Privacy Policy

Effective date: upon your acceptance · Last updated: June 16, 2026

This Privacy Policy explains how [COMPANY LEGAL NAME] (“we,” “us,” “Handy Hub”) handles information in connection with the Handy Hub application and services (the “Service”). By using the Service you agree to this Policy.

Two kinds of people are involved. “Operators” are the tradespeople who use Handy Hub to run their business. “Customers” are the operator’s own clients, whose information operators enter or receive through the Service. For an operator’s Customer data, the operator decides what is collected and why; we process it on the operator’s behalf to provide the Service.

1. Information we collect

Operator account info: name, business name, email, and login credentials; business settings (rates, tax, branding, payment handles).
Operator business data: the price book, jobs, estimates, invoices, expenses, and similar records the operator creates.
Customer data entered/received by operators: customer names, phone numbers, addresses, the content of text messages and photos exchanged with customers, appointments, and payment records (e.g., method, amount, notes).
Payment information: handled by our payment processor (e.g., Stripe). We don’t store full card numbers; we receive limited billing metadata to manage subscriptions and record payments.
Technical/usage data: device and log information needed to operate, secure, and improve the Service (e.g., timestamps, error logs, push-notification subscriptions).

2. How we use information

To provide, maintain, secure, and improve the Service.
To sync messages, send notifications you’ve enabled, generate estimates/invoices, process subscription billing, and back up data.
To communicate with operators about their account and support.
To comply with law and enforce our Terms.

We do not sell personal information, and we do not use the content of operators’ customer messages or photos to advertise.

3. Messaging & the SMS relay

Operators connect a device (the “relay”) that forwards their incoming and outgoing texts and photos between their phone and the Service so they appear in the app. The relay accesses messages on that device for this purpose. Operators are responsible for having the right to use that messaging data and for complying with laws governing calls and texts (see our Terms).

4. Where data is stored & backups

Data is stored with our cloud hosting provider (e.g., Supabase) and, for media, in private storage.
We make automatic nightly backups. Operators can also download all of their photos and data at any time (to keep on their own device or upload to storage of their choice), and may connect their own Google Drive — using a per-file scope that only accesses files the app creates — to receive a copy there.
Some data may be cached locally on an operator’s device to work offline.

5. Sharing

We share information only with service providers that help us run the Service (such as cloud hosting, payment processing, and, if the operator connects it, Google for calendar/Drive), under appropriate confidentiality and security obligations; when required by law; or to protect rights and safety. We may share aggregated or de-identified data that does not identify anyone.

6. Security

We use technical and organizational measures to protect information (such as encryption in transit, access controls, and per-account data isolation). No system is perfectly secure; we cannot guarantee absolute security, and operators are responsible for safeguarding their own login and devices.

7. Retention

We keep information for as long as an account is active and as needed to provide the Service, then for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. Operators can delete records or their account; some residual copies may persist in backups for a limited time.

8. Your rights

Depending on where you live, you (and an operator’s customers, through that operator) may have rights to access, correct, delete, or export personal information, or to object to certain processing. Operators can do much of this directly in the app (export and delete). Customers should contact the operator they do business with; we will assist operators in responding. To make a request to us, contact us below.

9. Children

The Service is for businesses and is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect their personal information.

10. Changes

We may update this Policy. Material changes will be notified in the app or by email. Continuing to use the Service after the effective date means you accept the updated Policy.

11. Contact

Privacy questions or requests: [CONTACT EMAIL] ([COMPANY LEGAL NAME], [MAILING ADDRESS]).