Privacy Policy
Last updated 7 August 2026
This policy covers the Serv77 website at serv77.com, the Serv77 web application, and the Serv77 crew mobile app. It is written to be read, not to be survived.
1. Who this is about
Serv77 has two kinds of relationship with the people whose information it holds.
- Our customers — service companies who license Serv77. We are the controller of the account information we hold about them.
- Our customers’ data — the records a service company keeps about its own clients, jobs and employees. For that data we act as a processor: the service company decides what is collected and why, and we handle it on their instruction. If you are a homeowner or a business who was served by a company that uses Serv77, your relationship is with that company, and requests about your data should go to them first.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Enquiry information | Name, company, work email, phone, crew count, trade, your message | To respond to a demo request. Submitted by you on this site. |
| Account information | User names, email addresses, roles and permissions | To operate the account and enforce access control. |
| Operational records | Customers, properties, estimates, jobs, invoices, payments, notes, photos | The substance of the product. Owned by the licensing company. |
| Crew location | Position points while a crew member is checked in | Dispatch, routing and time verification. See section 4. |
| Call records | Recordings, metadata and redacted transcripts | Customer history and quality review. See section 5. |
| Technical data | IP address, browser and device type, pages requested, timestamps | Security, abuse prevention and fault diagnosis. |
What we deliberately do not collect
- No advertising or cross-site tracking cookies. This website sets no cookies at all.
- No third-party analytics scripts, social pixels, session recorders or heat maps.
- We do not store full payment card numbers, bank account numbers or national identification numbers in the platform, and card and social-security numbers spoken aloud are stripped from call transcripts before storage.
3. This website specifically
The serv77.com marketing page loads no external resources, no fonts from a third party, and no tracking scripts. It sets no cookies and requires no consent banner, because there is nothing to consent to.
If you submit the demo form, we store what you typed, together with the country and city your request came from, your browser’s user-agent string, the referring page, and a salted one-way hash of your IP address used solely to rate-limit abuse. The hash cannot be reversed into an address. We use this only to reply to you about Serv77. We do not add you to a marketing list, and we do not sell or share it.
Our infrastructure provider processes requests on our behalf and may log request metadata for security and reliability purposes.
4. Location data and the crew app
This section matters more than the rest, so it is explicit.
- The Serv77 crew app collects background location only while a crew member is checked in to a shift. Checking out stops collection. There is no collection when the app is not in an active shift.
- Location is collected to place jobs on a dispatch board, verify arrival and departure at a work site, and support routing. It is visible to the employing company’s dispatchers and managers.
- A device is enrolled by a company administrator and can be revoked by that administrator at any time, which immediately ends all collection from it.
- Location points are retained at full resolution for a limited period and then reduced to arrival and departure events. A company may request earlier deletion.
- Location is not used for advertising, is not sold, and is not shared with anyone outside the employing company and our infrastructure providers.
- You can withdraw the operating-system location permission at any time in your device settings. Doing so will stop location features working; it will not stop you using the rest of the app.
5. Call recordings
Where a company records calls, those recordings and their metadata are stored on that company’s behalf. Automated transcripts are redacted to remove card numbers and social-security numbers before they are stored or indexed. Playback of raw audio is limited to manager and administrator roles, and every playback is written to an audit log.
Call recording is regulated and the rules differ by jurisdiction. The licensing company is responsible for notice and consent where its law requires them.
6. Text messages
Where a company sends texts through Serv77, opt-out is absolute and enforced on our servers rather than in the interface. Replying STOP, UNSUBSCRIBE, CANCEL, END or QUIT stops messages to that number, and the block cannot be overridden by a user or an integration. Sending is restricted to reasonable local hours. We store a masked form of the number rather than the full number in the message log.
7. How we protect information
- Everything travels over TLS. The application database is in a private network with no route from the public internet.
- Credentials and third-party API secrets are held in a managed secret store and encrypted at rest; they are write-only in the interface and never displayed back.
- Permissions are enforced on the server. Revenue figures are removed from the response entirely for users who lack the revenue permission, rather than hidden in the browser.
- A crew device receives a deliberately narrow set of rights, scoped to one crew, and never has access to revenue or the customer list.
- Database backups are retained on a rolling window with deletion protection enabled.
No system is perfectly secure. If we become aware of a breach affecting your information we will notify the affected companies without undue delay and describe what happened and what we are doing about it.
8. How long we keep things
- Demo enquiries: up to 24 months, then deleted, unless you become a customer.
- Account and operational records: for the life of the account and for a reasonable period afterwards to allow for export and to meet legal obligations.
- Location points: full resolution for a limited window, then reduced to arrival and departure events.
- Audit logs: retained as long as needed for security review.
9. Your rights
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, obtain a portable copy, object to or restrict certain processing, and withdraw consent. Residents of California may additionally request disclosure of categories collected and may opt out of sale or sharing — we do not sell or share personal information as those terms are defined, and we do not offer financial incentives for data.
To exercise a right, email privacy@serv77.com. We will respond within the period the applicable law requires. If your data was entered by a company that uses Serv77, we will refer your request to that company, since it decides what happens to its own records.
We do not knowingly collect information from children under 13, and the product is not directed to children.
10. Where data is processed
Serv77 is operated from the United States and information is processed there. If you are contacting us from elsewhere, you are sending your information to the United States.
11. Service providers
We use a small number of providers to run the platform — cloud hosting and databases, edge delivery, telephony and messaging, and email. They act on our instructions, are bound to protect the information, and may not use it for their own purposes.
12. Changes
If we change this policy we will update the date at the top. Material changes will be communicated to account administrators directly rather than only posted here.
13. Contact
Privacy questions: privacy@serv77.com
Everything else: hello@serv77.com