Privacy Policy

PRIVACY POLICY This Privacy Policy explains how GOT2DEV, INC., operator of Got2Dev Business Manager, collects, uses, discloses, retains, and protects information when businesses, workforce users, customer-portal users, prospective customers, and website visitors use Got2Dev Business Manager or related services. 1. SCOPE AND ROLES This policy applies to information processed through Got2Dev Business Manager and related platform services. For Customer Data placed in a business workspace, the business generally determines why and how that data is used and GOT2DEV, INC. processes it to provide the service. For platform account, security, billing, support, and service-operations information, GOT2DEV, INC. may determine the relevant processing purposes as permitted by applicable law. 2. INFORMATION WE PROCESS Depending on features used, we may process account and profile information; business information; employee and workforce data; customer and location records; estimates; work orders; appointments; invoices; payment and refund metadata; vendor, expense, purchase-order, and reporting data; uploaded photos and supporting images; image captions, categories, visibility settings, dimensions, hashes, filenames, and storage metadata; portal activity; support communications; audit and security events; device, browser, IP, session, diagnostic, and usage information; and configuration or integration data. Accepted image uploads are decoded and re-encoded into optimized WebP display and thumbnail renditions. The original uploaded source bytes are not retained after successful processing, although the original filename is retained as metadata. 3. SOURCES OF INFORMATION Information may come directly from users, from the business that administers a workspace, from customer-portal activity, from connected providers and integrations, from payment processors, from security and diagnostic systems, and automatically from use of the service where permitted by law. 4. PURPOSES OF PROCESSING We may process information to provide requested features; create and administer accounts; authenticate users; maintain tenant isolation; process subscription and transaction workflows; provide support; send operational, billing, legal, or security communications; prevent fraud and abuse; investigate incidents; maintain audit records; monitor reliability and performance; improve the service; comply with legal obligations; and establish, exercise, or defend legal claims. 5. CUSTOMER DATA A business controls the operational and customer data it enters into its workspace, including photos and supporting images, and is responsible for notices, consents, permissions, and other legal bases required for that data. Business-originated media is internal by default. An authorized business user may mark a supported image relationship as Customer visible; that visibility setting applies to the specific record relationship and customer-portal access remains scoped to an authenticated membership for the same business, customer, and eligible record. We process Customer Data according to the business's authorized use of the service, documented functionality, security requirements, support needs, and applicable legal obligations. 6. PAYMENT INFORMATION When payment or subscription information is collected through Stripe-hosted or tokenized flows, Got2Dev Business Manager does not receive or store full card numbers, CVV values, or bank credentials collected by that provider. We may retain transaction identifiers, customer or connected-account identifiers, amounts, statuses, fees, refunds, reconciliation records, invoice allocations, and other metadata needed to operate financial workflows and maintain business records. 7. HOW INFORMATION MAY BE DISCLOSED Information may be disclosed to service providers and subprocessors that support hosting, communications, payment processing, security, diagnostics, support, or other service functionality; to a business and its authorized users within their workspace; to connected services at the user's direction; in connection with a corporate transaction; to professional advisers; or when disclosure is required or permitted by law. These disclosures may involve personal information reasonably necessary for the recipient to perform an authorized function. Service providers may process information on our behalf under applicable contractual arrangements and legal obligations. As of the effective date of this Privacy Policy, GOT2DEV, INC. does not sell personal information or share personal information for cross-context behavioral advertising or targeted advertising. Advertising and non-essential browser technologies are not enabled in the production configuration reflected in this policy. Our business practices may change in the future, including the possible introduction of advertising, measurement services, or arrangements involving the sale or sharing of personal information as those terms are defined by applicable law. Before introducing such practices, we will update our disclosures, provide legally required notices, and implement any required consent, opt-out, or other privacy-choice mechanisms. We will not rely on this statement about potential future practices as authorization to engage in activities that require additional legal disclosures or individual choices. We do not receive or store full payment-card credentials collected through the Stripe-hosted or tokenized payment flows described in Section 6. 