Your customer list is the business. We treat it that way.

Is my data separated from other companies'?

Yes, at the database level rather than through a filter in the software. Every record carries the company it belongs to, and the database itself will not return one company's rows to another company's login. That rule sits beneath the application rather than inside it, so an error in a screen does not bypass it.

We test this against the live database using two separate company accounts. Each one tries to read, write, forge and reach into the other's records, and every attempt is checked to confirm it fails. These checks run as an automated test suite.

Who inside my company can see what?

You decide, per person. A technician can be limited to their own jobs, or given the whole customer book. Pay rates are not visible to the crew. Someone who works the phones gets the office view rather than the field one.

Those permissions are enforced by the server and the database, not just hidden in the interface. Someone without permission for an action is blocked there too, even if they find another route to it.

Where are my customers' card details?

With Stripe, in your own Stripe account. Field Blasters does not see a full card number. Full card numbers are not stored in Field Blasters. Your customers' saved cards belong to your Stripe account, so they stay with you if you leave.

Who can get into my account?

Everyone signs in with their own email address and their own password. Sessions end when someone signs out, and signing out clears the copy of your data held on that device — which matters on a shared phone in a truck.

Can Field Blasters see inside my account?

Only when you allow it, and you can see when it happens. When you ask us for help, we send a request from our side with the reason written out; it lands on your Home tab and in your email, and nothing opens until an administrator of your company allows it.

You choose how much: look only, or look and change — and if change, exactly which parts (settings and prices, customer records and jobs, the schedule, marketing). You can allow less than we asked. Access ends on its own after the time you approve, and you can end it at any time.

While it is open we see your account the way you do — the same screens — with a banner across the top of ours saying whose account it is and what you allowed. Every screen we look at and every change we make is listed on your Home tab as it happens.

Payments, cards, refunds, who can log in, and anything that sends a message to your customers stay off-limits to us, whatever you allowed. Those restrictions are enforced by the server, regardless of the access approved for support. Invoices and billing dates are restricted too, unless you check Billing & invoices on a request so we can void or correct one for you. Even then, the payments recorded on it stay locked.

What about my customers?

Your customers reach their own page through a private link rather than requiring another password. Each link opens exactly one account and nothing else. Email to them comes from your business name, with replies going to you. It does not come from us or carry our name.

Is anything backed up?

Yes. The database is backed up continuously by our hosting provider, and deletions inside the app go to a trash that holds them for 30 days rather than removing them immediately. Deleting the wrong customer at 7am is a recoverable mistake.

The database also enforces its own rules, whatever a phone sends it. A save cannot remove a recorded payment. A finished job stays finished unless someone reopens it on purpose and gives a reason. A phone holding an old copy of a record cannot write over a newer one. And every change keeps the previous copy for 30 days, so an overwrite is one query to undo.

Every night the records are checked against the activity log, and you hear about it only if something does not match.

What happens if I leave?

Your data stays readable and exportable for 90 days, and we delete it whenever you ask us to. Your Stripe account, your customers and their saved cards were always yours and are unaffected — that is the point of connecting your own account rather than using ours.

You can ask from inside the app: your own menu has Delete my account, which sends the request to us, and a person closes the account by hand. Account deletion requires a reviewed request to help prevent accidental data loss.