Privacy Policy

Effective date: April 19, 2026  ·  Last updated: April 19, 2026

This Privacy Policy describes how SchlappyTools LLC ("Company", "we", "us", or "our") collects, uses, stores, and protects the personal information of users ("you") of the SchlappyOps web application ("Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: Email address, hashed password, and plan status when you register.
• Business data you enter: Client names, phone numbers, email addresses, job titles, addresses, notes, and pricing information. This data belongs to you.
• Access request data: If you request access via the waitlist, we collect your email address and how you heard about us.
• Usage data: Basic server logs (IP address, browser type, pages visited) for security and diagnostic purposes. We do not use third-party analytics trackers.
• Payment data: We do not store card numbers. Payment is handled entirely by Stripe. We receive and store a Stripe Customer ID and subscription status.

2. How We Use Your Information

• To create and manage your account
• To provide, maintain, and improve the Service
• To send transactional emails (account verification, password resets, billing receipts) via Resend
• To process and manage subscriptions through Stripe
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not use your data for advertising. We do not sell, rent, or trade your personal information to third parties.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase (AWS infrastructure). All data is encrypted in transit via HTTPS/TLS. Passwords are hashed using bcrypt and are never stored or transmitted in plain text. Your account data is logically isolated — no other user can access your records.

While we implement industry-standard security practices, no system is completely immune to breach. By using the Service, you acknowledge and accept the residual risk inherent to any internet-connected service.

4. Third-Party Service Providers

We share data with the following third parties solely to operate the Service:

• Stripe — payment processing. Subject to the Stripe Privacy Policy.
• Resend — transactional email delivery. Subject to Resend's Privacy Policy.
• Supabase — database hosting. Subject to Supabase's Privacy Policy.
• Google Maps API — address autocomplete in job/client forms. Subject to Google's Privacy Policy. Address data entered into autocomplete is passed to Google.
• Vercel — application hosting and edge infrastructure. Subject to Vercel's Privacy Policy.

We do not authorize these providers to use your data for their own marketing or any purpose beyond providing their services to us.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data (account record, clients, jobs, and companies) from our active database within a commercially reasonable time. Stripe transaction records may be retained by Stripe in accordance with their policies and applicable financial regulations. Aggregated, anonymized data may be retained indefinitely.

6. Your Rights

You have the right to:

• Access the personal data we hold about you by contacting us
• Correct inaccurate data via your Account Settings
• Delete your account and all associated data at any time from Account Settings
• Export your client data using the CSV export feature in the app
• Opt out of non-transactional communications (we currently send none)

If you are located in the EU/EEA, you may have additional rights under the General Data Protection Regulation (GDPR). If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). Please contact us to exercise any of these rights.

7. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

9. Contact

For privacy-related inquiries, data deletion requests, or to exercise your rights:

SchlappyTools LLC
Email: support@schlappyops.com

← Back