8. INTERNATIONAL OR CROSS-BORDER PROCESSING Service providers and infrastructure may process information in locations different from the user's location. Where applicable law requires safeguards for cross-border transfers, appropriate contractual or legal mechanisms should be used. 9. SECURITY We use administrative, technical, and application safeguards designed to protect information, including authentication, authorization, tenant-scoped access, audit logging, encryption capabilities provided by infrastructure, secure transport, and hosted/tokenized payment collection where applicable. Access to business workspaces is subject to the application's authentication and authorization controls. Production infrastructure and operational access may also be subject to additional network, identity, and administrative restrictions. No method of storage or transmission is completely secure, and no service can guarantee absolute protection against every threat. 10. RETENTION Information is retained for periods reasonably necessary to provide Got2Dev Business Manager, maintain subscription and financial records, preserve security and audit evidence, meet applicable legal or contractual obligations, resolve disputes, enforce agreements, and support legitimate business continuity. Retention periods may differ according to information category, account status, business requirements, backup lifecycle, operational configuration, and applicable legal obligations. At the time this policy version was prepared, the production media configuration used a 30-day orphan-retention period. A stored image without active Got2Dev Business Manager record relationships may become eligible for cleanup after the applicable retention period and safety checks. Eligibility for cleanup does not guarantee deletion precisely 30 days after a media item becomes unlinked. Actual deletion depends on the operation and configuration of the applicable maintenance processes. Automated cleanup may be disabled or delayed during deployment, maintenance, incident response, or other operational circumstances. Removing one relationship does not delete a shared stored image while another active relationship remains. Additional retention may apply to backups, storage-provider recovery and soft-delete features, audit records, financial records, security investigations, legal holds, and other lawful obligations. These technical retention settings do not replace a business's own regulatory, contractual, or legal recordkeeping obligations. Requests for deletion are evaluated under applicable law and may be subject to lawful exceptions or operational limitations. 11. PRIVACY RIGHTS AND REQUESTS Depending on applicable law and the individual's relationship with GOT2DEV, INC. or a business using Got2Dev Business Manager, privacy rights may include access, correction, deletion, restriction, objection, portability, withdrawal of consent, or appeal. Individuals may submit requests concerning information controlled by GOT2DEV, INC. to support@got2dev.com. This mailbox is monitored for privacy and support requests. When a request is received, we may take reasonable steps to verify the requester's identity or authority, determine which information is involved, and protect against unauthorized disclosure, modification, or deletion. Verification requirements may vary depending on the request and the sensitivity of the information. Requesters should not send passwords, payment-card details, or unnecessary identity documents in their initial email. If additional verification is required, we will provide appropriate instructions. We will evaluate requests according to applicable law and respond within legally required timeframes. Where an extension, exception, denial, or appeal process applies, we will provide the information required by applicable law. For Customer Data controlled by a business using Got2Dev Business Manager, individuals should generally direct requests to that business. GOT2DEV, INC. may assist the business in handling authorized requests as appropriate under applicable service arrangements and legal obligations. Some information may need to be retained despite a deletion request, including records necessary for legal compliance, fraud prevention, security, dispute resolution, financial recordkeeping, or other lawful purposes. 12. COOKIES AND SIMILAR TECHNOLOGIES Use of cookies, local storage, and similar browser technologies is described in the published Cookie Policy. Required authentication, security, anti-forgery, and session technologies may be necessary for core service operation. At the time this policy version was prepared, advertising, analytics, and non-essential browser technologies were disabled in the configured production application. If optional technologies are introduced in the future, we will update applicable disclosures and implement legally required consent or preference controls before using those technologies where required. 13. CHILDREN Got2Dev Business Manager is a business service and is not designed for children to create or administer business accounts. A business that enters information relating to minors is responsible for having the authority and legal basis required for that processing. 14. AUTOMATED DECISIONS Unless expressly identified in the service, Got2Dev Business Manager does not make legally significant decisions about individuals solely through automated processing. Businesses remain responsible for their own decisions made using reports, workflow information, or other service output. 15. CHANGES TO THIS POLICY Published revisions identify their version and effective date. Material changes may be communicated through the service, by email, or through another available contact method as appropriate and required by applicable law. When a revision requires renewed acceptance or acknowledgement, affected users may be asked to review and accept the updated version before continuing to use protected functionality. If GOT2DEV, INC. introduces practices involving selling personal information, sharing information for targeted or cross-context behavioral advertising, or materially expanding optional tracking technologies, we will update the applicable privacy disclosures before those practices begin and provide legally required notices, consent mechanisms, opt-out choices, or other privacy controls. The publication of a revised policy does not by itself eliminate any consent, notice, or individual-rights obligations imposed by applicable law. Each published version represents the policy for its applicable effective period and is not automatically rewritten when application configuration changes. 