Privacy

Information used for your service

Our website uses the contact details, service address, request descriptions, photos, estimates, invoices, payment records, and appointment information you provide to arrange and manage your service. Authorized business staff can access the information needed for their work. Customer portal access requires verification of the customer's email and is limited to that customer's records.

Storage and service providers

Customer and job records are stored in Supabase. Job photos may be stored in Supabase or in the business's connected Google Drive account. The website uses Stripe for card checkout and Resend for service emails. These providers process information needed to deliver their services. The website does not store full card numbers.

Google Drive photo connection

The Mack & Hammer Job Photos connection is for the business owner's authorized account. It uses Google's drive.file permission to create and manage the job-photo files and folders associated with this application. It does not request access to read all files in the account or to read Gmail messages.

Google authorization tokens are stored on the server and used to maintain the photo connection. Customers and technicians do not receive those tokens. Photo access is checked against the user's customer record or authorized staff access. Moving photos to Drive does not make them public.

Google user data accessed through this connection is used to provide job-photo storage and retrieval. It is not used for advertising, sold to third parties, or used to train generalized AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and requests

Records and photos may be retained for service history and business recordkeeping. There is no automatic age-based photo deletion. Contact us to request access, correction, or deletion of your information. Some records may need to be retained for legal or accounting purposes.

The owner can revoke this application's Google access through the Google Account's third-party connections settings. Revoking access stops future authorized Drive operations; it does not automatically delete files already stored.

Emails and account access

We send service-related emails, which may include estimate reminders, invoice reminders, and a request for an honest review. Reply to ask us to stop automated follow-ups. Password setup and reset links are sent to the customer's verified email address. Keep your password and email access private.

Contact

For privacy questions or requests, email mr.handiman903@gmail.com or call (903) 450-2821.