Privacy Policy

CurbCraft Wash Co., LLC
Denver Metro Area, Colorado
Phone/Text: (720) 334-3838
Email: contact@curbcraftwashco.com

For privacy questions, account deletion requests, or data inquiries, contact us at the email above. You may also submit a deletion request directly in the App under My Account → Privacy → Request Account Deletion.

We collect information in the following categories when you use our website, App, or services:

Account and identity information

When you create a CurbCraft account in the App, we collect and store an account identifier, your authentication provider (Sign in with Apple or email), and — depending on your choices — your name and email address. If you use Sign in with Apple, Apple provides us with a stable opaque account identifier and, at your option, your name and either your real email address or an Apple private relay address. We do not receive your Apple ID password.

Contact information

We collect your email address and, when you provide it, your phone number through account creation, quote and booking request forms, or service interactions.

Authorized workforce information

The Tech App does not permit self-registration. CurbCraft administrators create and manage accounts for authorized owners, administrators, and technicians. For those managed accounts, we collect work contact details, role and access status, invitation and authentication records, notification settings, job assignments and status updates, service notes, time entries, scope changes, lead and referral submissions, compensation and payout records, and security or activity audit data needed to operate the business. The available data and actions depend on each person's assigned role and permissions.

Property and service information

We collect service addresses, unit information, property preferences, access notes, and service history when you submit a quote or booking request or engage our services.

App preferences and engagement

We store your notification preferences (reminders, marketing opt-in choices), saved property and home-care content, and Rewards and Offers eligibility within the App.

Device and push notification data

When you enable push notifications in the App, we store your APNs (Apple Push Notification service) device token, app environment, and registration state to deliver requested notifications. APNs tokens are treated as sensitive and are not logged.

Usage and service records

We maintain records of quote requests, booking requests, job status, service history, and communications necessary to provide and document our services.

Website data

Our website hosting provider (Vercel) collects standard server access logs including IP address, browser type, referring URL, and request metadata for security and uptime monitoring. We do not use third-party behavioral advertising trackers or ad networks on our website.

Information we do not collect

We do not collect precise device location, device contacts, payment card numbers (payments, if accepted, are handled by a processor that does not share full card details with us), government-issued identification, or biometric data.

We use information to:

• Authenticate and maintain your CurbCraft account
• Connect you with your saved properties and service history
• Provide quotes, scheduling, service updates, and customer support
• Manage authorized Tech App access, job assignments, and service completion workflows
• Administer staff time, earnings, payouts, leads, referrals, and operational records
• Deliver Rewards and Offers associated with your account
• Send transactional communications and, when enabled, service reminders
• Send marketing communications only where you have opted in
• Operate, secure, diagnose, and improve our services
• Prevent fraud and abuse
• Maintain required business, service, and accounting records
• Comply with applicable legal obligations

We disclose information to service providers that process it on our behalf under contractual and security obligations. Our current production providers include:

• Vercel — website and API hosting, edge infrastructure, and server logs
• Neon (PostgreSQL) — primary database storing account, property, booking, and preference data
• Apple — Sign in with Apple authentication and APNs push notification delivery
• MailerSend — transactional and marketing email delivery
• Google Calendar — scheduling integration for service appointment management (operational scheduling metadata only)

We may also disclose information when reasonably necessary to deliver requested services, protect customers and CurbCraft, complete a business transaction, or comply with law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use advertising networks, ad trackers, or data brokers on our website or in the App.

Consumer App users can change service-reminder and news-and-offer preferences under My Account → Notifications, or disable iOS push notifications in your device's Settings app. You can unsubscribe from marketing email using the unsubscribe link in any marketing message.

Tech App users can disable iOS push notifications in their device's Settings app and may contact a CurbCraft administrator about their managed account or operational notification access.

Transactional communications necessary to authenticate your account, respond to a service request, manage a booking, deliver a service, address safety or security, or confirm account deletion are not marketing and may continue while the related service or legal obligation is active.

Opting out of marketing does not delete your account. Account deletion immediately suppresses all future marketing, reminder, and push delivery.

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including providing requested services, maintaining account and service records, resolving disputes, preventing fraud, enforcing agreements, and meeting legal, tax, accounting, safety, and regulatory obligations.

How to delete your account: In the CurbCraft App, open your profile, choose My Account, select Privacy, and tap Request Account Deletion. You will be signed out immediately, all push devices and marketing delivery will be disabled, and we will complete deletion or required de-identification within 30 days.

This in-app deletion process applies to Consumer App accounts. Tech App accounts are organization-managed, cannot be self-created, and may be disabled by a CurbCraft administrator. Authorized personnel can contact the business using the information below to request access, correction, or deletion where applicable. Workforce, service, compensation, tax, safety, security, and audit records may be retained when reasonably necessary for contractual, operational, or legal obligations.

You may also review deletion instructions at curbcraftwashco.com/privacy-choices#delete-account or contact us if you cannot access the App.

Account deletion removes account data and associated personal information that we are not legally required to retain. When limited service, transaction, tax, fraud-prevention, safety, warranty, dispute, or compliance records must remain, we retain only what is needed for the applicable purpose and duration, restrict its use, and remove or de-identify unnecessary account information where feasible. Account deletion does not by itself cancel an active physical-service appointment or resolve an outstanding payment or dispute.

Residual copies may remain temporarily in encrypted backups until those backups expire under our documented backup rotation schedule. Deleted accounts are not restored to active systems from backups; if restoration is required for disaster recovery, deletion records are reapplied before normal processing resumes.

If you use Sign in with Apple, Apple provides CurbCraft with a stable opaque account identifier and, depending on your choices, your name and email address or an Apple private relay address. We use this to authenticate and maintain your CurbCraft account.

When you request account deletion, CurbCraft revokes its Sign in with Apple authorization when the necessary Apple token is available and deletes the related account credentials. For authorizations where programmatic revocation is unavailable, we still delete the CurbCraft account data within the 30-day processing period and provide instructions for removing CurbCraft from your Apple Account settings under Apps Using Apple ID.

We use reasonable administrative, technical, and physical safeguards to protect your information, including:

• TLS encryption for all data in transit
• Hashed session tokens (raw tokens are never stored)
• AES-256-GCM encryption for Apple refresh tokens stored at rest
• Keychain storage on iOS for session credentials
• Least-privilege access controls on production infrastructure
• Audit logging that excludes tokens, OTP codes, and sensitive payloads

No security measure is perfect or impenetrable. If you believe your account has been compromised, contact us immediately.

Our website and App are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be communicated through the App or by email. Continued use of our services after the effective date constitutes acceptance of the updated policy. The effective date at the top of this page reflects the most recent update.

For questions, access, correction, or deletion requests, contact us at:

CurbCraft Wash Co., LLC
contact@curbcraftwashco.com
(720) 334-3838

We will verify your identity using your authenticated account context or an email challenge. We will not ask you to send a password or one-time login code by email.