Privacy Policy

1. Information We Collect

We may collect information you provide directly to us, including:

• Name, email address, phone number, company name, and other contact details submitted through our contact form or other information request forms.
• If you sign up for text messages: your mobile number, first name and email (if you give one), and a record of your consent (the time, the page, the wording you agreed to, and your IP address and browser details).
• Account information, such as your name, email address, username, password, and other profile details used to create and manage your account.
• Billing and transaction information related to purchases or subscriptions made through Stripe; payment card details are processed by Stripe and are not stored by ZippyPro.
• Communications you send to us, including customer service inquiries sent to customercare@zippypro.app.
• Any other information you choose to submit through the Services.

We may also collect information automatically when you use the Services, including:

• Device information, such as IP address, browser type, device type, operating system, and unique device identifiers.
• Usage information, such as pages viewed, features used, referring pages, session duration, clicks, and other interaction data.
• Data stored in your browser, such as cookies or local storage, that the Services need to work, for example to keep you signed in.

2. Tracking Technologies

ZippyPro uses cookies, local storage and similar technologies only as needed to operate the Services, keep you signed in and keep the Services secure. Our website does not load advertising pixels, advertising tags or third-party analytics, and we do not use these technologies for advertising or remarketing. Our website loads fonts from Google Fonts, which receives your IP address when the page loads. The text-message sign-up form on our SMS Terms page may use Cloudflare Turnstile, a bot check, which receives your IP address and browser details.

You can manage cookie settings through your browser, but blocking certain cookies may affect how the Services function.

3. How We Use Information

We may use personal information to:

• Provide, maintain, and improve the Services.
• Create and manage user accounts and authenticate logins.
• Process payments, subscriptions, invoices, and related customer service through Stripe.
• Respond to contact requests, information requests, and support inquiries.
• Send transactional messages, security alerts, service notices, and account-related communications.
• Monitor usage, troubleshoot issues, detect fraud, and protect the security and integrity of the Services.
• Comply with legal obligations and enforce our terms, policies, and contractual rights.
• Data received from Google APIs is used only as described in Section 4b, not for the other purposes in this list.

4. How We Share Information

We do not sell your personal information for money. We may share personal information in the following circumstances:

• Service providers: with vendors that help operate the Services, including hosting, error monitoring, customer support, communications, and payment processing providers such as Stripe.
• Legal compliance and protection: when required by law, subpoena, court order, or other legal process, or when reasonably necessary to protect rights, safety, users, or the Services.
• Business transfers: in connection with a merger, acquisition, financing, asset sale, or similar corporate transaction.
• With your direction or consent: when you ask us to share information or connect with a third-party service.

4a. Text Messaging

If you give us your mobile number and agree to receive texts, we use it only to send the messages you agreed to. We do not sell, rent or share mobile numbers, text-message opt-in data or consent with third parties or affiliates for their marketing or promotional purposes. We share them only with service providers that deliver our messages (such as our SMS provider), and only for that purpose. Message frequency varies with your account activity. Message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. See our SMS Terms.

4b. Data From Google

Some ZippyPro features let you connect your own Google account. We access Google user data only after you connect a Google service yourself, and only for the features you turn on:

• Your Google account email address: to show which Google account is connected.
• Google Calendar: the events ZippyPro creates for your appointments and jobs (title, date and time, location and notes you enter). Google’s calendar permission lets a connected app see and edit events on your calendars; we use it only to add, update and remove the events ZippyPro creates, and to bring changes you make to those events in Google Calendar back into ZippyPro. Event notes can include your customer’s phone number. We ignore your other events.
• Google Business Profile: your business locations and details (address, hours, phone, website), the reviews customers leave on your profile (with the reviewer’s name and photo) and your replies, and your profile’s performance figures. We use it only to show this in ZippyPro and to post the replies and updates you write or approve. If you ask our AI assistant to draft a reply, the review text and the reviewer’s first name are sent to our AI provider (OpenAI) to write that draft for you; OpenAI processes it only to return the draft and does not use it to train its models.
• Google Ads: your campaign results and, for Local Services Ads, the leads you received (including the contact details the customer gave). We use them only to show your ad results and leads in ZippyPro.
• Google Drive: only the files ZippyPro creates in your Drive or that you choose to open with ZippyPro. We use them only to save and open the documents you ask for.

