Privacy notice

Last updated 4 October 2026. This is a draft for review.

Who we are

Connduit is office and field-service software for contractors, run from the United Kingdom. In this notice "we" means the business that operates Connduit, and "you" means someone using this website, asking for a trial, or using a Connduit company account. For the data your company puts into its Connduit account (customers, jobs, staff and so on), your company is the data controller and we are its processor: we only use that data to run the service for your company.

What we collect, and why

• Trial requests - the company name, your name, email, phone and anything you write, so we can set you up and talk to you about it. Kept until the request is dealt with, and then for as long as the resulting account exists; declined requests are deleted within 12 months.
• Account data - names, work emails and roles of the people your company adds, their sign-in activity (time and network address), and what they do in the app (the audit log). Used to run the service, keep it secure, and show your admins what happened.
• Content your company enters - customers, sites, contacts, quotes, jobs, certificates, invoices, photos and documents. Used only to provide the service to your company.
• Email delivery - when the app sends an email on your company's behalf we record whether it was delivered, bounced or opened, so the sender can see.
• Technical data - server logs (network address, pages requested, errors) kept for a short period for security and fault-finding.

Cookies

We use one essential cookie to keep you signed in, and nothing for advertising or tracking. There is no cookie banner because there is nothing to consent to.

Where it's kept and who else sees it

Connduit runs on servers in the European Union (Railway), with nightly backups to separate EU storage (Cloudflare R2) and traffic delivered through Cloudflare. Email is sent through Resend from EU servers. These providers process data on our behalf under their standard terms and do not use it for their own purposes. We do not sell data and we do not share it with anyone else unless the law requires it.

How long we keep it

Company data is kept while the company's account is active. When an account is closed, its database and files are deleted within 30 days and fall out of the backups within 12 months. Your company's admins can export their data at any time and can ask us to delete the account.

Your rights

Under UK GDPR you can ask what we hold about you, ask for it to be corrected or deleted, and object to how it's used. For data inside a company account, ask that company first (they control it); for anything else, email us at the address below. You can also complain to the Information Commissioner's Office (ico.org.uk).

Contact

Email [email protected].