Privacy Policy

ServCTRL is job software for small home-services companies. To run it, we need some information about you and your business, and we store the records you create in it. This policy explains what we collect, why, who can see it, and what your rights are. The short version: we collect what the product needs to work, we never sell your personal information, and your business records are yours.

1. What we collect and why

Identity and access

When you sign up we ask for your name, email address, company name, and trade. We use these to create your account, personalize the product, and send you product communications. We will never sell your personal information to third parties, and we won't use your name or company in marketing without your permission.

Billing information

If you're on a paid plan, your payment details go directly to Stripe, our payment processor — full card numbers never touch our servers. We keep the last four digits of your card, your billing address, and your transaction history for invoicing and fraud prevention.

Your business records

The records you create in ServCTRL — customers and their contact details, service addresses, estimates, jobs, schedules, photos, notes, invoices, and payment records — are stored on our servers so the product can work. They belong to you. We keep them for as long as your account is active; when an account is deleted, its records are purged per the timelines in our Cancellation Policy.

Your customers' information

The people in your customer list are your customers, not ours. We store their names, contact details, and service addresses on your behalf and use them only to provide the Service to you — sending the estimates, appointment texts, and invoices you initiate. We never market to your customers, never sell their information, and never use it for anything except running your account. You are responsible for having a lawful basis to give us that information, including consent for text messages where required.

Text messages (SMS)

If you turn on customer texting, ServCTRL sends appointment confirmations, reminders, on-my-way notices, payment links, and review requests to your customers through Twilio. Message and data rates may apply to recipients. Any recipient can opt out at any time by replying STOP (and back in with START); we honor opt-outs immediately and across all ServCTRL accounts, and we don't send non-urgent texts during nighttime quiet hours.

Website and product interactions

Like most software, we log technical data when you use ServCTRL: IP address, browser and device type, pages visited, and errors encountered. We use this for security, fraud prevention, debugging, and understanding which parts of the product get used. Access to your account is logged by IP address for as long as the account is active.

Cookies

We use first-party cookies to keep you signed in and remember your preferences. You can adjust cookie settings in your browser, though the app won't work without the session cookie.

Correspondence

When you email support, we keep the thread so we have the history the next time you need help.

2. When we access or disclose your information

To run the Service. We use third-party subprocessors to operate ServCTRL: Stripe (payments), Twilio (text messages), Resend (transactional email), Akamai/Linode (hosting), Cloudflare (encrypted backups), and Sentry (error tracking). Each receives only what it needs to do its job.

To help you. Nobody at ServCTRL looks at the contents of your account except with your permission — typically when you ask support to investigate a problem.

To investigate abuse. We may access an account to investigate a violation of our Terms of Service, and we notify the authorities where the law requires it.

When legally compelled. ServCTRL is a U.S. company. We disclose information in response to government requests only when legally required to — a warrant, subpoena, or court order — and our policy is to notify you before disclosure unless we're legally prohibited from doing so.

Aggregated data. We may use de-identified, aggregated data (for example, "shops send most estimates on Mondays") for product and marketing purposes. It's never traceable to you or your customers.

If we're acquired. If ServCTRL is ever acquired or merged, we'll notify you before your information is transferred or becomes subject to a different policy.

3. Your rights

You can always:

• Know what personal information we hold and how we use it.
• Access your personal information and get a copy of it.
• Correct anything that's inaccurate.
• Delete your data (this may mean closing your account).
• Export your records — invoices and payments export to CSV in the app, and support will help with a fuller export.
• Object to or restrict certain processing, including any sale of your data — though we never have and never will sell it.
• Complain to a supervisory authority.
• Not be discriminated against for exercising any of these rights.

To exercise any of these, email [email protected]. California residents: see our California Notice at Collection.

4. How we secure your data

All data is encrypted in transit with TLS. Backups are encrypted. Database access is restricted to authorized personnel, and production errors are tracked without capturing personal information. No system is perfectly secure, but we treat your business records like they're the business — because for you, they are.

5. When you delete your account

Your content becomes inaccessible immediately and is permanently purged from active systems within 30 days and from backups within 60 days. The details, including how to export first, are in our Cancellation Policy.

6. Data retention

We keep information as long as it's needed for the purposes above, and afterward only as required for legal compliance, dispute resolution, or enforcing our agreements. Billing records are retained as required by tax law.

7. Where your data lives

ServCTRL is built for U.S. businesses and hosted in the United States. If you use the Service from outside the U.S., your information is transferred to and stored in the U.S., and by using the Service you consent to that transfer.

8. Changes and questions

We may update this policy to comply with regulations or reflect new practices. Significant changes are reflected in the date at the top of this page. Questions? Email [email protected].