Last updated: June 2026
This Privacy Policy explains how Domantas Krunglevicius(“Corem8”, “we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our cloud-based field service management platform at corem8.io and our marketing website at corem8.com.
The data controller responsible for your personal data is:
Domantas Krunglevicius (sole trader, trading as Corem8)
Based in the United Kingdom
Corem8 is currently operated by a sole trader. We intend to transfer operation of the Corem8 service to a limited company once it is registered, and will update these policies and notify account holders if that happens.
Data Protection Officer contact: privacy@corem8.io
Name, email address, phone number, and postal address that you provide during registration or while using the service.
Company name, trading name, billing address, VAT number, and other business details you provide.
Customer addresses, job notes, photographs, appointment times, and other data you enter when managing jobs through Corem8.
Payment amounts, payment methods, invoice details, and transaction history. We do not store credit or debit card numbers. These are handled exclusively by Stripe.
Pages visited, features used, session duration, click patterns, and other interaction data that helps us improve the platform.
Browser type and version, operating system, IP address, device type, screen resolution, and referring URLs.
If you use the Corem8 mobile app, we process: a device push notification token (to send job and message alerts); camera and photo access only when you choose to add a job photo; and approximate or precise location onlywhen you enable location-based features. We do not track your activity across other companies' apps or websites, and the app shows no advertising. You control camera, photo, location, and notification permissions in your device settings, and you can delete your account from within the app.
When you register for an account, fill in forms, create jobs, upload photos, or contact our support team.
Through cookies, analytics tools, and server logs when you browse our website or use the platform.
Clerk (authentication data when you sign in), Stripe (payment confirmation and subscription status), and any third-party services you choose to connect (e.g., Xero, QuickBooks, Facebook).
Processing necessary to provide you with the Corem8 service, manage your account, process payments, and deliver the features you have subscribed to.
Processing necessary for our legitimate business interests, including improving the platform, preventing fraud, ensuring security, and understanding how our service is used. We always balance our interests against your rights.
Where you have given explicit consent, such as opting in to marketing communications, connecting third-party services like Facebook, or enabling optional analytics cookies. You may withdraw consent at any time.
Processing necessary to comply with legal obligations, including UK tax law requirements for retaining financial records.
We share your data with third-party processors that process data on our behalf and under our instructions. The authoritative, always-up-to-date list, including the entity, purpose, data categories, location, and transfer mechanism for each, is published at corem8.com/sub-processors. A summary is shown below.
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication & user management | US |
| Supabase | Database hosting | US |
| Stripe | Payment processing | US / EU |
| Square | Payment processing (where enabled) | US / EU |
| Maps, Google Ads (campaign data & offline conversion uploads), Gmail (read/send/modify on accounts you connect), Analytics | US | |
| Meta | Facebook Login & Graph API (Page posting); WhatsApp Business Platform (messaging) | US |
| Anthropic | AI features (Claude API) | US |
| Xero | Accounting sync | AU / UK |
| QuickBooks (Intuit) | Accounting sync | US |
| SendGrid (Twilio) | Transactional email delivery | US |
| Twilio | SMS & WhatsApp messaging | US |
| Upstash | Rate limiting & caching | EU |
| Sentry | Error tracking & performance | EU |
| Vercel | Platform hosting & CDN | US |
When you connect a Google account (Google Ads or Gmail), Corem8 accesses Google user data only to provide features you have explicitly enabled. Corem8's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, do not use it to train generalised AI/ML models, and do not allow humans to read it except for security, to comply with the law, or with your explicit consent.
Specifically: for Google Ads we read campaign performance data and upload offline conversions for the account you connect. For Gmail we read, send, and modify email only within the connected mailbox, solely to power the in-product email features you use. You can disconnect either at any time in Settings → Integrations, which revokes our access.
AI-powered features (such as drafting messages, summaries, and estimates) are processed via the Anthropic Claude API. Anthropic does not train its models on data submitted through its API, and we do not use data from your connected integrations to train AI models.
Card payments are handled exclusively by Stripe and, where enabled, Square. Card numbers never reach our servers. Both act as independent controllers for the payment data they process; please refer to Stripe's Privacy Policy and Square's Privacy Notice.
If you choose to connect your Facebook account to Corem8, we access the following data:
We do not access:
You can revoke Corem8's access to your Facebook account at any time by visiting Facebook Settings → Apps and Websites and removing Corem8. Revoking access will stop all Facebook-related features within your Corem8 account.
If a business connects WhatsApp, Corem8 sends and receives WhatsApp messages on that business's behalf through the WhatsApp Business Platform. We process the content of those message threads and related metadata (phone numbers, timestamps, delivery status) solely to deliver the messaging feature inside the business's unified inbox. We do not use this data for any purpose other than supporting that messaging, and any automated replies are limited to task-specific assistance (for example booking, order status, or support), consistent with Meta's WhatsApp Business policies.
Businesses using WhatsApp through Corem8 are responsible for obtaining each recipient's prior opt-in before messaging them and for honouring opt-out requests, as set out in our Acceptable Use Policy. You can request deletion of WhatsApp-related data via our Data Deletion process.
Retained while your account is active and for 12 months after you request deletion, to allow for account recovery and to resolve any outstanding issues.
Retained for at least 6 years after creation, as required by UK tax law (HMRC requirements), or longer where required by applicable law.
Server logs, analytics data, and access logs are retained for 90 days and then automatically deleted or anonymised.
Your data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area, including the United States, where our infrastructure providers (Supabase, Clerk, Stripe, Vercel) operate servers.
Where data is transferred internationally, we ensure appropriate safeguards are in place, including:
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
To exercise any of these rights, contact us at privacy@corem8.io. We will respond within 30 days.
Corem8 is a business-to-business service and is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@corem8.com and we will delete the data promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email (sent to the address associated with your account) before the changes take effect. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy or how we handle your data, contact us:
Email: privacy@corem8.io
General enquiries: hello@corem8.io
Entity: Corem8 is a trading name of Domantas Krunglevicius (sole trader), United Kingdom