Privacy Policy

SMS/Text Message Data

• Phone numbers of individuals who have opted-in to receive service notifications
• Message content (appointment reminders, status updates, service notifications)
• Opt-in consent records and timestamps
• Message delivery status and history
• Opt-out requests and preferences
• Customer replies (STOP, START, HELP commands)

Location Information

• Precise GPS location data during work hours
• Location is tracked continuously while the app is active during your scheduled work hours
• Purpose: worker safety, task verification, time tracking, route optimization
• Access: your employer and authorized supervisors only

Work Documentation

• Photos taken for task completion and safety documentation
• Voice recordings for task notes (when enabled)
• Text-based task updates and work notes

Device Information

• Device type and operating system
• App version information
• Network connectivity status
• Device identifiers for authentication purposes

Usage Data

• Task completion metrics
• App feature usage patterns
• Team communication logs

We Use Your Information To:

• Deliver SMS communications for service appointments and updates
• Monitor worker safety and location during work hours
• Manage and verify task completion
• Track time and attendance
• Ensure quality assurance and compliance
• Facilitate team communication and coordination
• Process opt-in/opt-out requests and maintain consent records
• Improve our services through aggregated and anonymized data analysis
• Train and improve AI models using aggregated, anonymized data

We Do NOT:

• Sell your personal data directly to third parties
• Use your data for advertising purposes
• Track your location outside of authorized work hours
• Share identifiable personal data beyond your employer's authorized access

Employer Access

All data collected through Servo belongs to and is accessible by your employer. This includes location data, task documentation, communications, and usage information.

Third-Party Service Providers

We share data with the following service providers under strict data processing agreements:

• Twilio - SMS delivery and communication services (SOC 2 Type II, HIPAA compliant)
• Supabase - Database and authentication services (SOC 2 Type II)
• Amazon Web Services - Cloud infrastructure and photo storage (HIPAA compliant)
• Anthropic - AI assistant capabilities (Claude) for email management, document processing, and workflow automation (when enabled by employer)
• OpenAI - Optional AI-powered features (when enabled by employer)

Legal Requirements

We may disclose your information in response to:

• Court orders or legal process
• Government or regulatory investigations
• Emergency situations involving potential harm

Data We Access

• Gmail - Email messages are accessed in real-time via the Gmail API to enable our AI assistant to search, read, and send emails on your behalf for CRM workflows. Email content is displayed live and is not stored in our database.
• Google Calendar - Calendar events are accessed to display scheduling information and create appointments for field service coordination.
• Profile Information - Your email address and basic profile information are used for account identification and display.

Limited Use Disclosure

Servo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve user-facing features that are prominent in our application's interface
• We do not use Google user data for advertising purposes
• We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, you provide explicit consent, or it is required for security or legal purposes
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, or it is required by law

Data Storage and Retention

• Email content accessed via the Gmail API is not stored in our database
• When you disconnect your Google account from Servo, all associated data (including any previously synced email metadata) is permanently deleted from our systems
• OAuth tokens are encrypted at rest and are revoked at Google's servers upon disconnection

Revoking Access

You can disconnect your Google account from Servo at any time through the application settings. You can also revoke Servo's access directly from your Google Account permissions page. Upon revocation, all Google user data is deleted from our systems.

Through Your Employer

As Servo is enterprise software, most data rights are exercised through your employer:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Obtain a copy of your data

Direct Rights

You may directly:

• Opt-out of optional features
• Report security concerns
• File complaints with regulatory authorities

Message Types

• Appointment reminders (sent 24-48 hours before scheduled service)
• Technician arrival and dispatch notifications
• Service completion confirmations
• Optional customer satisfaction surveys
• Billing and payment notifications

Consent and Opt-Out

• Clear opt-in is required before any messages are sent
• Reply STOP to any message to opt-out immediately
• Opt-out confirmation is sent within 24 hours
• Opt-out preferences are permanent until you re-subscribe

Phone Number Protection

• Phone numbers are stored using encryption
• Message logs are retained for 90 days
• Opt-out records are maintained permanently
• Phone numbers are never shared with third parties for marketing

Children

Servo is not intended for use by individuals under 18. We do not knowingly collect personal information from minors.

International Users

Servo currently operates in the United States only. All data is processed and stored in US data centers.

California Residents (CCPA)

California residents have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights