Privacy Policy

1. Our role

• Controller. We decide how to handle Website visitor data, account and user data (such as your login and profile), billing contacts, and Platform usage data.

• Service provider / processor. True Pro customers are field service businesses ("Customers"). They use the Platform to manage their own customers, contacts, properties, employees, and messages ("Customer Data"). For Customer Data, we process information on the Customer's behalf and under its instructions. If you are a Customer's client or employee and have a question about your data, contact that business. We will help them respond.

2. Information we collect

Website visitors

• Information you submit: name, email, phone, company, and message (for example, demo requests, contact forms, newsletter sign-ups).

• Automatic data: IP address, browser/device type, pages viewed, referring URL, and approximate location derived from IP, collected via cookies and similar technologies (section 7).

Platform account holders and users

• Account data: name, email, phone, password (stored hashed), role, language preference, and sign-in data from Microsoft or Google if you use single sign-on.

• Organization data: business name, address, EIN, licenses, and billing contacts. Payment processors collect and store payment card and bank details; we keep only limited details such as card type and last four digits.

• Usage and device data: pages and features used, clicks, timestamps, IP address, browser/device information, sign-in history (time, IP), error reports, and performance data.

• Support data: messages you send us, bug reports, and attached screenshots.

Customer Data (processed on behalf of Customers)

Depending on how a Customer uses the Platform, this may include:

• names, addresses, phone numbers, and emails of the Customer's clients and contacts; property details, site photos, and notes

• proposals, contracts, e-signatures, invoices, and payment records

• text message and email content and history, and SMS consent status

• employee data: name, contact info, date of birth, pay rates, hours, timesheets, payroll records, and certifications/licenses

• vehicle data and GPS location/trip history from telematics providers the Customer connects (e.g. Azuga)

• data imported from connected services (e.g. QuickBooks, Microsoft 365, Gmail)

• prompts and content submitted to AI features

The Platform does not collect your device's precise location directly.

3. How we use information

• Provide, operate, maintain, and secure the Services

• Create and manage accounts; authenticate users

• Process payments and billing

• Send service messages (account, security, billing, product updates) and, where permitted, marketing emails. You can unsubscribe at any time.

• Run Customer-directed features: scheduling, messaging, invoicing, e-signature, integrations, AI assistance, and automations

• Provide support, troubleshoot, and debug (including reviewing error reports and, where recorded, session replays)

• Understand usage to improve the Services, including product analytics and feature flags

• Detect and prevent fraud, abuse, and security incidents; keep audit logs

• Comply with law and enforce our Terms

We use Customer Data only to provide the Services to that Customer and as described in our Terms. We do not use it for our own marketing.

4. AI features

When you use AI features, we send the relevant prompts and Customer Data to AI model providers. These include models from OpenAI and Anthropic, served through DigitalOcean's AI platform. They process it only to generate a response. Under our agreements, providers may not use this data to train their models. AI-generated content may be stored in your account, for example conversation history and drafts.

5. How we share information

We do not sell personal information. We do not share it for cross-context behavioral advertising. We share information only:

• With subprocessors that help us run the Services (section 6). They are bound by contracts to use the data only to serve us.

• At a Customer's direction, such as sending a text or email, syncing to QuickBooks, or requesting an e-signature. The receiving service handles the data under its own policies.

• Within the Customer's organization, according to the roles and permissions the Customer sets up.

• For support: authorized True Pro staff may access an account to provide support or investigate issues. That access is logged.

• For legal reasons: to comply with law or legal process, or to protect rights, safety, and the integrity of the Services.

• In a business transfer, such as a merger, acquisition, or sale of assets. Any acquirer remains bound by this Policy.

• With consent.

SMS opt-in data and consent are never shared with third parties for their marketing (see section 8).

6. Subprocessors and third-party services

We update this list when vendors change. Customers may request advance notice of new subprocessors at [email protected].

