Privacy Policy

1. Who We Are

QuoteSchedulePay is operated by Kentron Technologies LLC, a Florida limited liability company. We provide a cloud-based software platform for owner-operated field service businesses. References to "we," "us," or "our" in this policy refer to Kentron Technologies LLC.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. It applies to all users of the Service, including business operators who subscribe to the platform ("Operators") and the end customers of those Operators whose data is stored in the platform ("End Customers").

Contact us at any time: [email protected] or in writing at 1323 SE 17th St, Fort Lauderdale, FL 33316-1707.

2. Data Controller and Data Processor Roles

Understanding the distinction between these roles is important:

• For Operator account data (name, email, billing information, business profile): Kentron Technologies LLC is the data controller. We determine the purpose and means of processing that data.
• For End Customer data (the customers, jobs, and invoices that Operators manage within the platform): the Operator is the data controller. Kentron Technologies LLC acts as a data processor, processing that data only on the Operator's behalf and at the Operator's direction.

Operators are solely responsible for their own compliance with applicable privacy laws with respect to their End Customers, including obtaining any required consents and providing required notices. We process End Customer data only as instructed by the Operator and as described in this policy.

3. Information We Collect

Information you provide directly:

• Account information: your name, email address, and password when you create an account.
• Business profile: company name, logo, brand colors, business address, phone number, and tax identification information entered during onboarding.
• End Customer records: names, addresses, email addresses, and phone numbers you enter for your customers.
• Job and invoice data: service descriptions, pricing, photos, notes, and related operational records you create.
• Communications: messages you send to us via email or support channels.

Payment information:

We do not store your full payment card number, CVV, or bank account details. Payment processing is handled by Stripe, Inc. We store Stripe-generated identifiers (such as customer ID and payment method ID), transaction amounts, and payment status.

Information generated automatically:

• Log data: IP addresses, browser type and version, pages visited, referring URLs, and access timestamps.
• Usage data: features you use, actions you take, and interaction patterns within the application.
• Device data: device type, operating system, and screen resolution.
• Cookies and tokens: session tokens and Firebase authentication tokens used to keep you logged in. See Section 10 for details.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process subscription payments and manage your billing relationship.
• Send transactional communications: invoice delivery, payment confirmations, password resets, and account notifications.
• Send service and product updates. You can opt out of non-transactional marketing emails at any time via the unsubscribe link in each email.
• Respond to your support requests and communications.
• Investigate, detect, and prevent fraud, abuse, and security incidents.
• Analyze aggregate, de-identified usage patterns to improve the product.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your data or your End Customers' data to train machine learning or AI models.

5. SMS and Text Message Consent

Mobile opt-in and messaging consent information collected through this platform will not be shared with third parties or affiliates for marketing or promotional purposes.

The Service sends transactional SMS messages on behalf of Operators to their customers. All messages are transactional only: invoice delivery, quote delivery, and overdue invoice notices. No marketing or promotional SMS messages are ever sent.

Customers opt in to transactional SMS by affirmatively agreeing on a QuoteSchedulePay web page, by checking an unchecked consent box on an invoice, quote, or the SMS opt-in page at qsphq.com/sms-optin, where they provide their own mobile number and see the program disclosures. Some customers additionally confirm by replying Y to a one-time confirmation text. Consent is never assumed from a phone number alone. Customers can withdraw consent at any time by replying STOP to any message, which stops all automated messages from QuoteSchedulePay to that number.

• Message and data rates may apply.
• Message frequency varies based on business activity.
• To stop receiving messages: reply STOP to any message. You will receive one confirmation and no further messages will be sent.
• For help: reply HELP to any message or contact us at [email protected].
• Wireless carriers are not liable for delayed or undelivered messages.

QuoteSchedulePay also sends transactional emails (invoice delivery, quote delivery, and overdue reminders) on behalf of the businesses that use the service. To receive these emails, customers opt in by checking an unchecked consent box on an invoice, quote, or notifications opt-in page, where they provide or confirm their email address and see the program disclosures. Customers can unsubscribe from email at any time by clicking the unsubscribe link in any email. Email addresses are not shared with third parties or affiliates for marketing.

