Last updated August 15, 2026
Halrock is software for contractors: budgets, estimates, invoices, change orders, photos and payments for the jobs you run. This page says, in plain words, what information the service holds, why, who else touches it, and what you can do about it. It is written by the people who built the software and it describes what the software actually does.
The service is Halrock, an independent software service, built and run by an independent developer. Questions: contact@halrock.com.
Account holders — contractors and their team members who sign in. You give us your email, a password (or a Google sign-in), your name and, if you choose, a photo; and you create your company's data.
Your customers, subs and suppliers — people whose details you enter (names, addresses, phone numbers, emails) and who open the links you send them. They do not have accounts. Halrock holds their information on your behalf: you are the one who decides to collect it and to send them a document, and you are responsible for having a proper basis to do so.
Everything you type into the app: companies, customers and contacts, jobs and addresses, budgets (including your costs and margins — never shown to a client), estimates, change orders, invoices, payments, expenses, hours, catalog items, supplier prices, notes, and your company settings including any terms and conditions you write.
Files you upload: your logo, job photos, receipts, and — when a client signs an estimate — the drawn signature image.
Signature evidence. When a client approves or declines an estimate from a link, we record the name they typed, the date and time, their IP address and a summary of their browser, and we print the readable part on the signed document. This is what makes the signature worth anything, and it is kept for as long as the document is.
Payment reports from clients. When a client presses "Tell them I paid" on an invoice link, we store the amount, method, reference and any screenshot they attach.
An audit log. Who did what and when inside your company — sent an estimate, voided an invoice, changed a setting. It exists so your company has a record; it is visible to your company's managers under History.
Email sends. Each time a document is emailed, we record when and to which address, so your team can see it was sent.
Notification devices. If you turn on push notifications, the browser gives us an opaque subscription for that device. It contains no personal information and you can remove it under Your account.
To run the service you signed up for and nothing else: showing you your data, producing your documents and PDFs, sending the emails and notifications you or your clients trigger, billing your subscription, and keeping the service secure (rate limits, sign-in protection, error reports).
We do not sell your information, we do not use it to build advertising profiles, and we do not use your data — or your customers' — to train machine-learning models. There is no third-party analytics or advertising script on the app's pages.
The service runs on a small number of providers, each for one job:
Push notifications are delivered by your own browser vendor's push service (Apple, Google or Mozilla, depending on the device); the message text is encrypted to your device.
An estimate, invoice or supplier price link is a long random address. Anyone holding it can open that one page — that is the point: your client does not need an account. Treat the link like the document itself. You can turn a supplier's price link off at any time (Turn off, on the job's Suppliers tab), and an estimate link stops accepting decisions once answered, replaced or expired.
Documents shown to clients never contain your costs or margins. A supplier's price link never contains your prices or any other supplier's — and it shows your customer's name only if you switch that on when you send it.
For as long as your company's account exists. Sent documents are kept as records; voiding an invoice or archiving a customer hides, it does not delete, because the record of what was sent and signed has to survive.
We keep encrypted backups of the database on a rolling schedule for disaster recovery. Backups age out on their own; we do not restore individual records from them.
Closing your account removes you: your sign-in, your profile and photo, your notification settings and your devices, straight away. What a company owns stays with the company — its jobs, documents, payments, photos and the hours you logged, with your name on them. A client's signed estimate is the contractor's record of a deal, and it cannot disappear because one person left.
If you were the only person in a company, its records stay in the service with nobody able to open them. Ask us and we will delete that company outright; it then leaves the backups as they age out.
Export everything — More → Export gives you your company's data as files, any time, including while a subscription has lapsed.
Correct or delete what you entered — customers, jobs, contacts, files — from inside the app.
Control notifications — each kind can be switched off under Your account; a device can be forgotten there too.
Leave a company, or close your account — both under Your account, no request and nobody to ask. Closing asks you to type a word first and tells you exactly what goes and what stays. Export your data before you do: afterwards you cannot open any of it.
Have a whole company deleted — if you were its only member, email contact@halrock.com from the address on the account and we will confirm and delete it.
If you are one of a contractor's customers and want to see, correct or remove what they hold about you, the contractor is the right person to ask — they control that data. We will help them do it.
Data is encrypted in transit (HTTPS) and at rest at our providers. Access inside the app is enforced at the database level: your company's rows are invisible to every other company, and money-related data is visible only to your company's managers, not to crew accounts. Passwords are never stored in readable form. Sign-in and public forms are rate-limited.
No system is perfect. If we learn of a breach affecting your data we will tell you without undue delay, and we will say what happened and what we did.
Halrock is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
When the software starts doing something new with your data, this page changes with it and the date at the top moves. Material changes are announced inside the app.
contact@halrock.com — and the Terms of Service cover the rest of the relationship.