technical data: request logs (including IP address, browser type and the page requested), error reports and performance traces, and bot-protection checks when you sign up. Our waitlist form also briefly counts attempts per email address to stop someone flooding an inbox.
Lawful basis: our legitimate interests in keeping the service secure, reliable and free of spam. We keep this data to a minimum and for short periods (below), and you can object to it by emailing support@mathersoftware.com.
Website analytics
To see how many people use the site and how fast its pages load, we use Vercel Web Analytics and Vercel Speed Insights. They use no cookies and store nothing on your device. For each page view they record the page’s address, the site you came from (if it was another site), your country, and your browser, operating system and device type; Speed Insights adds how long the page took to load and respond. Instead of a cookie, a visitor is counted with a code worked out from the request that Vercel discards after 24 hours, and your IP address is not stored. We only ever see totals, never individual visits.
Private links are never sent. Before anything leaves your browser, the address of a job page is replaced with a generic placeholder, and the part of any address after a “?” or “#” (such as a waitlist confirmation code) is removed. So the analytics can show that job pages were opened, but never which one.
Lawful basis: our legitimate interests in understanding how the site is used and keeping it fast. Because this is used only to produce statistics about our own website, UK law (the Data (Use and Access) Act 2025) lets us do it without asking for consent first, provided we tell you about it and let you turn it off. You can turn it off here at any time; it applies to this browser. If your browser sends a Global Privacy Control signal, analytics are already off.
Who else handles the data
We use a small number of providers (our processors) to run the service. Each only acts on our instructions under a data processing agreement:
- Clerk — sign-in and account security;
- Cloudflare — Turnstile bot protection on the sign-up form (run through Clerk), which looks at your browser and IP address to tell people from bots;
- Convex — the database and photo storage;
- Vercel — website hosting, which keeps short-lived request logs including IP addresses; and our website analytics (Vercel Web Analytics and Speed Insights), which receive page addresses with job links removed, the referring site, country, browser, operating system, device type and page-load timings, with no cookies and no stored IP address;
- Sentry — error reporting and performance tracing (about one page load or request in ten is traced), configured to send no request bodies, query strings, cookies, headers or user details (a report includes the address of the page it came from, with the private part of any job link removed). Sentry data is stored in the EU;
- YourMail — our own email service, also run by Mather Software Ltd, which sends the waitlist confirmation email, and our own notifications about sign-ups, waitlist joins, first and completed jobs, and a daily summary, through Amazon Web Services in London.
We also disclose data if the law requires it, and would pass it to a buyer if the service were ever sold, under this same policy.
International transfers
Clerk, Cloudflare, Convex and Vercel are US companies and may process data in the United States. Where they do, the transfer is protected by the UK–US data bridge (for providers certified under it) or by the UK International Data Transfer Addendum to the EU standard contractual clauses. Sentry stores data in the EU, which the UK recognises as adequate. Ask us at support@mathersoftware.com for a copy of the relevant safeguards.
Cookies and similar technologies
We use no advertising, no cross-site tracking, and no analytics cookies: our analytics are cookieless and only produce totals, and job links are removed before anything is sent. The only cookies are strictly necessary, so we don’t ask for consent to them:
- Sign-in cookies set by Clerk (such as
__sessionand__client_uat) that keep you signed in and protect your account; - Bot protection: Cloudflare Turnstile may store a small amount of data in your browser while you complete the sign-up form, to check you’re not a bot.
Your browser also keeps a few things locally that never reach us: drafts of job and update forms you haven’t saved, your job list filter and search, and when you last looked at a job page, so new updates can be marked “New”, and, if you turn analytics off above, a note that you did. Our error reporting and analytics don’t store anything else on your device. You can clear all of this in your browser settings; clearing the sign-in cookies signs you out.
How long we keep it
- Account and profile: for as long as you have an account. Deleting your account in the app deletes it straight away; if you ask us by email instead, we delete it within 30 days.
- Jobs, updates and photos: until the tradesperson deletes them or closes their account. Deleting a job deletes its updates and photos with it.
- Waitlist: unconfirmed addresses are deleted automatically 30 days after sign-up; confirmed addresses are kept until 12 months after the app launches, or until you remove yourself, whichever is sooner.
- Waitlist attempt counts: up to one hour.
- Hosting request logs (Vercel): up to 30 days.
- Error reports and traces (Sentry): up to 90 days.
- Analytics (Vercel): the code used to count a visitor is discarded after 24 hours; what remains is totals that aren’t linked to anyone.
Deleting a job also unlinks it from the activity log, which keeps only that something happened and when. The log and the copy of your email address are deleted with your account. To close your account and delete everything in it, use “Delete my account” under Edit details in the app: it deletes your jobs, their updates and photos, your customers’ details, your profile, your activity log and your sign-in, and every job link stops working. You can also email support@mathersoftware.com from the address you signed up with. Deleted data leaves our providers’ backups within 30 days.
Your rights
Under UK data protection law you have the right to:
- get a copy of the data we hold about you (access);
- have it corrected if it’s wrong (rectification);
- have it deleted (erasure);
- ask us to limit how we use it (restriction);
- receive it in a machine-readable format or have it sent to someone else (portability);
- object to us using it on the basis of legitimate interests (objection);
- withdraw your consent at any time, where we rely on it (such as the waitlist).
Email support@mathersoftware.com and we will reply within one month. Some rights depend on the lawful basis and have exceptions; we will explain if one applies. If the data is a customer’s details held by a tradesperson, we will pass your request to them and help them answer it.
If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put it right first.
Automated decisions and children
We make no decisions about you by automated means, including profiling, that have legal or similarly significant effects. The app is for tradespeople aged 18 or over and is not aimed at children.
Changes
If this policy changes, the date at the top changes with it. If a change affects how we use data you have already given us, we will tell signed-up users by email or in the app before it takes effect.