6. How We Share Your Information

We share personal information only with the following categories of recipients:

• Infrastructure and hosting: Firebase (Google LLC) for database, authentication, and file storage; Vercel, Inc. for application hosting. These providers process data only to provide their services to us.
• Payment processing: Stripe, Inc. for subscription billing and Stripe Connect for Operator payment collection. Stripe's processing is governed by the Stripe Privacy Policy.
• Communications: SendGrid (Twilio Inc.) for transactional and notification email delivery; Twilio for SMS notifications. These providers transmit messages you or we initiate through the Service.

SMS and messaging consent: Mobile opt-in and messaging consent information collected through this platform will not be shared with third parties or affiliates for marketing or promotional purposes. This data is used solely to deliver the transactional messages for which consent was given.

• Error monitoring: Sentry, Inc. for application error tracking. Error reports may include technical metadata but are not used for marketing.
• Accounting integrations (optional): If you enable an accounting integration, data necessary to perform that integration (such as invoice records) is shared with QuickBooks (Intuit Inc.), Xero Limited, or FreshBooks (2ndSite Inc.), as applicable. These integrations are enabled only at your direction.
• Legal and safety: We may disclose information if required by applicable law, regulation, court order, or governmental authority, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Kentron Technologies LLC, our users, or the public.
• Business transfers: If Kentron Technologies LLC is involved in a merger, acquisition, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will notify affected users by email or prominent notice before data is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your account, we retain your data for 30 days to allow recovery, after which it is deleted from active systems. Backup copies may persist for up to 90 additional days before permanent deletion. We may retain certain information longer when required by law (for example, records related to financial transactions may be retained for up to seven years for tax and accounting purposes).

8. Your Rights and Choices

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to our legal retention obligations.
• Portability: request your data in a structured, machine-readable format.
• Opt-out of marketing: unsubscribe from marketing emails via the link in any email, or contact us directly. We will still send transactional messages necessary to operate your account.
• Object or restrict processing: in certain circumstances, you may object to or request restriction of our processing of your data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are an End Customer of one of our Operators and wish to exercise your rights regarding data that Operator has stored in our platform, please contact that Operator directly. We will assist Operators in responding to verified End Customer requests.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights:

• Right to Know: you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: you have the right to request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt Out of Sale: we do not sell personal information as defined under the CCPA. You do not need to opt out.
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights.

To submit a verifiable California privacy request, email [email protected] with the subject line "California Privacy Request." We will respond within 45 days.

Categories of personal information collected in the past 12 months: identifiers (name, email, IP address); commercial information (subscription and payment records); internet or other electronic network activity (usage logs); and professional or employment-related information (business name and type). We have not sold any of these categories.

10. Cookies and Tracking

We use the following types of cookies and local storage:

• Authentication tokens: Firebase authentication tokens stored in local storage to keep you signed in. These are strictly necessary for the Service to function.
• Session cookies: short-lived cookies used to maintain your session state.

We do not use advertising cookies, third-party tracking pixels, or cross-site behavioral advertising. We do not participate in interest-based advertising networks.

You can configure your browser to block or delete cookies. Blocking authentication-related storage will prevent you from staying logged in to the Service.

11. Security

We implement commercially reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission via HTTPS/TLS, Firestore security rules that enforce per-tenant data isolation so no Operator can access another Operator's data, Stripe for PCI DSS-compliant payment handling, and access controls limiting internal access to personal data. No security system is impenetrable. In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law and without undue delay.

12. Children

The Service is intended for use by business operators and is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor without verifiable parental consent, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and notify account holders by email at least 14 days before the changes take effect. Your continued use of the Service after the effective date of a revised policy constitutes your acceptance of the changes.

14. Contact

For privacy questions, rights requests, or concerns, contact us at [email protected].

For written correspondence: