These terms are being finalized and may change before Headr's public launch.
[Legal name] ("Headr," "we," "us") makes Headr, software that contractors use to run their jobs, crews, customers and warehouse. This policy explains what information we handle, why, who we share it with, and the choices you have. We wrote it in plain language on purpose. If something isn't clear, email [Contact email].
Two kinds of information, two roles
- Information about our subscribers. When a company signs up for Headr, we collect information about that company and the people who use it (names, work emails, phone numbers, billing details). For this information, we decide how it's used, and this policy applies directly.
- Information our subscribers keep in Headr about their own customers. Contractors use Headr to keep records about homeowners and other customers: names, addresses, phone numbers, emails, job details, photos, videos, documents and messages. We handle that information only on the contractor's behalf and only to provide Headr to them. The contractor decides what goes in and how it's used. If you're a homeowner and want to see, correct or delete your information, contact the company you hired. We'll help them do it. If you can't reach them, contact us at [Contact email].
What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account information | Name, email, phone, company name, role, password (stored scrambled; we can't read it) | You, when you sign up or are invited |
| Company records | Customers, leads, jobs, schedules, estimates, notes, inventory, forms, messages, chat | Entered by the subscribing company and its people |
| Photos, videos and documents | Job photos, short videos, PDFs, spreadsheets | Uploaded by the subscribing company |
| Billing information | Plan, billing history, the last 4 digits and brand of a card | Our payment processor. We never receive or store full card numbers. |
| Device and usage information | Device type, browser, app version, IP address, sign-in times, pages used, error reports | Collected automatically when Headr is used |
| Website information | Pages visited, how you arrived | Collected automatically on our website |
What we don't want. Headr is not built to hold payment card numbers or Social Security numbers, and it blocks anything that looks like either from being saved. Please don't put medical records, government ID numbers or similar highly sensitive information in Headr.
How we use information
- To provide Headr: run the app, keep each company's records, send the texts, emails and alerts a company sets up, and process payments.
- To keep Headr secure: verify sign-ins, require two-step sign-in for administrators, detect abuse, and investigate problems.
- To support you: answer questions and fix problems. Our staff can look inside a company's account only after that company's administrator turns on support access, for a limited time, read-only, and every page viewed is logged where the administrator can see it.
- To improve Headr: understand which features are used, using information that doesn't identify homeowners.
- To communicate with subscribers: service notices, billing, security alerts and (if you agree) product news. You can opt out of product news at any time.
- To follow the law and enforce our Terms of Service.
We do not sell personal information. We do not share it with anyone for their own advertising. We do not use our subscribers' customer records to market to those customers.
Text messages
Companies use Headr to text their own customers about appointments and jobs. Texts go only to people the company has marked as agreeing to receive them. Reply STOP to any text to stop receiving them, or HELP for help. Message and data rates may apply. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the providers who deliver the messages for us. See our texting policy.
Who we share information with
We share information only with companies that help us run Headr (our service providers), and only what they need to do that work. Each is bound to protect it.
| Service provider | What they do for Headr |
|---|---|
| Supabase (on Amazon Web Services) | Stores Headr's database, sign-ins and files |
| Netlify | Hosts the Headr website and web app |
| Twilio | Delivers text messages |
| Resend | Delivers emails |
| Stripe | Processes payments |
| Apple and Google | Deliver phone notifications |
Apps a company connects. A company can choose to connect other services to its Headr account (for example CompanyCam, Canva or an AI assistant). When it does, Headr sends those services the information needed for that connection. That company decides what to connect, and the other service's own privacy policy applies to what it receives.
We may also share information if the law requires it (for example a valid subpoena or court order), to protect someone's safety, to investigate fraud or security problems, or as part of a sale or merger of our business (the buyer would have to honor this policy).
Where information is stored
Headr's data is stored with Supabase on Amazon Web Services in [Where data is stored]. Some service providers may process information in other countries; when they do, they're required to protect it.
How long we keep information
- While a company's subscription is active, we keep its records until the company deletes them.
- After a company cancels, it has 30 days to download its records. We then delete them within 90 days, except for billing records we must keep for tax and accounting, and security logs we keep for up to 1 year.
- Backups are kept for a limited time and roll off automatically.
- A person can ask to delete their own login at any time from the app's settings or by emailing [Contact email].
How we protect information
- Each company's records are walled off from every other company's in the database itself, not just on the screen, and we test those walls before releases.
- Information is encrypted in transit and when stored.
- Two-step sign-in is required for every company administrator and for our own staff.
- Each company controls what each of its people can see and do.
- Card numbers and Social Security numbers are blocked from being saved.
No system is perfectly secure. If a breach affects your information, we'll notify the affected company and people as the law requires.
Your choices and rights
- See, correct or delete your account information in Headr's settings, or ask us at [Contact email]. We'll answer within 30 days.
- Homeowners and other customers of a Headr subscriber: contact that company first; we'll help them respond.
- Stop texts: reply STOP. Stop emails: use the unsubscribe link, or ask the company that sent it.
- Depending on your state (for example California, Colorado, Virginia and others), you may have more rights, such as knowing what information we have, getting a copy, or appealing a decision we made about your request. Email [Contact email] to use them. We won't treat you differently for using them.
Children
Headr is for businesses. It isn't meant for anyone under 16, and we don't knowingly collect information from children under 13. If you think a child's information was entered, tell us and we'll remove it.
Changes
If we change this policy in a way that matters, we'll tell subscribers by email or in the app at least 30 days before the change takes effect. The date at the top shows the latest version.
Contact
[Legal name], [Mailing address], [Contact email]