Privacy Policy
Last updated: May 8, 2026
SpoilStack is field documentation software for excavation contractors, run by Crux Labs. This policy explains what we collect, why we collect it, and the choices you have.
1. Information We Collect
- Account information such as name, email, company, role, login activity, and authentication settings.
- Job data such as customers, jobsites, addresses, machines, haul counts, daily logs, T&M tags, todos, notes, plan markups, weather delay logs, signatures, photos, documents, and closeout exports.
- Device and usage information such as app version, browser, operating system, IP address, diagnostics, sync status, and basic analytics.
- Billing information handled by Stripe. We do not receive or store full card numbers.
- Support and communication records when you email us or ask for help.
2. How We Use Information
- Run, secure, sync, back up, and improve SpoilStack.
- Show your company's records to authorized users in your company.
- Generate exports, previews, share links, rain delay summaries, and closeout packages when you request them.
- Send login codes, security notices, billing messages, product updates, and support replies.
- Detect abuse, troubleshoot problems, enforce terms, and comply with legal obligations.
3. Sharing
We do not sell your data and we do not run ads. We share information only with service providers that help run SpoilStack, such as hosting, storage, email, analytics, payments, weather data, error monitoring, and customer support providers. We may also disclose information if required by law, to protect rights and security, or as part of a merger, acquisition, financing, or sale of assets.
4. Local Device Sync
SpoilStack stores a local copy of some company data on devices so the app can work in the field and sync later. If a device is shared, lost, or sold, sign out and clear local data. Company owners should remove users who should no longer have access.
5. Retention
We keep information while your account is active and as needed for billing, security, backups, legal obligations, support, and legitimate business purposes. If you cancel, we may retain data for a limited period before deleting or anonymizing it. You can ask us to delete data sooner, subject to legal and operational limits.
We try to collect only what we need to run SpoilStack, keep it only as long as we have a business, legal, or security reason to keep it, and dispose of or anonymize information when it is no longer needed.
6. Security
We use reasonable administrative, technical, and physical safeguards, including encrypted transport, password hashing, access controls, least-privilege service provider access, logging, backups, and procedures for handling vulnerabilities and incidents. No system is perfect. You are responsible for using strong passwords, controlling invited users, and protecting devices that store local data.
7. Your Choices
- You can update account and company information in the app.
- You can export job documentation and closeout packages from the app.
- You can request access, correction, deletion, or export by emailing [email protected].
- You can unsubscribe from non-essential emails using the link in the email or by contacting us.
8. Children
SpoilStack is business software for contractors. It is not intended for children under 13, and we do not knowingly collect their personal information.
9. Changes
We may update this policy as SpoilStack changes. If the change is material, we will provide notice by email, in the app, or through another reasonable method.
10. Contact
Privacy questions can be sent to [email protected].