7. Cookies and similar technologies

Platform (app.truepro.com)

We do not use advertising cookies in the Platform.

Website (truepro.com)

We use Google Analytics to understand how visitors find and use the website. Google Analytics sets first-party cookies (_ga, _ga_*) and collects pages viewed, referring site, device and browser information, and approximate location derived from your IP address. Google processes this data as our service provider under its Google Analytics terms and privacy practices. We do not enable Google Analytics advertising features, and we do not use advertising or retargeting pixels on the website. You can opt out with the Google Analytics Opt-out Browser Add-on.

Your choices

You can block or delete cookies in your browser. Blocking strictly necessary cookies will break sign-in. Where required by law, we honor Global Privacy Control (GPC) signals as an opt-out of analytics and any "sale/share" of information. Browser "Do Not Track" signals have no common standard, and we don't respond to them.

8. Text messaging (SMS)

Customers use the Platform to text their own clients and staff, through their own registered messaging accounts and only with the recipient's consent. We store phone numbers, message content, delivery status, and opt-in/opt-out status to deliver messages and maintain compliance records. Mobile information and SMS opt-in data are not shared with third parties or affiliates for marketing or promotional purposes. We share them only with the SMS gateway and carriers that deliver the messages, and as required by law. Reply STOP to opt out or HELP for help. Our SMS Terms govern texts True Pro sends about its own service; texts from a business using True Pro are governed by that business's messaging terms.

9. Google user data

When you connect a Google account, True Pro requests only the scopes the feature needs. Today that is sign-in (openid, email) and sending email (gmail.send) from your connected mailbox. We use that access only to send email you or your organization initiate from True Pro. True Pro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising. We do not sell it. We do not use it to train AI models. Humans read it only with your consent, for security, or as required by law. You can revoke access at any time in True Pro or at myaccount.google.com/permissions.

10. Retention

• Account and Customer Data: kept while the account is active. Deleted within 90 days after termination, unless the Customer asks for earlier deletion or the law requires longer retention (for example, tax, payroll, or SMS consent records). Backups expire on their regular schedule.

• Analytics and diagnostic data: kept per our vendors' retention settings, generally no more than 12 months.

• Website inquiries: kept as long as needed to respond and for reasonable follow-up, then deleted or anonymized.

11. Security

We use administrative, technical, and physical safeguards:

• encryption in transit (HTTPS/TLS)

• encryption of sensitive fields at rest, such as integration credentials

• hashed passwords

• role-based access controls

• audit logs of data changes and staff account access

No system is perfectly secure. If a breach affects your personal information, we will notify Customers and individuals as the law requires.

12. Your rights and choices

Depending on where you live (for example, California and other U.S. states with privacy laws, or the EU/UK), you may have the right to:

• access, correct, or delete personal information

• receive a portable copy

• opt out of "sale," "sharing," targeted advertising, or profiling (we don't do these)

• withdraw consent

• appeal a denied request, or complain to a data protection authority

We won't discriminate against you for using these rights.

To make a request, email [email protected]. We will verify your identity before acting. You may use an authorized agent. If your data was provided by a True Pro Customer (for example, you are a client of a landscaping company), send your request to that business. If you contact us, we will forward it.

Users can update most profile information in Platform settings. To stop marketing emails, use the unsubscribe link. Service and security messages can't be opted out of while you have an account.

13. Children

The Services are for businesses and are not directed to children under 16. We do not knowingly collect their personal information. Contact us if you think we have, and we will delete it.

14. International users

We are based in the United States and process and store data in the U.S. If you access the Services from outside the U.S., your information will be transferred to the U.S., where privacy laws may differ. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

15. Changes

We may update this Policy. The "Last updated" date shows the current version. We will notify Customers of material changes by email or in the Platform before they take effect.

16. Contact

True Pro 3324 E Ray Rd #655, Higley, AZ 85236 Email: [email protected]