This page is maintained by the GCledger team to answer common security and privacy questions about the GCledger field-management app. It describes current practices and app-visible controls; it is not an independent certification or audit.
GCledger is built on the Lovable platform. Lovable provides hosting, managed database, authentication, and storage capabilities. The GCledger team is responsible for how the application uses those capabilities, what data is collected, and how customer accounts and content are managed. Customers are responsible for safeguarding their own login credentials and the accuracy of data they enter.
Access to GCledger is gated by per-user accounts. Sessions are managed by the platform's authentication service and protected over HTTPS. Users should use a strong, unique password and sign out from shared devices.
The application runs on Lovable's managed hosting with traffic served over TLS. Application data is stored in a managed Postgres database with row-level access rules enforced server-side.
GCledger stores the operational data you enter — jobs, daily logs, change orders, receipts, schedule items, and training progress — along with the account identifier needed to associate that data with you. We do not sell personal data.
GCledger integrates with DocuSign for electronic signature workflows on change orders. When you send a change order for signature, the relevant fields are transmitted to DocuSign and processed under their terms. Other third-party integrations are limited to the managed platform services described above.
Your data is retained while your account is active. To request export or deletion of your account data, contact the GCledger team using the address below.
To report a suspected vulnerability or security concern, contact the GCledger team. Please include steps to reproduce so we can investigate promptly.
This page is app-owned editable content and does not constitute a legal agreement, certification, or warranty.