16. CONTACT Privacy questions and requests may be submitted through the following channels: GOT2DEV, INC. Got2Dev Business Manager Support email: support@got2dev.com Legal email: legal@got2dev.com Telephone: (786) 975-3187 Mailing address: 8520 SW 133 AVE. RD., APT. 122, Miami, FL 33183 Website: https://www.got2dev.com For privacy requests concerning Customer Data controlled by a separate business using Got2Dev Business Manager, individuals should generally contact that business first. 17. CONFIGURATION SNAPSHOT FOR OPTIONAL TECHNOLOGIES AND THIRD-PARTY SERVICES This version reflects the service configuration and provider inventory reviewed when this policy was prepared. The snapshot is preserved in this legal version and is not dynamically rewritten when configuration later changes. Optional-technology posture at preparation: analytics=off; advertising=off; non-essential browser technologies=off. Not every configured provider is contacted for every user or every page. A provider is used when the related feature, infrastructure service, integration, or hosted browser asset is requested or required for application operation. Ordinary network requests to an external provider may include request metadata such as IP address, browser or user-agent information, and requested resource information. Configured third-party service inventory: - Microsoft Azure (Microsoft Corporation) | Category: Application hosting, managed database, and private media storage | Purpose: Hosts Got2Dev Business Manager using Azure App Service, stores application and operational data in Azure SQL, and maintains uploaded media and related objects in private Azure Blob Storage. | When used: During operation of the production application and its enabled features. | Information involved: Account, business, customer, workforce, operational, financial, and media records, along with application logs and service metadata as necessary to deliver and protect the service. | Provider privacy: https://www.microsoft.com/en-us/privacy/privacystatement | Data protection terms: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA - Stripe | Category: Payment processing and subscription billing | Purpose: Provides hosted/tokenized payment collection, connected-account payment processing, subscription checkout, settlement, and webhook events. | When used: Only when a user or business uses an enabled online-payment, connected-account, or subscription-billing workflow. | Information involved: Account/contact details and payment or subscription metadata needed for the requested transaction; full card/CVV/bank credentials remain in Stripe-hosted flows. | Provider privacy: https://stripe.com/privacy - SMTP2GO | Category: Operational email delivery | Purpose: Delivers account confirmation, recovery, security, billing, and other configured operational email messages through the production SMTP provider. | When used: When Got2Dev Business Manager sends an enabled email notification through the configured SMTP service. | Information involved: Recipient email address, message content, and normal delivery metadata required to transmit the message. | Provider privacy: https://www.smtp2go.com/privacy/ - OpenStreetMap, Nominatim and OSRM | Category: Maps, geocoding, and routing | Purpose: Provides map tiles, address geocoding, and route/directions calculations for map-enabled business workflows. | When used: When an authorized user opens map/directions functionality or the application geocodes an address for that workflow. | Information involved: Requested addresses or coordinates plus ordinary network/request metadata needed to return map, geocoding, or routing results. | Provider privacy: https://osmfoundation.org/wiki/Privacy_Policy - Google Fonts | Category: User-interface font delivery | Purpose: Loads the Inter typeface used by current Got2Dev Business Manager web layouts. | When used: On layouts that reference the configured hosted font stylesheet. | Information involved: Ordinary browser/network request metadata such as IP address, user agent, and requested asset information. | Provider privacy: https://policies.google.com/privacy - jsDelivr | Category: Static user-interface asset delivery | Purpose: Delivers selected open-source browser assets such as Bootstrap Icons, SignalR client files, and page-specific UI libraries. | When used: On pages that reference one of the configured jsDelivr-hosted assets. | Information involved: Ordinary browser/network request metadata needed to deliver the requested static asset. | Provider privacy: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net - cdnjs / Cloudflare | Category: Static user-interface asset delivery | Purpose: Delivers the Toastr browser assets used for ephemeral application notifications. | When used: On layouts that load the Toastr stylesheet or script from cdnjs. | Information involved: Ordinary browser/network request metadata needed to deliver the requested static asset. | Provider privacy: https://www.cloudflare.com/privacypolicy/ - unpkg | Category: Map user-interface asset delivery | Purpose: Delivers the Leaflet browser library used by the customer map experience. | When used: When an authorized user opens a page that loads the Leaflet map client. | Information involved: Ordinary browser/network request metadata needed to deliver the requested static asset. | Provider information: https://www.unpkg.dev/about | Content delivery network privacy: https://www.cloudflare.com/privacypolicy/ Third-party services maintain their own privacy notices and processing practices. GOT2DEV, INC. may update its provider inventory and publish revised disclosures when infrastructure, integrations, optional technologies, or other material processing practices change.