Privacy Policy

• Account information — name, email address, phone, business name, role, profile photo, password hash, authentication tokens, and plan tier.
• Business profile data — business description, service area, specialties, keywords, tags, logos, and public-facing business information you choose to display.
• Customer Data you upload — client and property records, quotes, jobs, invoices, payments, schedules, photos, signatures, notes, and documents you create in the Service.
• Team and workforce data — team member profiles, roles, permissions, time entries, payroll data, expenses, and task assignments.
• Referral partnerships — business partner connections, partnership requests, acceptance status, and shared partner contact information.
• Communications — emails and SMS sent through the Service, including templates, message bodies, delivery status, opens/clicks, replies, and in-app notifications.
• Payment data — when you accept payments, card details are collected and processed directly by our payment processor (Stripe). We receive only metadata such as last four digits, brand, and payment status.
• Device and log data — IP address, browser, operating system, device identifiers, push notification tokens, referring/exit pages, timestamps, and error logs.
• Location data — approximate location derived from IP, property and job addresses you enter, and precise GPS only if you grant permission for routing or check-in features.
• Cookies and similar technologies — session, authentication, and preference cookies; see Section 9.

We process personal data to:

• Provide, secure, maintain, and improve the Service;
• Authenticate users and prevent fraud or abuse;
• Send transactional messages (sign-up confirmation, password reset, billing receipts, scheduling notifications, system alerts, and partnership request notifications);
• Facilitate referral partnerships between businesses that choose to connect;
• Provide customer support and respond to inquiries;
• Send product updates and marketing only with your consent or where permitted by law; you can unsubscribe anytime via the link in those emails;
• Comply with legal obligations and enforce our Terms;
• Generate aggregated or de-identified analytics that do not identify individuals.

Your business profile may include information you choose to display such as your business name, description, service area, specialties, keywords, and contact details. This information may be visible to other Alpha+ users when they search for referral partners or browse business listings. You control what appears on your profile through your account settings. Partner requests require mutual acceptance; we do not share your full customer data or internal records with partner businesses without your direction.

• Contract — to provide the Service you've subscribed to.
• Legitimate interests — to secure the Service, prevent fraud, and improve features (balanced against your rights).
• Consent — for optional marketing emails, push notifications, and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

We do not sell personal information. We share it only:

• With service providers (subprocessors) acting on our behalf under written confidentiality and data protection terms — including hosting and database (Supabase / Lovable Cloud, AWS/Cloudflare regions), email delivery (Resend), SMS delivery (e.g., Twilio), payment processing (Stripe), error monitoring, and customer support tooling.
• With your authorized team members in your workspace, according to roles and permissions you control.
• With business partners you choose to connect with through our referral partnership features; when you send or accept a partnership request, certain business profile information (name, contact info, specialties, and keywords) is shared with that partner.
• When you direct us to share, e.g., when you send a quote or invoice to your customer.
• To comply with law, valid legal process, or to protect rights, safety, or property.
• In connection with a merger, acquisition, financing, or sale of assets — subject to standard confidentiality protections.

Our infrastructure providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

We retain account and Customer Data for as long as your account is active and as needed to provide the Service. After cancellation, we retain Customer Data for up to 30 days to allow you to export or restore, then permanently delete or anonymize it, except where longer retention is required (e.g., billing records, audit logs, or legal holds). Partnership records may be retained for the duration of the partnership and a reasonable period after termination. You may request earlier deletion subject to those exceptions.

We protect data with TLS in transit, encryption at rest, role-based access controls, row-level security in our database, audit logging, regular backups, and least-privilege policies for staff access. No system is 100% secure; please report suspected vulnerabilities to info@theateamwash.com.

We use first-party cookies for authentication, session continuity, and remembering preferences. We use limited analytics to understand aggregate usage and detect errors. We do not use third-party advertising cookies or cross-site tracking. You can block cookies in your browser, but parts of the Service may not function.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. California residents have rights under the CCPA/CPRA including the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising rights. EEA/UK residents have rights under the GDPR/UK GDPR and may lodge a complaint with a supervisory authority. To exercise rights, email info@theateamwash.com. We will verify your identity before responding and reply within the period required by law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We do not use Customer Data to train third-party generative AI models without your consent. Some features (e.g., suggestions, summaries) may use AI providers under contracts that prohibit them from training on your data.

When you use the Service to manage your own customers, you are the controller of that data and Alpha+ is the processor. Our processing is governed by these terms and any data processing addendum we have signed with you. You are responsible for providing required notices to and obtaining required consents from your customers.

We may update this Privacy Policy from time to time. We will post the new version with an updated version number and effective date, and notify you of material changes by email or in-app banner. Continued use after the effective date constitutes acceptance. The current version is 2026-06-23.

Questions, requests, or complaints? Email info@theateamwash.com.