Privacy Policy

This policy explains how Tovyalla handles personal information in connection with our job management software for contractors (the “Service”). It covers our website and the application. The Service is offered to businesses in the United States.

There are two kinds of data here, and they are treated differently:

• Account data — information about you as our subscriber: your name, work email, company name, phone number, billing details and how you use the Service. We decide how this is handled, and this policy governs it.
• Your business records — the customers, employees, subcontractors, projects, documents and messages you enter into the Service. We hold and process these on your behalf and on your instructions. You decide what goes in, how long it stays, and who sees it.

If you are a homeowner, employee or subcontractor whose details appear in a contractor’s Tovyalla account, the contractor is the one to contact about your information. We will pass your request to them and support them in answering it, but we cannot change or delete their records for them.

Directly from you:

• Account information — name, email address, company name, phone number
• Billing information — handled by Stripe. We receive a customer reference, the subscription status, the brand and last four digits of the card, and Stripe’s fingerprint of the card (a code that identifies the card without revealing it), which we use only to give each card one free trial. We never see or store your full card number.
• Business records you enter or upload, including files and photos
• Anything you send us in a support request

Automatically, when you use the Service:

• Log data — IP address, browser and device type, pages viewed, timestamps
• Authentication data — sign-in times and session activity
• Policy acceptance records — when you accept our Terms, the version accepted, the time, your IP address and browser, and the email address of the person who accepted
• Security log — sign-in attempts and their outcome, administrative actions such as inviting or removing a user, and requests we rejected, each with the time, the IP address and the browser it came from
• Error reports when something crashes, so we can fix it

From third parties: subscription and payment status from Stripe, message delivery and opt-out status from Twilio, signature status from BoldSign, and calendar events from Google if you choose to connect a Google account.

We do not knowingly collect information from anyone under 18. The Service is not directed to children. If we learn that we have collected a child’s information, we will delete it.

We use the information described above only to:

• Provide, operate, secure and improve the Service
• Create and administer your account and enforce the seat limit
• Process your subscription payments and send billing notices
• Deliver the messages, documents and calendar events you ask the Service to send
• Send service and security notices, and respond to your support requests
• Detect, investigate and prevent fraud, abuse and security incidents
• Comply with law and enforce our Terms of Service

We do not sell personal information, and we do not share it for cross-context behavioural advertising or targeted advertising. We do not use your business records to train machine-learning models, and we do not use your data to build a product for anyone else.

The Service sends text messages on your instruction, through Twilio. Phone numbers, message content, and opt-in and opt-out status are used only to deliver those messages and to honour opt-outs.

We do not sell, rent or share mobile phone numbers or SMS consent with third parties or affiliates for their own marketing purposes, and no mobile information is shared with anyone other than the providers needed to deliver the message. Each business on the Service texts from its own phone number. When someone replies STOP, UNSUBSCRIBE, CANCEL, END, QUIT or OPTOUT to a business’s number, we record that opt-out and block further messages from that business to that number until they reply START. HELP is answered automatically, with the name of the business. Message and data rates may apply to recipients.

You are the sender of the messages you send through the Service, and you are responsible for having consent to text each number. See section 6 of the Terms of Service.

If you connect a Google account for calendar sync, we request access to your Google Calendar in order to read your events into the Service and write the Service’s scheduled jobs and appointments back to your calendar. That is the only thing we do with it. You can disconnect at any time in the Service, or revoke access from your Google account permissions page, and we delete the stored tokens.

Tovyalla’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to others except as needed to provide or improve the calendar feature, to comply with law, or as part of a merger or acquisition; we do not use it for advertising; and no human reads it except with your explicit permission, for security purposes, or where the law requires.

We share information only with the service providers who operate parts of the Service for us, under contracts that limit them to that purpose:

• Supabase — Database, file storage and authentication
• Vercel — Hosting and delivery of the application
• Railway — Hosting of the application’s server
• Stripe — Subscription payments and card processing
• Twilio — Sending and receiving text messages
• BoldSign — Electronic signature on proposals, contracts and change orders
• Google — Two-way calendar sync, only if you connect a Google account
• Radar — Address autocomplete and geocoding
• Brevo — Transactional email, such as the welcome message and invitations
• Sentry — Error monitoring, to find and fix crashes
• OpenStreetMap — Map images on the projects map; your browser requests them directly, so OpenStreetMap sees your IP address

Beyond those providers, we disclose information only:

• When you tell us to, or when you send it somewhere yourself through the Service
• To comply with a law, subpoena or lawful request, or to establish, exercise or defend a legal claim
• To protect the rights, safety or property of you, us, or the public
• To a buyer in a merger, acquisition or sale of assets — in which case this policy continues to apply until you are given notice of a new one

We use cookies and local browser storage for the things the application needs to work: keeping you signed in, remembering your light or dark theme, and holding your session. These are strictly necessary, and turning them off will sign you out.

We do not run advertising cookies, third-party ad pixels or cross-site trackers. We do not respond to Do Not Track signals, because there is no common standard for them — but there is nothing here to opt out of.

We keep your business records for as long as your account exists, including while a subscription is cancelled, so that you can resume where you left off. Cancelling does not erase your data.

An administrator can delete the company from Subscription inside your account, or ask us by emailing support. The deletion is scheduled 30 days out, so an accidental request can be cancelled; on that date your business records are gone from our live systems, and they age out of routine backups within 90 days. We keep what the law requires us to keep — billing and tax records (the company’s name, its billing identifiers and the dates), and SMS opt-out records, which have to survive so that a number that opted out is never texted again. We also keep the Stripe card fingerprint used at sign-up, so a deleted company’s card does not get a second free trial; it is a code, not the card number, and is used for nothing else.

Records of your acceptance of our Terms are kept for as long as your account exists, and afterwards for the period in which a dispute about the agreement could still be brought. The security log is kept for twelve months and then deleted.

Data is encrypted in transit with TLS and at rest by our hosting providers. Access is restricted by company through database-level rules, sessions expire after six hours of inactivity, and payment card data never touches our servers.

We keep a log of sign-in attempts, administrative actions and rejected requests for twelve months, alert ourselves to unusual patterns — repeated failed sign-ins, a request that fails its signature check — and review it when investigating an incident.

No system is perfectly secure, and we cannot guarantee that a determined attacker will never succeed. If a breach affects your personal information, we will notify you and the authorities as the law requires. Choose a strong, unique password and keep your invited users current — anyone you have invited can see everything in your company’s account.

Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas and other states with privacy laws — you may have the right to:

• Know what personal information we hold about you, and get a copy of it
• Correct information that is wrong
• Delete your personal information
• Opt out of sale, sharing or targeted advertising — we do none of these
• Be free from discrimination for exercising any of these rights

Most of these you can exercise yourself: your business records are editable and exportable from inside the Service at any time, in CSV, Excel and PDF, and an administrator can delete the whole company from Subscription inside your account. For anything else, email support@tovyalla.com and we will respond within 45 days. We may need to verify your identity first. You can appeal a refusal by replying to our response, and we will answer the appeal within 60 days.

We will post any revision here with a new “last updated” date, and for a material change we will give notice by email or in the application before it takes effect.

Questions, requests or complaints about this policy go to:

support@tovyalla.com