Last updated: [DATE] — DRAFT, pending legal review. This is a first-pass draft and should not be relied on as a final privacy policy until reviewed by counsel.
This Privacy Policy explains how ServiTacto ("we," "us," "our") collects, uses, and shares information in connection with the ServiTacto platform. It applies to the businesses that subscribe to the Service ("Customers") and, where relevant, the Customer’s own employees and customers whose information a Customer submits to the Service.
For most of the personal information described below, ServiTacto acts as a data processor (or "service provider," under some laws) on behalf of the Customer, who acts as the data controller. If you are an employee or customer of a business using ServiTacto and have a question about your data, please contact that business directly — they control what information is collected and how it is used.
Account information: name, email, phone number, and login credentials for Customer administrators and employees who access the Service.
Customer-submitted business data: information a Customer enters or uploads about its own employees and customers — for example, employee names and contact information, customer names and service addresses, job and service-order details, and inventory records.
Employee location data: if a Customer enables GPS-based timeclock verification, we collect device location data at the moment an employee clocks in or out, for the purpose of confirming the punch occurred near the expected job site. This data is collected on behalf of, and controlled by, the Customer.
Payment information: subscription and in-app customer payments are processed by our payment processor, Stripe. We do not store full payment card numbers on our own systems.
Usage data: information about how the Service is accessed and used, such as log data, device/browser information, and timestamps, collected to operate, secure, and improve the Service.
We use the information described above to: provide and operate the Service; authenticate users and secure accounts; process payments; sync approved timeclock data to a Customer’s connected payroll provider where enabled; respond to support requests; and monitor, maintain, and improve the Service’s reliability and security.
We do not sell personal information, and we do not use Customer Data to serve advertising.
We share information with the following categories of service providers, only as necessary to operate the Service:
Amazon Web Services — cloud hosting and infrastructure for all Customer Data.
Stripe — payment processing for subscriptions and in-app customer payments.
Gusto — payroll processing, only for Customers who choose to connect a Gusto account, and limited to the timeclock data needed to run payroll.
We require our sub-processors to protect information consistent with this Policy and applicable law.
Where a Customer enables GPS-based timeclock enforcement, location data is collected only at the moment of a clock-in or clock-out event — not on a continuous or background basis — and is used solely to flag punches that fall outside an expected radius of the job site for the Customer’s review. Customers, not ServiTacto, are responsible for providing any legally required notice to their employees before enabling this feature.
We retain Customer Data for as long as a Customer’s account is active, and for a reasonable period after termination to allow for data export, followed by deletion in accordance with our standard retention practices, except where longer retention is required by law.
We use industry-standard technical and organizational measures to protect Customer Data, including encryption in transit, access controls, and per-tenant data isolation within our multi-tenant architecture. No system can be guaranteed completely secure, and we encourage Customers to use strong, unique passwords and enable available account security features.
Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of your personal information. If you are an employee or customer of a ServiTacto Customer, please direct these requests to that business, as they control the data. If you are a Customer administrator with questions about your own account data, contact privacy@servicetrackerhq.com.
The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children.
Customer Data may be processed and stored in the United States. Where required by applicable law, we take steps to ensure an adequate level of protection for information transferred internationally.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where required by law, through additional notice.
Questions about this Privacy Policy can be sent to privacy@servicetrackerhq.com.