Last updated September 2026
The short version. Inside the app we collect what the software
needs to work and nothing else. On the public website, analytics runs only
if you say yes to it. Today that means Google Analytics 4 and Microsoft Clarity. No advertising, anywhere.
We don't sell your data or train models on it. Your customers' data belongs
to you, not us — we just hold it.
1 · Who controls what
There are two different relationships here, and they matter.
Your business is our customer. For the data about your
business — your name, email, plan, what you do in the app — we're
the controller.
Your customers are yours. For the homeowners and
businesses in your client list, you are the controller and we are the
processor. We hold their details because you asked us to. We act on
your instructions. We don't contact them, market to them, or do anything with
their information except run the software for you.
2 · What we collect
About your business
- Shop name, trade, address, phone, email
- Names, emails and roles of your users
- Passwords, stored only as a scrypt hash — we cannot read them
- Your plan and billing status
- A last-seen timestamp per user, so we can tell an active account from a
dormant one
What you put in
- Clients and contacts: names, addresses, phone numbers, emails, notes
- Properties, equipment, access notes, lockbox codes
- Jobs, visits, schedules, technician notes
- Quotes, invoices, payment records
- Photos taken on site
- Signatures, stored with the exact wording that was agreed
- For real estate accounts: listings, deals and commission records
What we deliberately do not collect
- Card numbers. Card details go straight to Stripe and
never touch our servers
- Bank details. Held by Stripe under your own account
- Location tracking. We don't track where technicians are.
Route planning uses property addresses, not live positions
- What you do in the app. No analytics, no session
recording and no heatmaps inside the app. Measurement is on the public
website only, and only with your consent (section 3)
3 · Cookies, storage and analytics
There are two places this applies, and they are treated differently.
The public website
Necessary storage. The site remembers your cookie choice in your
browser's localStorage (eg_consent, kept 13 months)
so it does not ask you again on every page. That is the only thing stored
without asking, because without it the choice could not be remembered.
Analytics, only if you accept it. We use:
- Google Analytics 4 (Google LLC). Counts page views and the buttons that matter (calculator used, demo opened, trial started), and where visitors come from, so we can see which pages help and which do not.
- Microsoft Clarity (Microsoft Corporation). Records how pages are used — scrolling, clicks, taps that go nowhere, repeated frustrated clicks — as heatmaps and session replays, so we can find and fix what is hard to use, especially on phones.
Neither runs until you choose Accept analytics, and neither runs inside the app. We never send what you type into a calculator or a form: event details are limited to things like which calculator was used. Nothing here is used for advertising, and ad storage is switched off.
Your choice. The first time you visit, a bar at the bottom of the
page offers Accept analytics, Reject non-essential and
Preferences. Rejecting is one tap, the same as accepting. You can
change your mind at any time from Cookie preferences
at the bottom of every page; withdrawing removes the analytics cookies from
your browser. The cookie policy lists every cookie and
storage item by name, with what it does and how long it lasts.
The typeface is loaded from Google Fonts, which means your browser asks
Google for the font file. That request is necessary to show the page as
designed and sets no cookie. If you'd rather avoid even that, tell us and
we'll look at self-hosting it.
The app
When you sign in, your browser holds a session token in
sessionStorage and your tab preferences in
localStorage, and the offline mode keeps copies of what you're
working on in IndexedDB so the app works with no signal. All of
it stays on your device, is sent only back to us to prove who you are or to
sync your own work, and is cleared when you sign out. There are no analytics
or third-party measurement scripts in the app.
4 · Why we hold it
- To run the service. Obviously
- To bill you. Plan and payment status
- To support you. When you email, we may look at your
account to work out what's wrong
- To keep it secure. Audit logs of API key use and
sign-ins
- To meet legal obligations. Tax and accounting
records
We do not use your data for advertising, resale, or model training. If that
ever changed we would ask first, and it would be opt-in.
5 · Who else sees it
A small number of suppliers help us run the service. Each is listed with
what they do and what they see on our Subprocessors page.
If you accept analytics on the public website, Google Analytics 4 and Microsoft Clarity receive the measurement data described in section 3. They see how the website is used, never your account or your customers.
Beyond those, we share data only when the law requires it. If we ever
receive a legal demand for your data, we'll tell you unless we're forbidden
from doing so.
If the business is ever sold, your data would transfer with it, and you'd
be told beforehand.
6 · How long we keep it
Want it gone sooner? Email us and we'll delete it, keeping only what tax
law requires.
7 · How it's protected
- Everything travels over HTTPS. The site is on the HSTS preload list
- Passwords stored as scrypt hashes, never in readable form
- API keys stored only as hashes. Shown once, then never again
- Every table carrying your data has a tenant column, and every query
filters on it. Row-level security policies exist as a second layer
- A database trigger overwrites the tenant on every write, so the
application cannot write into another shop's data even if it tried
- API keys act as a person and inherit that person's permissions. Every
call is logged
No system is perfectly secure. If something goes wrong that affects your
data, we'll tell you promptly and plainly.
8 · Your rights
Depending on where you are, you may have the right to see what we hold,
correct it, delete it, take it elsewhere, or object to how we use it.
Most of this you can do yourself: everything is visible in the app, and
export is free via CSV or the API. For anything else, email
help@everglowdispatch.com and
we'll respond within 30 days.
We do not sell personal information, and we don't share it
for cross-context behavioral advertising, and no advertising trackers run
on this site. Website analytics is opt-in: it runs only if you accept it,
and you can withdraw that at any time from
Cookie preferences.
9 · Your customers' rights
If a homeowner in your client list asks us to delete their details, we'll
point them to you, because it's your record and your relationship. We'll help
you act on it.
Making sure you have the right to hold their information, and telling them
how you use it, is your responsibility as the controller.
10 · If you connect your own AI
You can generate an API key and connect an assistant. If you do, the data
it reads goes to whichever provider you chose — Anthropic, OpenAI, or
whoever — under their privacy terms, not ours.
We log every call so you can see exactly what was accessed and when. But
once data reaches your provider, what happens to it is between you and them.
Read their terms before you connect, particularly on whether they train on
what you send.
Keys are read-only by default. If you only need an assistant to answer
questions, don't give it write access.
11 · Children
This is business software. It isn't for anyone under 18 and we don't
knowingly collect data about children. If you think we have, tell us and we'll
delete it.
12 · Changes
If we change this policy in a way that materially affects you, we'll email
you at least 30 days beforehand. The date at the top tells you when it last
moved.
Getting in touch
Everglow Solutions LLC
St. Augustine, Florida
help@everglowdispatch.com