Privacy Policy

1. Information We Collect

Account information: Name, email address, company name, and phone number when you create an account.

Service data: Customer names, addresses, service records, chemical readings, photos, invoices, and other data you enter to manage your pool service business.

Usage data: How you interact with the Service (pages visited, features used, time spent) to improve the product.

Device data: Browser type, IP address, and device identifiers for security and troubleshooting.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Process payments via Stripe
• Send transactional emails (invoices, service reports, account notifications)
• Improve the Service based on usage patterns
• Respond to support requests

3. Aggregated & Anonymized Data

We may use your data in aggregated, anonymized, and de-identified form for:

• Industry analytics and research (e.g., regional equipment failure trends, chemical consumption patterns)
• Product improvement and benchmarking
• Sharing with third parties such as equipment manufacturers, researchers, and insurers

We will never sell individually identifiable customer or homeowner data.

Operator-identifiable business data (your company name, pool count, revenue) will not be shared with competing pool service operators or competing software platforms.

4. Homeowner Data

Your customers' (homeowners') personal information — names, addresses, email addresses, and phone numbers — is collected solely to enable you to manage your service relationships. We do not contact homeowners for marketing purposes. Service report and invoice emails are sent on your behalf, branded with your company identity.

5. Data Security

We use industry-standard security measures including: encryption in transit (TLS), row-level security on all database tables, role-based access control, and secure credential management. Your data is hosted on Supabase (PostgreSQL) and Vercel infrastructure within the United States.

6. Third-Party Services

We use the following third-party services that process your data:

• Supabase — Database hosting and authentication
• Stripe — Payment processing
• Resend — Transactional email delivery
• Google Maps — Address geocoding and route mapping
• Vercel — Application hosting

7. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., financial records).

8. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us. If you are a California resident, you have additional rights under the CCPA. If you are located in the EU/EEA, you have rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Your continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions? Contact us at privacy@tradestack.studio.