If we add another Google service, we will update this section before asking you for access to it.

How we store and protect it. Google access tokens are stored encrypted and are used only by our servers. Google user data is stored with the rest of your account data (see Security).

Who can see it. Google user data is available only to you, the team members you give access to, and the service providers that host or process it for us under contract (see Section 5). Our staff do not read it unless you ask us for help and agree, it is needed for security (such as investigating abuse), or the law requires it.

What we never do. We do not sell Google user data, use it for advertising, use it to decide credit or lending, transfer it to data brokers, or use it to develop, improve or train generalized AI or machine learning models.

Disconnecting. You can disconnect a Google service at any time in ZippyPro under Settings, Integrations, or in your Google Account at myaccount.google.com/permissions. When you disconnect in ZippyPro, we ask Google to revoke our access and delete the stored access tokens. Reviews, profile details, ad results, leads and calendar links already copied into ZippyPro stay in your account until you delete them or your account data is deleted as described in Data Retention (Section 10). To ask us to delete them sooner, email customercare@zippypro.app.

ZippyPro’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Service Providers & Infrastructure

ZippyPro uses the following categories of service providers to operate the Services. These providers may process personal information on our behalf:

• Hosting & Database: Supabase (database, authentication, serverless functions)
• Deployment & CDN: Vercel (web hosting and content delivery)
• Payment Processing: Stripe (subscription billing and payment processing)
• AI Services: OpenAI (powers AI agents, content generation, and workflow automation features); Perplexity and Tavily (web research for the AI assistant)
• Communications: Twilio (SMS and voice), Resend (transactional and marketing email delivery), Vapi (AI voice calls)
• Business Email: Microsoft 365 (our own email)
• Error Monitoring: Sentry (application error reports, which can include a masked recording of the on-screen activity just before an error)
• Security: Cloudflare (Turnstile bot protection on sign-in, sign-up, password reset and invitation pages, and, when enabled, on the text-message sign-up form)
• Third-Party Integrations: QuickBooks, Google (Calendar, Business Profile, Drive, Ads), Angi, and other services you choose to connect (see 4b for Google)

Each provider processes data in accordance with their own privacy policies and our contractual agreements. We select providers that maintain appropriate security practices.

6. AI-Powered Features & Data

ZippyPro includes AI-powered features such as AI agents, automated workflow suggestions, content generation, and intelligent estimating tools. When you use these features:

• Your prompts, inputs, and relevant account data may be sent to our AI service providers (OpenAI, and Perplexity or Tavily for web research) to generate responses and perform automated tasks.
• We do not use your data to train third-party AI models. Data sent to AI providers is used solely to process your requests.
• AI-generated outputs (estimates, messages, recommendations) may be stored within your account as part of normal service operation.
• You may opt out of AI-powered features at any time by not using them; core platform functionality does not require AI features.

AI-generated content is not guaranteed to be accurate and should be reviewed before use. See our Terms of Service for additional AI-related disclaimers.

7. Client & Crew Portal Data

ZippyPro enables registered users ("Account Holders") to provide their clients and crew members with access to portal features. This creates a layered data relationship:

• Account Holders: ZippyPro acts as the data controller for the personal information of registered users who create and manage accounts directly with us.
• Portal Users (Clients & Crew): When Account Holders invite clients or crew members to access portals, ZippyPro acts as a data processor on behalf of the Account Holder. The Account Holder determines what data is shared through portals and is responsible for obtaining any necessary consent from their clients and crew.

