Privacy Policy

Effective date: July 21, 2026. This Privacy Policy explains how PoolRoutex (the PoolRoutex software service) (“we,” “us”) collects, uses, and shares information when you use PoolRoutex.

Template for early-stage SaaS. Review with counsel for GDPR/CCPA specifics if you market outside the U.S. or process large volumes of consumer data.

1. Who we are

Controller / business contact: [email protected]. Website: https://www.poolroutex.com.

2. Information we collect

  • Account data: name, email, password (hashed by our auth provider), company name, role.
  • Business data you enter: customer and homeowner details (name, address, phone, email, gate codes, notes), pool and equipment data, routes, visits, chemical readings, photos, invoices, and similar operational content.
  • Usage data: log data, device/browser type, IP address, pages viewed, approximate location derived from IP, and diagnostic events.
  • Payment data: processed by Stripe or similar; we receive limited billing metadata (plan, status), not full card numbers.
  • Communications: support emails and in-app messages.

3. How we use information

  • Provide, maintain, and secure the Service
  • Authenticate users and manage teams
  • Process subscriptions and (if enabled) customer invoices
  • Send transactional messages (security, billing, product notices)
  • Improve features, fix bugs, and prevent abuse
  • Comply with law and enforce our Terms

4. Legal bases (EEA/UK if applicable)

Where GDPR applies, we rely on contract performance, legitimate interests (security, improvement), consent (where required, e.g. certain cookies/marketing), and legal obligation.

5. Sharing

We share data with:

  • Infrastructure providers (e.g. Vercel hosting, Supabase database/auth/storage)
  • Payment processors (e.g. Stripe)
  • Communications providers (e.g. Twilio, email) when you enable those features
  • Professional advisors and authorities when required by law

We do not sell personal information for money. We do not share homeowner data for third-party advertising.

6. Your role as a business customer

If you upload homeowner or employee data, you are typically the controller of that data. You must have a lawful basis to collect and use it and must not use PoolRoutex to violate privacy or spam laws. We process that data as a service provider / processor on your instructions to provide the Service.

7. Retention

We retain account and business data while your account is active and for a reasonable period afterward for backups, disputes, and legal compliance. You may request deletion; some records may remain where law requires.

8. Security

We use industry-standard safeguards (encryption in transit, access controls, host security). No method is 100% secure; use strong passwords and limit team access.

9. International transfers

Data may be processed in the United States and other countries where our providers operate.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or object to certain processing. Contact [email protected]. California residents may have additional rights under the CCPA/CPRA; we do not “sell” or “share” personal information as those terms are commonly defined for advertising.

11. Children

The Service is for businesses, not directed to children under 16. We do not knowingly collect data from children.

12. Cookies

We use essential cookies/local storage for authentication and session security. Analytics cookies, if added later, will be disclosed and consented where required.

13. Changes

We may update this Policy and will post the new effective date. Continued use means you accept the updated Policy.

14. Contact

Privacy requests: [email protected].