Privacy Policy

Effective date: July 22, 2026. This Privacy Policy explains how PoolRoutex (the PoolRoutex software service) (“we,” “us”) collects, uses, and shares information when you use PoolRoutex (the “Service”) and our marketing website.

Written for early-stage U.S. B2B SaaS. Review with counsel for GDPR/CCPA specifics if you market outside the U.S. or process large volumes of consumer data.

1. Who we are

Business contact: [email protected]. Website: https://www.poolroutex.com. PoolRoutex is software for pool service companies. Homeowners may receive portal or message links from their pool company; those homeowners are not our direct customers.

2. Information we collect

  • Account data: name, email, password (hashed by our auth provider), company name, role, and optional business phone or service area.
  • Authentication data: if you sign in with Google (or another OAuth provider), we receive basic profile information those providers share (such as name and email) to create or link your account.
  • Business data you enter: customer and homeowner details (name, address, phone, email, gate codes, access notes), pool and equipment data, routes, visits, checklists, chemical readings, photos, invoices, monthly rates, inventory items, maintenance records, and similar operational content.
  • Portal and invite tokens: links we generate so your techs can join your org or your customers can view service/invoice history you choose to share.
  • Usage data: log data, device/browser type, IP address, pages viewed, approximate location derived from IP, and diagnostic events.
  • Payment / subscription data: processed by Stripe or similar; we receive limited billing metadata (plan, status, customer or subscription IDs), not full card numbers.
  • Communications: support emails; emails we send on your behalf (e.g. team invites, invoice or portal notices); optional SMS logs when those features are enabled; message metadata needed to deliver and troubleshoot.
  • Marketing site data: if you visit our website from an ad or campaign, we may receive standard campaign parameters (e.g. UTM tags) and, if configured, advertising pixel events (see Cookies).

3. How we use information

  • Provide, maintain, and secure the Service
  • Authenticate users (including Google OAuth) and manage teams
  • Run free trials (no card required at signup) and paid subscriptions
  • Process subscriptions and (when you use them) customer invoices / pay links
  • Send transactional messages (security, billing, invites, product notices)
  • Send optional operational messages you initiate (e.g. invoice email, portal link, on-my-way or service-complete SMS)
  • Provide weather and location-based planning features using location you set or that we infer from service-area / customer addresses
  • Improve features, fix bugs, and prevent abuse
  • Measure marketing effectiveness when ads/pixels are enabled
  • Comply with law and enforce our Terms

4. Legal bases (EEA/UK if applicable)

Where GDPR applies, we rely on contract performance, legitimate interests (security, product improvement, limited marketing measurement), consent (where required, e.g. certain cookies/marketing), and legal obligation.

5. Sharing and processors

We share data with service providers that help us run PoolRoutex, including:

  • Hosting: Vercel (application hosting and delivery)
  • Database, auth, and file storage: Supabase (or equivalent)
  • Payments: Stripe (subscriptions and, when used, invoice checkout / pay links)
  • Email delivery: Resend or similar transactional email providers (team invites, invoice/portal emails, product notices)
  • SMS (optional): Twilio or similar when SMS features are configured
  • Sign-in providers: Google (when you choose Google sign-in)
  • Maps: hand-off to external map applications (e.g. Google Maps directions) using addresses you store
  • Weather data: Open-Meteo or similar forecast providers using a city/area or coordinates you set (or that we derive from service area / customer addresses)
  • Advertising platforms (optional): Meta (Facebook / Instagram) or similar if we run ads and install conversion pixels or APIs—used to measure campaigns, not to sell your homeowner customer lists
  • Professional advisors and authorities when required by law

We do not sell personal information for money. We do not sell or rent homeowner data from your account for third-party advertising. Business customers remain responsible for how they use homeowner data.

6. Your role as a business customer

If you upload homeowner, employee, or end-customer data, you are typically the controller of that data. You must have a lawful basis to collect and use it and must not use PoolRoutex to violate privacy, spam, or telemarketing laws. We process that data as a service provider / processor on your instructions to provide the Service (including sending messages and portal content you initiate).

7. Retention

We retain account and business data while your account is active and for a reasonable period afterward for backups, disputes, and legal compliance—including after a free trial ends without subscription, so you can return and subscribe. You may request deletion; some records may remain where law requires.

8. Security

We use industry-standard safeguards (encryption in transit, access controls, host security). No method is 100% secure; use strong passwords and limit team access.

9. International transfers

Data may be processed in the United States and other countries where our providers operate.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or object to certain processing. Contact [email protected]. California residents may have additional rights under the CCPA/CPRA. We do not “sell” personal information for money; if we use advertising pixels, limited online identifiers may be used for campaign measurement—contact us for opt-out requests related to marketing measurement.

11. Children

The Service is for businesses, not directed to children under 16. We do not knowingly collect data from children.

12. Cookies and similar technologies

  • Essential: cookies and local storage for authentication, session security, and basic product preferences (for example first-run tips).
  • Advertising / analytics (when enabled): we may use Meta Pixel (ads measurement and conversion events such as signup), Google Analytics 4 (pages, engagement time, traffic sources), and Microsoft Clarity (session replay and heatmaps to improve the product and site). Those tools may set cookies or read device identifiers. You can use browser controls and platform ad/privacy settings to limit some tracking.

13. Changes

We may update this Policy and will post the new effective date. Continued use means you accept the updated Policy.

14. Contact

Privacy requests: [email protected].