Privacy Policy

• Account information: name, work email, phone, company name, role and password (stored hashed) or Google sign-in details.
• Business data: customers, addresses, equipment, jobs, estimates, invoices, payments, documents and messages entered by your company.
• Field data: voice recordings, transcripts, photos and job status updates captured by technicians, plus location when a technician chooses to share it.
• Payment data: processed by our payment partner Dodo Payments. We store payment status and amounts, never full card numbers.
• Usage data: device, browser, IP address, pages used and error logs, to keep the Service secure and reliable.
• Demo requests: the details you submit when booking a demo.

• Provide, operate and support the Service, including dispatch, invoicing and customer links.
• Generate AI-assisted service reports, summaries and suggestions. AI output is always shown for review and approval before use.
• Send service emails such as invitations, password resets, invoices, receipts and billing notices.
• Process subscriptions and invoice payments.
• Detect abuse, secure accounts and improve product quality.

Voice notes, photos and job data may be sent to trusted AI providers solely to produce transcripts, reports and insights for your company. We do not use your business data to train public AI models, and AI providers are contractually restricted from doing so.

We do not sell personal information. We share it only with:

• Service providers for hosting, database, email delivery, AI processing and payments, under confidentiality obligations.
• Your company — data you enter is visible to authorized users of your organization based on their role.
• Legal authorities when required by law or to protect rights and safety.
• A successor in the event of a merger or acquisition, with notice to you.

Each company's data is isolated with row-level access controls, so one organization can never see another's records. Data is encrypted in transit (TLS) and at rest. Access is limited by role, and mail server passwords and payment keys are kept server-side only. No system is perfectly secure, but we work to promptly address any issue.

We keep business data for as long as your company's account is active. After cancellation, data is kept for up to 90 days so it can be exported, then deleted, except where law requires us to keep records such as billing history.

Depending on where you live (including under GDPR, UK GDPR, CCPA and India's DPDP Act), you may request access to, correction, export or deletion of your personal information, or object to certain processing. If your data was entered by a service company that uses Serveqo, please contact that company first; we will assist them in responding.

We use essential cookies and local storage to keep you signed in and remember preferences. We do not use advertising cookies.

The Service is intended for businesses and is not directed to children under 16.

Data may be processed in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy and will notify account owners of material changes. Questions or requests: privacy@serveqo.com.