Privacy policy

1. Information we collect

1.1 Your account

• Your name and email address
• Your business name, and the trade and area you work in
• Your role on the account
• Your password, stored only as a one-way hash — we never hold the password itself
• If you turn on two-step sign-in, the settings that make it work

1.2 Your customers’ records

These belong to you. We hold them so the software can do its job, and we act as a processor for them rather than deciding what happens to them:

• Names, phone numbers, email addresses and service addresses
• Bookings, jobs, estimates and invoices
• Answers your customers give to the questions you ask when they book
• Notes you write about a customer or a job

1.3 Files a customer attaches to a booking

If you ask for them, your customers can attach files when they book — a vaccination record, for example. These are uploaded by members of the public and can contain a person’s name, home address and phone number as well as their animal’s details, so we treat them as the most sensitive information on the platform and delete them on a schedule. See section 5.

1.4 System logs

• Sign-in and sign-out records, including the time and the browser used
• Requests to our API, kept for security and troubleshooting
• Delivery results for email we send on your behalf, including bounces and complaints

1.5 What we do not collect

We run no third-party analytics and no advertising trackers. There is no behavioral analytics service, no error-reporting service and no advertising pixel in this product. Nothing about how you or your customers move around the software is sent to anybody else.

2. How we use information

• To run the platform — your booking page, your CRM, your invoices
• To send email on your behalf, such as booking confirmations to your customers
• To send you operational email, such as a password reset or a notice about your account
• To keep the service secure, and to investigate a problem when one is reported
• To take payment for your own subscription

We do not sell personal data, and we do not share it for anybody else’s advertising.

3. Cookies and signing in

Signing in sets one cookie. It holds a random token, it is marked HttpOnly, Secure and SameSite, and we store only a one-way hash of it — so the cookie cannot be reconstructed from our database. It exists to keep you signed in and for nothing else. There are no advertising or tracking cookies on this site or in the app.

4. Who we share it with

We use a small number of service providers, and only these:

• Amazon Web Services — delivers the email we send for you and to you
• Stripe — takes payment for your own subscription. We never see or store your card number
• Your payment processor, if you connect one — whichever provider you use to take card payments from your customers. That account is yours, your customers’ card details go to them, and we never see or store a card number
• Our hosting provider — runs the servers and the database the platform sits on

We share information with them only so they can do that work. We do not sell it to anyone, and we do not pass it to anybody else unless the law requires it.

5. How long we keep it

• Your account and your records — for as long as your account is open, and in our backups for a short period after any change
• Files attached to bookings — deleted automatically 90 days after the appointment, or 7 days after a booking is canceled. A sweep runs several times a day and is logged every time, including the runs that delete nothing
• Sign-in and request logs — kept only as long as they are useful for security

If you close your account you can ask us for an export of your data, or for it to be deleted. Write to info@startmeuppro.com.

6. How we protect it

• Encrypted in transit. Everything between your browser and us travels over HTTPS, on certificates that renew automatically
• One business cannot read another’s records. That is enforced by the database itself — every table carrying business data is protected by PostgreSQL row-level security, and our application connects with an account that cannot override it. A mistake in our software cannot hand your customers to another business, because the rule does not live in our software
• Passwords are never stored. We keep a one-way hash, so there is nothing in our database that could be turned back into your password
• Your sign-in cookie is stored the same way — only a one-way hash of it, so a copy of our database could not be used to sign in as you
• Two-step sign-in secrets are encrypted with AES-256-GCM, and two-step sign-in is required on our own staff accounts
• Backed up automatically, and the restores are rehearsed rather than assumed — we have practiced bringing a single business back from a backup

No system is completely safe from every risk, and we will not pretend otherwise.

7. Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, to correct it, to have it deleted, or to receive a copy of it. Ask us at info@startmeuppro.com and we will do it.

If you are a customer of a business that uses StartMeUpPro, your records belong to that business. Ask them first — and if you cannot reach them, write to us and we will help.

8. Children

StartMeUpPro is for people running a business and is not intended for anyone under 18.

9. Where your data is processed

Your information is stored and processed in the United States.

10. Changes to this policy

We may update this page. If we change something that matters, we will say so rather than quietly reposting it. Start Me Up Pro LLC operates StartMeUpPro; questions go to info@startmeuppro.com.