Privacy Policy

This Privacy Policy describes how SiteProConnect (“SiteProConnect,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information in connection with the SiteProConnect application and related services (collectively, the “Service”). It applies to information we process as a controller. Where we process information on behalf of an organization that uses the Service, we act as that organization’s processor, and that organization’s own privacy notice governs its use of the data. By using the Service, you acknowledge the practices described in this Policy.

Who we are

The Service is operated by MVP Strategic Consulting LLC, a California limited liability company, which is the controller responsible for information processed through the Service except where it acts as a processor as described above. You may contact us regarding privacy at privacy@siteproconnect.com.

Information we collect

• Account information. Name, email address, organization, role, and credentials used to sign in to and administer your account.
• Customer Data. The business records that you and your authorized users create or import, such as accounts, contacts, deals, job sites, assets, jobs, invoices, and payments.
• Integration data. Data we access from the third-party systems you connect, such as ServiceCore (customers, sites, jobs, rentals, invoices, payments and completion records), QuickBooks Online, Microsoft Outlook (email and calendar), calling providers such as Ringaro, and Fleet GPS/telematics providers.
• Usage and device data. Log data, approximate location derived from an IP address, and basic operational analytics used to operate and secure the Service.

How we use information

We use the information described above for the following purposes:

• to provide, maintain, secure, and improve the Service;
• to synchronize data with the third-party integrations you authorize;
• to authenticate users, enforce access controls, and prevent abuse;
• to provide support and communicate with you about the Service; and
• to comply with legal obligations.

We do not sell your personal information, and we do not use Customer Data to train third-party advertising models.

Legal bases for processing

Where the European Union or United Kingdom General Data Protection Regulation or a similar law applies, we rely on the following legal bases:

• Performance of a contract, to provide the Service to you and your organization, to authenticate users, to operate the integrations you enable, and to provide support.
• Legitimate interests, to secure the Service, prevent abuse, maintain logs, and improve our product, balanced against your interests and rights.
• Consent, where you opt in to a feature such as sharing your email or calendar activity. You may withdraw consent at any time, without affecting processing carried out before withdrawal.
• Compliance with a legal obligation, where processing is required to meet applicable law or a lawful request.

QuickBooks Online data (Intuit)

If you connect QuickBooks Online, you authorize SiteProConnect to access and exchange data with your QuickBooks company through Intuit’s application programming interfaces, on your behalf, to provide the features you request. Those features include creating customers and sub-customers, pushing approved invoices, and, where you enable it, reading payment status back into the Service. We use QuickBooks data solely to provide these features to you. We do not sell QuickBooks data, and we do not use it for advertising. Access tokens issued by Intuit are stored in encrypted form and are used only to make authorized calls to your connected company. You may revoke our access at any time by disconnecting QuickBooks in the Service’s integration settings or within your Intuit account. Your use of QuickBooks is also governed by Intuit’s own terms and privacy policy.

ServiceCore data

If you connect ServiceCore, you authorize SiteProConnect to access the data you provide or make available — your customers, sites, contacts, rentals, units, jobs and completion records (including photos and signatures), invoices, payments and credit memos. You can provide this data by CSV/Excel upload, by enabling ServiceCore Data Share, or by providing a ServiceCore API key. Access is read-only unless you explicitly enable write-back. Any credentials you provide (upload files, Data Share connection details, or API keys) are stored encrypted. We use ServiceCore data solely to provide the Service to you; we do not sell it or use it for advertising. After you disconnect ServiceCore or terminate your account, we retain this data only for the export window described below and then delete it. SiteProConnect is not affiliated with or endorsed by ServiceCore.

Call recordings and consent

If you connect a calling provider such as Ringaro, we may access call records and, where you make them available, recordings, to place them on the relevant customer's timeline. Call recording is subject to law: some jurisdictions (including California) require all parties to consent. You are responsible for obtaining any consent required for calls you record and connect to the Service.

Email and calendar data (Microsoft)

If you connect Microsoft Outlook, we access the email and calendar data you authorize in order to match communications to the relevant account or contact and to display them on your timeline. Administrators can control which activity is shared, and individual users can opt in or out. We use this data only to provide these features, and we store any access tokens in encrypted form.

How we disclose information

We disclose information only as necessary to operate the Service:

• Service providers. Infrastructure and subprocessors that host and operate the Service — our cloud hosting and database providers, email delivery, analytics, and, where AI-assisted features are used, a third-party AI model provider — under confidentiality obligations and only as needed to provide the Service. A current list of subprocessors is available on request.
• Integrations you authorize. The third-party systems you connect, to the extent you direct.
• Legal and safety. Where required by law or where reasonably necessary to protect rights, safety, and the integrity of the Service.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

International data transfers

We operate in the United States, and our hosting and infrastructure providers process data there. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and in other countries where we or our providers operate. Where required, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect international transfers.

Cookies

We use strictly necessary cookies to keep you signed in and to secure the Service, such as session and OAuth state cookies. These cookies are required for the Service to function and are not used for advertising. We do not use third-party advertising or cross-site tracking cookies.

Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Certain features, such as suggestions generated with the assistance of artificial intelligence, are designed to support your team, and a person remains responsible for any action taken.

Data security

We maintain administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit using Transport Layer Security, encryption at rest for sensitive secrets such as OAuth tokens, organization-scoped access controls, and least-privilege access to systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information and to limit access to those who need it.

Data retention

We retain Customer Data for as long as your account is active or as needed to provide the Service, and for a reasonable period thereafter, unless you request deletion or we are required to retain it by law, for example records we must keep for tax or accounting purposes. Organization administrators can delete records within the Service, and you may ask us to delete your account data by contacting us. On request we will delete the associated data, except where retention is required by law.

Whether providing information is required

Providing account and Customer Data is necessary to use the Service. Without it, we cannot create your account or provide the features you request. Connecting a third-party integration is optional. The Service functions without it, and you may disconnect at any time.

Your rights and choices

Depending on your jurisdiction, you may have some or all of the following rights over your personal information:

• to access a copy of your data and to receive it in a portable format;
• to correct inaccurate data;
• to delete your data;
• to restrict or object to certain processing;
• to withdraw consent where processing is based on consent; and
• to lodge a complaint with your data protection authority or, in the European Union or United Kingdom, a supervisory authority.

You can exercise many of these rights directly in the Service by editing or deleting records, exporting data to CSV, and connecting or disconnecting integrations, or by contacting us. We will respond to verified requests as required by applicable law, and we will not discriminate against you for exercising your rights.

California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you the rights to know what personal information we collect and how we use and disclose it, to request access to and deletion of your personal information, to correct inaccurate personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information within the meaning of that law, and we do not use or disclose sensitive personal information for purposes that would require an opt-out. You may exercise your rights as described above, and you may designate an authorized agent to act on your behalf.

Children

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this Policy

We may update this Policy from time to time. If we make a material change, we will provide reasonable notice, for example by posting the revised Policy with a new effective date.

Contact

Questions or requests regarding this Policy may be directed to privacy@siteproconnect.com.