Privacy Policy

OptiFlow Build LLC, doing business as OptiFlow Build ("we," "us," or "our"), operates the website https://www.optiflowbuild.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password. If you register a company, we collect your company name and business details.

Contact Information: Information you enter into the CRM, including client names, phone numbers, email addresses, physical addresses, and project notes.

Usage Data: We automatically collect information about how you access and use the Service, including your IP address, browser type, device information, pages visited, features used, and timestamps.

SMS & Phone Data: If you use our SMS features, we collect your phone number, the phone numbers you communicate with through the Service, message content, and message metadata (timestamps, delivery status).

Payment Information: Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe may collect and store payment information in accordance with their privacy policy.

Files & Photos: Photos, receipts, documents, and other files you upload to the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your account registration and manage your account
• Send you transactional SMS messages related to account activity, notifications, and customer support
• Process payments and manage subscriptions
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

3. SMS Communications

By providing your phone number and opting in to SMS communications, you consent to receive transactional text messages from OptiFlow Build. These messages may include:

• Account verification and security alerts
• Job and project status notifications
• Appointment and follow-up reminders
• Customer support responses
• Service updates and system notifications

Message frequency varies based on your account activity and notification preferences. Message and data rates may apply depending on your mobile carrier plan.

Your SMS consent and phone number are not shared with third parties for marketing or promotional purposes. We only share your phone number with our SMS service provider (Twilio) solely for the purpose of delivering messages you have requested or that are necessary for Service operation.

4. Consent and Opt-In

We obtain your consent before sending SMS messages. Consent is collected when you:

• Register an account and provide your phone number
• Enable SMS notifications in your account settings
• Send an SMS message to your assigned OptiFlow Build number

Consent is voluntary. You are not required to opt in to SMS messaging as a condition of purchasing or using the Service.

5. Opt-Out Instructions

You may opt out of SMS communications at any time by:

• Replying STOP to any SMS message from OptiFlow Build
• Contacting us at founder@optiflowbuild.com
• Updating your notification preferences in your account settings

After opting out, you will receive a one-time confirmation message. You will no longer receive SMS messages from us unless you re-subscribe. Opting out of SMS does not affect your ability to use other features of the Service.

For help, reply HELP to any SMS message or contact us at founder@optiflowbuild.com.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: We share data with trusted third-party services that help us operate the Service, including Stripe (payments), Supabase (database and authentication), Twilio (SMS), and Vercel (hosting). These providers are contractually obligated to protect your data and use it only to provide services to us.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information with your explicit consent.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from the Service
• Encryption at rest for stored data
• Row-level security (RLS) ensuring users can only access their own company's data
• Rate limiting on authentication and API endpoints
• Automatic session expiration and inactivity logout
• Secure password hashing

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Cookies and Analytics

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how the Service is used. We use Vercel Analytics and Vercel Speed Insights to collect anonymized usage data to improve performance and user experience. These tools do not use cookies for tracking and do not collect personally identifiable information.

9. Third-Party Services

Our Service integrates with the following third-party providers:

• Stripe — Payment processing. See Stripe's Privacy Policy.
• Supabase — Database, authentication, and file storage. See Supabase's Privacy Policy.
• Twilio — SMS messaging. See Twilio's Privacy Policy.
• Vercel — Hosting and analytics. See Vercel's Privacy Policy.

10. Your Rights and Data Deletion

You have the right to:

• Access the personal data we hold about you
• Export your data in a machine-readable format
• Correct inaccurate or incomplete information
• Delete your account and all associated data
• Opt out of SMS communications

To exercise any of these rights, contact us at founder@optiflowbuild.com. We will respond to requests within 30 days. Account deletion requests will permanently remove all your data from our systems, including contacts, bids, events, files, and account information.

11. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

OptiFlow Build LLC
Email: founder@optiflowbuild.com
Website: https://www.optiflowbuild.com