Castle Privacy Policy

1. Scope

This document applies only to the Castle product: the Castle application (invoicing, estimates, payments, accounting, receipts, payroll, scheduling, and field checklists) and Castle-related services. It supplements the general MECE TECH Privacy Policy. Terms used here have the same meaning as in that policy unless stated otherwise.

2. Data in Castle

When you use Castle, you may enter or upload data that includes:

Business and contact information — business name, contacts, customer and vendor details
Invoicing and estimates — line items, amounts, notes
Payment information — payment method details are processed by certified third-party payment processors; we do not store full card numbers
Accounting and books — income, expenses, receipts, categories, reports
Payroll — employee/contractor information and pay data as you use Castle’s payroll features
Scheduling — jobs, assignments, calendar entries
Field checklists — job segments, requirements, materials, completion data, clock in/out

This data is used solely to provide and operate Castle for you and your team. We do not use it for advertising, profiling, or selling to third parties.

3. What we don’t do

We do not sell or share your Castle data. We do not rent, sell, or disclose your Castle data (including invoices, books, schedules, field data, or any other content you put in Castle) to third parties for marketing, advertising, or any other purpose outside what is described in the main privacy policy (e.g. service providers acting on our instructions, or legal requirements).

We do not track your activity inside the Castle app. We do not use in-app analytics, session recording, or behavioral tracking to monitor how you or your team use Castle. We do not track which screens you view, what you click, or how you interact with your data.

We are not built to see your sensitive information. Our design and operations are intended so that we do not have access to your sensitive business or financial data beyond what is strictly necessary to run the service. We do not use your Castle content for advertising or to build profiles about you or your business.

4. Payments

Payment processing (credit card and bank payments) is handled by certified third-party processors. We do not store full payment card numbers or full bank account details. We receive only what we need to operate Castle (e.g. transaction status, last four digits where relevant). Sensitive payment data stays with the processor and is subject to their policies and applicable standards.

5. Use and retention

We use Castle data only to provide, maintain, and secure the Castle service; to respond to your requests; and as described in the main privacy policy. We retain data only as long as needed for those purposes and in line with our retention practices. When we no longer need it, we delete or anonymize it.

6. Your rights and contact

Your rights regarding your personal data (access, correction, deletion, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority where applicable) are set out in the MECE TECH Privacy Policy. To exercise them or to ask questions about Castle and privacy, contact us at contact@mece.tech.