Data collected through client portals may include: name, email address, project information, estimates, invoices, and payment status. Data collected through crew portals may include: name, contact information, job assignments, schedules, time tracking, and authentication credentials.

If you are a client or crew member accessing ZippyPro through a portal, the Account Holder's privacy practices govern how your information is used. For questions about your data, contact the business that invited you to the portal.

8. Authentication Data

Crew members sign in to the Crew Portal with a personal PIN. ZippyPro does not offer device-based (biometric) sign-in and does not collect biometric data.

• PIN codes: PIN codes are cryptographically hashed before storage. We do not store PINs in plaintext.
• Retention: Authentication credentials are retained while the crew member's account is active and deleted when the Account Holder removes the crew member or closes their account.

9. Payments

Payments for paid Services may be processed by Stripe. Stripe collects and processes payment information according to its own privacy policy and terms. ZippyPro does not store full payment card numbers on its own systems.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain accounts, complete transactions, resolve disputes, enforce agreements, and comply with legal obligations. Specific retention periods include:

• Active accounts: Data is retained for the duration of your subscription and account activity.
• After account closure: Account data is retained for 30 days following termination to allow for data export, after which it may be permanently deleted.
• Billing records: Transaction and billing records may be retained for up to 7 years to comply with tax and accounting obligations.
• Communication logs: Customer support communications may be retained for up to 3 years.
• Aggregated usage statistics: Aggregated, de-identified usage data may be retained indefinitely for service improvement purposes.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission over the Internet or method of electronic storage is completely secure, and no security measure can guarantee absolute security.

12. Geographic Scope

ZippyPro primarily serves users in the United States and Canada. If you access the Services from another jurisdiction, you understand that your information may be transferred to and processed in the United States or other countries where service providers operate, which may have data protection laws different from those in your location.

13. Age Restrictions

The Services are intended only for adults age 18 and older. ZippyPro does not knowingly collect personal information from children. If ZippyPro becomes aware that personal information has been collected from a person under 18, that information may be deleted.

14. Your Choices

Depending on where you live, you may have certain rights regarding your personal information, such as the right to request access to, correction of, or deletion of certain personal information, subject to applicable law. You may also opt out of marketing emails by using the unsubscribe link in those emails, where available.

You may contact ZippyPro at customercare@zippypro.app to submit privacy-related questions or requests.

15. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions (such as completing a transaction, detecting security incidents, or complying with legal obligations).
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or "Sharing": We do not sell personal information or share it for cross-context behavioral advertising. If that ever changes, we will update this policy and give you a way to opt out before it happens. Questions: customercare@zippypro.app.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of personal information collected (in the preceding 12 months): Identifiers (name, email, phone number, IP address); commercial information (subscription history, transaction records); internet/electronic activity (usage data within the Services, device information); and professional information (company name, job role).

To exercise your rights, contact customercare@zippypro.app. We will verify your identity before processing requests. We do not sell personal information for monetary consideration.

16. Do Not Track & Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how companies should respond to DNT signals, and ZippyPro does not currently respond to DNT browser signals.

ZippyPro will honor Global Privacy Control (GPC) signals where required by applicable law. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal information under the CCPA/CPRA.

17. Third-Party Services

The Services may link to or integrate with third-party websites, tools, and services. This Privacy Policy does not apply to the privacy practices of third parties, and ZippyPro is not responsible for their practices. Users should review the privacy policies of those third parties, including Stripe and any service you choose to connect, where applicable.

18. Changes to This Policy

ZippyPro may update this Privacy Policy from time to time. When changes are made, the updated version will be posted with a revised "Last updated" date. Continued use of the Services after an update becomes effective means the updated Privacy Policy applies going forward.

19. Contact Information

For questions about this Privacy Policy or ZippyPro's privacy practices, contact:

ZippyPro LLC
23257 Vintage St NW, Saint Francis, MN 55070
Email: customercare@zippypro.app