Privacy Policy

1. Overview

RestorHQ (“RestorHQ”, “we”, “us”) provides a multi-tenant SaaS platform for restoration crews. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our website and the RestorHQ application.

By using RestorHQ, you agree to the practices described here.

2. Information we collect

• Account information: name, email, company, role, password (hashed), phone (optional).
• Project data: customer/client names, addresses, claim numbers, scope of work, line items, invoices, estimates, dry-log readings, equipment records.
• Photos & files: photos you upload from the field (with optional captions, room labels, and tags), plus documents (contracts, reports, certificates).
• Location data: when you use Clock In/Out, we record your device's geolocation at the moment you clock in and out, to verify on-site work. This is best-effort — if your browser denies the permission, the feature still works without it.
• Google Calendar data: only if you choose to connect Google Calendar. See section 5 for exactly what we access and how we use it.
• Usage data: basic event logs (page views, feature usage, error reports) for security and product improvement.
• Device & browser metadata: IP address, user agent, language — collected automatically by our hosting provider.

3. How we use your information

• To operate the service (sign-in, project management, photo/file storage).
• To send transactional emails (verification, password resets, billing receipts).
• To improve the product (anonymized usage analytics, debugging).
• To enforce our terms and prevent abuse.
• To meet legal obligations (tax records, lawful requests).

We do not sell your personal information and we do not share it with third-party advertisers.

4. Third-party processors

To run the service, we share data with the following processors:

• Supabase — database, authentication, and file storage backend.
• Vercel — application hosting and content delivery.
• Stripe — payment processing (when subscription billing is live).

Each processor handles data under their own privacy commitments and is contractually bound to use it only as needed to provide their service to us.

5. Google user data

Connecting Google Calendar is optional. When you connect it, RestorHQ asks Google for permission to:

• Create one secondary calendar named “RestorHQ” in your Google account, and see, create, change, and delete events on that calendar.
• See the list of your calendars, so we can find the RestorHQ calendar again and use your time zone.

What we access: the title, time, location, and description of events on the RestorHQ calendar, and the names, IDs, and time zones in your calendar list. Connections made before October 2026 could also edit events on your primary calendar; we use that only to remove events RestorHQ itself created there.

How we use it: only to keep your schedule in sync. Appointments, tasks, and events you schedule in RestorHQ appear on your RestorHQ Google calendar, and events you add or change on that calendar appear in RestorHQ, where members of your organization can see them on the team schedule.

Storage and protection: your Google access tokens and the synced event details are stored in our database (Supabase, United States), encrypted in transit and at rest, and protected by row-level security so only your organization can see your events and only you and our server can see your connection.

Sharing: we do not sell Google user data, use it for advertising, or use it to train AI or machine-learning models. We do not share it with anyone except the processors listed in section 4, which store and host it for us. No person at RestorHQ reads it unless you ask us to for support, it is needed for security, or the law requires it.

Retention and deletion: disconnect Google Calendar at any time in Calendar › Manage. We then revoke our access at Google and delete your stored tokens and sync records right away. Events already imported into RestorHQ stay until you delete them, and you can ask us to delete them by emailing support. You can also remove RestorHQ’s access from your Google Account permissions .

RestorHQ’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

6. Your rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data (right to be forgotten).
• Export your data in a portable format.
• Object to or restrict certain processing.
• Opt out of the “sale” of personal information (we do not sell personal info).

To exercise any of these rights, email support@cleantec.app . We will respond within 30 days.

7. Data retention

We retain project data for as long as your organization has an active account, plus a short grace period after cancellation. After that, project data may be deleted or anonymized. Backups may persist for up to 90 days for disaster-recovery purposes.

8. Security

We use industry-standard practices: TLS in transit, encryption at rest, row-level security on all multi-tenant tables, and least-privilege access. No system is perfectly secure — please use a strong, unique password and enable any multi-factor sign-in options offered by your email provider.

9. Children

RestorHQ is intended for business use. It is not directed to children under 16. We do not knowingly collect data from children.

10. International users

Our servers are located in the United States. By using the service from another country, you consent to the transfer of your data to the United States.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be announced via email or an in-app notice at least 14 days before they take effect.

12. Contact

Questions or concerns? Email support@cleantec.app .

RestorHQ is operated from Watsonville, California, United States. For postal correspondence relating to privacy requests, email the address above and we will provide a mailing address on request.