What we access
When you install Abacus, Jobber asks you to grant access to: clients (names and tags — so memberships can be tagged and searched), jobs and their line items (so prices can be previewed and updated), scheduled items (so completed visits can be counted against plan entitlements), and quotes (so an approved plan quote can propose an enrollment). We read a client’s email address or phone number only to prepare or send a price notice or a follow-up you asked for. We also read your invoices and quotes that are waiting on an answer, to show you what is owed and to follow up when you ask. We do not access payment card data or payroll.
What we store
We store your Jobber account id and OAuth tokens (encrypted at rest with a dedicated key), your Abacus settings, price-run ledgers (job, line item, old price, new price, when), plan templates, memberships, and visit-completion counts. If you buy something, Stripe takes the payment; we store your Stripe customer id, what you bought and when, and never your card number. We do not sell this data. We share it only with the companies that run Abacus for us, listed below, and we never use one customer’s data for another customer.
What we write to Jobber
Exactly two kinds of writes, both only on your explicit action: job line items (their prices, and a line you add or remove, when you approve a price run or its undo) and client tags (when you enroll or confirm a member). Nothing writes silently.
What we send
Price notices by email, only when you press Send on a price change or set a date for it. Each one goes from notices@abacuswork.com with your business name on it, and replies go to the address you chose. We keep a record of which client was emailed and when, so nobody is emailed twice. Follow-ups on a quote or a late invoice go the same way, only to the clients you tick, and not to the same one again for two weeks. We never send anything else to your clients, and we never use their addresses for anything but the notes you asked for. If you press Send to a partner on a preview, that one person gets its totals and how undo works, with no client names; we keep their address with the preview so it is not sent more than three times.
Deletion
Uninstalling Abacus revokes our API access immediately and starts a 30-day clock; when it expires we hard-delete every record we hold about your account — tokens, ledgers, templates, memberships, everything. Email us to request earlier deletion.
Infrastructure
Abacus runs on Amazon Web Services in the United States. Data is encrypted in transit (TLS) and at rest (AWS KMS). Access is limited to Busic Digital operators.
Service providers
Amazon Web Services hosts Abacus and its data in the United States. Stripe takes payments. Resend delivers the emails Abacus sends. Vercel hosts this website. Each one sees only what it needs for that job.
If you are in the UK, the EEA or Switzerland
For your clients’ details (names, email addresses, phone numbers and prices), you are the controller and we process them for you, only to do what you ask in Abacus. For your own account details, we are the controller. We rely on our contract with you to provide the service, and on our legitimate interest in keeping it secure and working.
Your data is stored in the United States. If you need a data processing agreement, including the EU Standard Contractual Clauses and the UK Addendum, email us and we will sign one.
You can ask for a copy of your data, or ask us to correct it, delete it, or stop using it. Email us and we will answer within 30 days. If one of your clients asks you, we will help you answer. You can also complain to your data protection authority; in the UK that is the Information Commissioner’s Office.
Contact
Privacy questions: logan@abacuswork.com