Data minimization
Following FTC small-business guidance, the app is designed to collect only the information needed for the service request. Forms ask agents not to enter sensitive personal information that is not required to do the work.
Role-based access
Access is limited according to each user's authorized responsibilities. Contractor clients see only their own records, and account boundaries are enforced within the service.
Authentication
- Accounts use email and password authentication backed by the managed auth provider.
- Passwords are stored as salted hashes by the auth provider, we never see the plaintext password.
- Two-factor authentication is not enabled.
- Users are responsible for keeping credentials private and must never share an account.
Network and transport
- Traffic to the app is served over HTTPS.
- API calls require a valid session token.
Inactive features in the current release
- No real SMS messages are sent.
- No phone provider is connected.
- No call recording or live call monitoring.
- No real payment processing or subscription billing.
If any of these features is activated later, the Privacy Policy, Terms of Service, user consent language, and compliance workflows will be updated before those features are offered.
Backups and logs
Backups and security logs may be retained for a limited period for reliability, recovery, and incident review. These backups may briefly contain information that is otherwise deleted from active systems.
Breach review and notification
If we identify a security incident that may affect personal information, we investigate, contain, and review applicable law. We will notify affected users as required, including under the Missouri breach-notification statute (Mo. Rev. Stat. § 407.1500) when it applies.
Your part
- Use a strong, unique password and never share your account.
- Sign out on shared devices.
- Do not enter Social Security numbers, payment card numbers, bank account numbers, passwords, or unrelated sensitive personal information into the app.
- Report suspicious activity through /contact-support.
Responsible disclosure
If you believe you have found a security vulnerability, please contact us through /contact-support with the details. Please do not test against real customer data.