Servstead, LLC ("Servstead," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices available to you.
Effective date: July 3, 2026.
1. Information we collect
Account and profile information: name, email address, password hash, business name, phone number, and settings you provide during signup or onboarding.
Business and customer data: customer names, addresses, job details, estimates, invoices, payments, photos, messages, crew notes, tax settings, and other content you enter into the Service.
Billing information: subscription status, plan selections, and payment metadata. Payment card details are collected and processed by our payment processor; we do not store full card numbers on our servers.
Usage and device data: log data, IP address, browser type, device identifiers, pages viewed, feature usage, crash reports, and cookies or similar technologies needed to operate and secure the Service.
Communications: support requests, feedback, and email delivery events.
Optional integrations: if you connect third-party services (for example email or bank sync), we receive information authorized by you through those providers.
1a. Plaid bank sync (optional)
If you choose to connect a business bank account through Plaid, you will be shown a consent screen before Plaid Link opens. By connecting, you authorize Servstead to receive read-only transaction history from the account(s) you select for expense matching inside the Service.
We do not use Plaid data for credit decisions, lending, or sharing with other Servstead customers. Plaid connection is available only to paid subscribers (not during the free trial). You may stop future sync by disconnecting your bank in Settings; contact servstead@gmail.com to request deletion of stored connection tokens and synced transactions.
Plaid's privacy policy is available at https://plaid.com/legal/. Servstead's use of information received from Plaid APIs adheres to the Plaid End User Privacy Policy.
2. How we use information
We use information to provide, maintain, and improve the Service; authenticate users; process subscriptions; send transactional messages; provide support; detect fraud and abuse; comply with law; and analyze aggregated usage trends.
We may use business contact information to send product updates or marketing communications where permitted by law. You may opt out of promotional emails at any time.
3. How we share information
We share information with service providers that help us operate the Service, such as cloud hosting, payment processing, email delivery, analytics, and optional integrations. These providers may access information only to perform services for us and are contractually required to protect it.
We may disclose information if required by law, legal process, or government request; to protect rights, safety, and security; or in connection with a merger, acquisition, financing, or sale of assets.
We do not sell your personal information. We do not share Customer Content with other Servstead customers except as directed by you through portal links, team permissions, or exports you initiate.
4. Client portal and end-customer data
If you use client portal links, your customers may view job information, photos, invoices, and payment pages you choose to expose. You are the controller of your customers' personal data for your business purposes; Servstead processes that data on your behalf to provide the Service.
5. Data retention and deletion
Servstead retains account and business data while your subscription is active. After cancellation, Customer Content is deleted or anonymized within ninety (90) days, except where law requires longer retention. Encrypted backups may retain residual copies for up to thirty (30) additional days before purge. Bank connection tokens and synced transaction data are deleted when you disconnect Plaid or close your account. This policy is reviewed at least annually.
You may export certain business records from within the Service. To request deletion of personal information, contact servstead@gmail.com.
6. Security
We implement administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure. See our Data & Security terms for more detail.
7. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, restrict, or port personal information, and to object to certain processing. Contact servstead@gmail.com to submit a request. We may verify your identity before responding.
California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of certain sharing. We do not sell personal information as defined by California law.
EEA, UK, and Swiss users may have rights under applicable data protection laws, including the right to lodge a complaint with a supervisory authority.
8. International transfers
If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our providers operate. We use appropriate safeguards where required by law.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. Contact us if you believe a child has provided information and we will delete it.
10. Changes and contact
We may update this Privacy Policy from time to time. Material changes will be posted at https://servstead.com/policies/privacy with an updated effective date.
Privacy questions or requests: servstead@gmail.com. General support: servstead@gmail.com.