Privacy Policy

Shovld LLC ("Shovld", "we", "us", "our") operates the platform at getshovld.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the Platform.

By creating an account or using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, do not use the Platform.

This Privacy Policy is incorporated into and subject to our Terms of Service.

2.1 Information You Provide Directly

• Account information: Full name, business name, email address, phone number, billing address, and password when you register
• Business information: Contractor license number, trade specialties, years in business, service markets, and average job size
• Payment information: Credit or debit card details, processed and stored securely by Stripe. Shovld does not store raw card numbers
• Profile and pipeline data: Job notes, lead status updates, outreach content, appointment records, and any other information you input into the Platform
• Support communications: Messages, tickets, and correspondence you send to our support team

2.2 Information We Collect Automatically

• Usage data: Pages visited, features used, time spent, click patterns, and in-app actions
• Device and browser data: IP address, browser type, operating system, device identifiers, and screen resolution
• Session data: Login timestamps, session duration, and authentication tokens
• Outreach activity: SMS and email send logs, delivery status, open and click events (where available)
• Log data: Server-side request logs including timestamps, endpoints accessed, and error codes

2.3 Information From Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile photo from Google
• People Data Labs: We may enrich contractor profiles with publicly available professional data including business name, location, and industry classification
• Public lead sources: Publicly available data from government permit databases, NOAA/FEMA weather records, county property records, and community platforms used to generate lead signals — this is homeowner-facing data used to create leads, not contractor personal data

We use the information we collect to:

• Create and manage your account and subscription
• Deliver lead intelligence, scoring, and signals to your dashboard
• Process payments and manage billing through Stripe
• Send transactional emails (account confirmations, payment receipts, lead alerts) via Resend
• Send push notifications via Firebase Cloud Messaging
• Generate AI-assisted outreach drafts tailored to your trade and market
• Provide customer support and respond to your inquiries
• Monitor and improve Platform performance, security, and reliability
• Analyze aggregated usage patterns to improve features and lead quality
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with legal obligations
• Send product updates, feature announcements, and marketing communications (you may opt out at any time)

We do not sell your personal information. We share information only in the following circumstances:

4.1 Service Providers
We share data with trusted third-party vendors who process data on our behalf:

• Stripe — Payment processing. stripe.com/privacy
• Twilio — SMS outreach delivery. twilio.com/legal/privacy
• Resend — Transactional email delivery. resend.com/privacy
• Firebase (Google) — Push notifications and authentication. policies.google.com/privacy
• People Data Labs — Contractor profile enrichment. peopledatalabs.com/privacy-policy
• Supabase — Database hosting and authentication infrastructure

All service providers are contractually bound to use your data only for the purpose of providing services to Shovld and must maintain appropriate security standards.

4.2 Legal Requirements
We may disclose your information if required to do so by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of others.

4.3 Business Transfers
If Shovld LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Platform of any such change in ownership.

4.4 With Your Consent
We may share your information for any other purpose with your explicit consent.

Shovld aggregates publicly available homeowner-related signals (permit filings, storm event data, property records, community posts) to generate contractor leads. This data is sourced from government databases and public records and is not collected from private individuals.

Shovld does not:

• Sell homeowner contact information to third parties
• Build behavioral profiles of individual homeowners
• Store homeowner data beyond what is needed to deliver lead signals to subscribed contractors

Contractors using the Platform are solely responsible for complying with applicable laws (including TCPA and CAN-SPAM) when contacting homeowners using lead information delivered by Shovld.

6.1 Active Accounts
We retain your account information, pipeline data, and usage history for as long as your account is active or as needed to provide services.

6.2 Cancelled Accounts
After subscription cancellation, your account and data remain accessible in read-only mode for 90 days. After 90 days of inactivity, your account may be permanently deleted including all associated pipeline notes, lead history, and outreach logs.

6.3 Legal and Financial Records
Payment records, billing history, and certain account logs are retained for up to 7 years as required by applicable financial and tax regulations.

6.4 Deletion Requests
You may request deletion of your account and personal data by contacting legal@getshovld.com. We will process deletion requests within 30 days, subject to our legal retention obligations.

We use cookies and similar tracking technologies to:

• Session cookies: Keep you logged in during your session
• Preference cookies: Remember your language, theme, and dashboard settings
• Analytics cookies: Understand how the Platform is used in aggregate (no third-party advertising cookies)

You can control cookies through your browser settings. Disabling session cookies will prevent you from logging in to the Platform.

We do not use cross-site tracking cookies or sell data to advertising networks.

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted using TLS 1.2 or higher
• Passwords are hashed using bcrypt and never stored in plain text
• Payment data is processed by Stripe and never touches our servers in raw form
• Database access is restricted by role-based permissions and Row Level Security (RLS)
• API access requires authenticated sessions with short-lived JWT tokens
• Infrastructure is hosted on Supabase with SOC 2 compliant cloud infrastructure

9.1 Access and Correction
You may access and update most of your account information directly through Settings. For data not accessible through the Platform, contact legal@getshovld.com.

9.2 Deletion
You may request deletion of your account and personal data at any time by contacting legal@getshovld.com. See Section 6 for retention details.

9.3 Marketing Opt-Out
You may opt out of marketing emails at any time by clicking "Unsubscribe" in any marketing email or by updating your notification preferences in Settings. You will continue to receive transactional messages necessary to operate your account.

9.4 Data Portability
You may request an export of your pipeline data, lead history, and account information in CSV format by contacting support@getshovld.com.

9.5 California Residents (CCPA)
California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. Shovld does not sell personal information. To exercise your CCPA rights, contact legal@getshovld.com.

9.6 Florida Residents
Florida residents may have additional rights under the Florida Digital Bill of Rights effective July 1, 2024. Contact legal@getshovld.com to exercise applicable rights.

The Platform is intended for use by licensed contractors and business professionals aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a minor, we will delete it promptly. Contact legal@getshovld.com if you believe we have inadvertently collected data from a minor.

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. Shovld is not responsible for the privacy practices or content of third-party services.

Shovld is operated in the United States and intended for use by U.S.-based contractors. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Platform, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on the Platform with a revised "Last Updated" date. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

For privacy-related questions, requests, or concerns, contact us at:

• Privacy inquiries: legal@getshovld.com
• Data deletion requests: legal@getshovld.com
• General support: support@getshovld.com
• Mailing address: Shovld LLC, Miami-Dade County, Florida, United States