Legal

Privacy Policy

Last updated: July 23, 2026

Your trust matters to us. This policy explains, in plain terms, what we collect when you use SkaffaldOS, why we collect it, and the control you have over it.

Who we are

SkaffaldOS ("SkaffaldOS," "we," "us," or "our") provides an all-in-one back-office platform for trades and field-service businesses, including a website builder, the Find a Pro marketplace, lead and client management, estimates and invoicing, payments, scheduling, dispatch, fleet, inventory, and related tools (the "Service"). We are based in Oregon, United States.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the SkaffaldOS websites and application. It does not cover the independent businesses that use SkaffaldOS to run their own operations; those businesses are responsible for their own privacy practices toward their customers.

Information we collect

We collect the following categories of information:

  • Account and profile information. When you sign up, we collect information such as your name, email address, phone number, business name, login credentials, and the plan you choose.
  • Customer Data. Information you enter into the Service to run your business, such as your leads, clients, projects, estimates, invoices, employees, schedules, inventory, and documents. You control this data; we process it on your behalf to provide the Service.
  • Payment information. When you subscribe, payments are processed by Stripe. We receive limited billing details (such as your plan, billing status, and the last four digits of a card) but we do not store full payment card numbers on our systems.
  • Usage and analytics data. Information about how the Service is used, such as pages and features visited, interactions, approximate location derived from IP address, device and browser type, and log data. We collect this through our own product logging and analytics tools such as Google Analytics.
  • Cookies and similar technologies. We use cookies and similar technologies to keep you signed in, remember preferences, and measure and improve the Service.

How we use de-identified data

We study how the Service is used so we can improve it, and we may also share or sell aggregated and de-identified data to third parties. This data is stripped of identifiers so that it cannot reasonably be used to identify you or any individual — we look at how features are used, not who is using them. We never sell or expose personal information such as names, contact details, or addresses.

Your account information and Customer Data are handled separately, under the terms described elsewhere in this policy, and are only ever used to provide, secure, support, improve, and bill for the Service — never sold in a form that identifies you.

How we use information

  • To provide, operate, and maintain the Service.
  • To process subscriptions and payments through Stripe.
  • To communicate with you about your account, including service and transactional emails sent through SendGrid.
  • To send product updates, tips, and marketing emails, which you can opt out of at any time using the unsubscribe link.
  • To provide customer support and respond to your requests.
  • To improve, develop, and research new features, and to create aggregated, de-identified data that we may share or sell to third parties as described above.
  • To protect the security and integrity of the Service and to prevent fraud or abuse.
  • To comply with legal obligations and enforce our agreements.

How we share information

We do not sell or share your personal information — such as names, contact details, or addresses. We may share or sell aggregated and de-identified data that cannot identify you or any individual, as described above. Otherwise, we share information only in the following ways:

  • Service providers (subprocessors) who help us run the Service, under contracts that require them to protect your information. These currently include Stripe (payment processing), SendGrid (transactional email), Vercel (application hosting), Mapbox (maps and geocoding), Google Analytics (usage analytics), and Google Calendar (scheduling, if you connect it).
  • Legal and safety reasons, when we believe disclosure is reasonably necessary to comply with the law, enforce our terms, or protect the rights, property, or safety of SkaffaldOS, our users, or others.
  • Business transfers, if SkaffaldOS is involved in a merger, acquisition, or sale of assets, in which case we will provide notice before your information becomes subject to a different privacy policy.

Data retention

We retain account information and Customer Data for as long as your account is active and as needed to provide the Service. After account closure, we retain data for a limited period to allow for reactivation and to meet legal, tax, and security obligations, after which it is deleted or de-identified. De-identified analytics data may be retained to support ongoing product research.

Exporting and deleting your data

You can export your Customer Data from the Service at any time. You may also request deletion of your account and associated data by contacting us. We will honor deletion requests except where we are required or permitted by law to retain certain information.

Security

We use technical and organizational measures designed to protect information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to promptly address issues if they arise.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of the sale or sharing of your personal information, and to not be discriminated against for exercising these rights. Residents of California have these rights under the CCPA and CPRA.

Although we only ever sell or share aggregated, de-identified data — never personal information — you may still tell us not to sell or share any information about you by emailing privacy@skaffaldos.com with the subject “Do Not Sell or Share My Personal Information,” and we will honor your request.

To exercise any of these rights, email us at privacy@skaffaldos.com and we will respond as required by law. If we process Customer Data on behalf of a business using the Service, we will refer requests from that business’s end customers to the business as the party responsible for that data.

Your customers’ data

When you use SkaffaldOS to manage information about your own leads, clients, and employees, you are the party responsible (the controller) for that information, and we act as your processor. You are responsible for having an appropriate legal basis and privacy notice for the information you collect and store in the Service.

Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18.

International users

SkaffaldOS is operated from the United States. If you access the Service from outside the United States, your information will be processed in the United States, where privacy laws may differ from those in your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or your information, contact us at privacy@skaffaldos.com.