Privacy Policy — ServiceScale

ServiceScale (“we,” “us,” “our”) is operated by Joseph Park doing business as JP ServiceScale. This Privacy Policy explains what data we collect from customers and visitors, how we use it, and your rights over it. If you have questions, email jpsupplychainllc@gmail.com.

1. Who this applies to

This policy covers jpservicescale.com and the ServiceScale application at app.servicescale.com. It does not cover JP Solution Services (jpsolutionservices.com), which has its own policy.

2. What we collect

Information you provide directly

Account information: name, email address, company name, phone number, password (stored hashed).
Contact form submissions: name, email, company, monthly ad spend, and whatever you write in the message field.
Business data you enter or import: client records, leads, jobs, invoices, call logs, and any notes you create inside the dashboard.
Payment information: handled by our payment processor (Stripe). We never see or store your card number.

Information we collect automatically

Usage data: pages visited, features used, time on site, referring URL, and approximate location (from IP).
Device and browser data: browser type, operating system, screen resolution, and session identifiers.
Cookies and similar technologies: we use essential cookies for login sessions and tenant selection. See Section 7.

Information from third-party integrations

When you connect an ad platform or tool (Google Ads, Meta Ads, Local Services Ads, call tracking, your CRM), we receive data from that platform with your authorization. This may include:

Ad spend, impressions, clicks, and conversion metrics
Lead form submissions and call recordings
Campaign, ad group, and keyword-level reporting data
OAuth access tokens (stored encrypted) to query these APIs on your behalf

3. How we use your information

To provide the ServiceScale product: attribution, reporting, AI recommendations, call intelligence.
To authenticate you and keep your account secure.
To generate weekly reports and kill/scale/test recommendations for your business.
To communicate with you about your account, product updates, and support.
To improve the product — we analyze aggregated, anonymized usage patterns.
To comply with legal obligations.

We do not sell your data. We do not share your business data with other ServiceScale customers.

4. Who we share data with

We share data only with service providers that help us operate, and only to the extent needed. Our subprocessors:

Supabase — database and authentication hosting. Privacy policy.
Vercel — application hosting and edge network. Privacy policy.
Anthropic — AI processing (Claude) for insights and recommendations. We do not use your data to train models. Privacy policy.
Google — Google Ads API and Local Services Ads API access (only when you authorize a connection).
Meta — Meta Marketing API access (only when you authorize a connection).
Stripe — payment processing for subscriptions. Privacy policy.

We may also share data if required by law (subpoena, court order) or to protect our rights, your safety, or the safety of others.

5. Data retention

We keep your data as long as your account is active. If you cancel, we retain your data for 90 days in case you change your mind, then permanently delete it. You can request immediate deletion at any time — see Section 8.

Aggregated, anonymized data that cannot identify you may be retained indefinitely for product analytics.

6. How we protect your data

Passwords are hashed (never stored in plaintext).
OAuth tokens for ad platforms are stored encrypted at rest.
Data is isolated per tenant using row-level security (RLS) in our database — customers cannot access each other's data.
All data in transit is encrypted using TLS.
Access to production data is limited to the founder (Joseph Park) and is logged.

No system is 100% secure. If we discover a data breach affecting your account, we will notify you within 72 hours via the email on file.

7. Cookies

We use only essential cookies required for the product to function:

Session cookies — to keep you logged in (set by Supabase Auth).
active_tenant_id — remembers which tenant workspace you are currently viewing.

We do not use advertising, analytics, or tracking cookies. You can block cookies in your browser, but the product will not work without session cookies.

8. Your rights

Regardless of where you live, you have the right to:

Access — get a copy of the data we hold about you.
Correct — update inaccurate personal information.
Delete — request permanent deletion of your account and data.
Export — request your data in a machine-readable format.
Object or restrict — limit how we process your data.

To exercise any of these rights, email jpsupplychainllc@gmail.com from the address on your account. We will respond within 30 days.

If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you have additional rights under those laws. Everything listed above implements those rights. California residents may also designate an authorized agent to submit requests on their behalf.

9. International data transfers

ServiceScale is operated from the United States. If you access the product from outside the US, your data will be transferred to and processed in the US. Our subprocessors (Supabase, Vercel, Anthropic) maintain appropriate safeguards for international transfers under the EU Standard Contractual Clauses and equivalent mechanisms.

10. Children

ServiceScale is built for business owners and is not intended for anyone under 18. We do not knowingly collect data from children.

11. Changes to this policy

We will update this policy as the product evolves. Material changes will be announced via email to account holders at least 30 days before taking effect. The “Last updated” date at the top of this page always reflects the current version.

12. Contact

Questions, data requests, or concerns:
Joseph Park, Founder — ServiceScale
jpsupplychainllc@gmail.com