Privacy Policy

1. Introduction

Oh Sit! ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our pet waste removal CRM platform ("Service").

By using the Service, you consent to the practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect information provided through our authentication provider (Clerk), which may include your name, email address, and profile information from social login providers (Google, Facebook, or Apple).

Business Information

When you set up your business profile, we collect your business name, owner name, email, phone number, and business address.

Customer Data You Provide

As part of using the Service, you may enter information about your customers, including names, email addresses, phone numbers, physical addresses, gate codes, yard notes, and pet information. You are the data controller for this information and are responsible for obtaining appropriate consent from your customers.

Service Usage Data

We collect information about how you use the Service, including job records, schedule data, route information, uploaded photos, payment records, and notification history.

Payment Information

Payment processing is handled by Stripe. We do not directly store credit card numbers or bank account details. We do store Stripe account identifiers, payment intent IDs, and transaction amounts for record-keeping purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process payments and calculate platform fees
• Send service-related notifications (SMS and email) on your behalf
• Send review request links to your customers on your behalf
• Optimize routes for your service visits
• Store and serve proof-of-work photos
• Provide customer support
• Comply with legal obligations

We do not use your data or your customers' data for advertising, marketing to third parties, or any purpose unrelated to providing the Service.

4. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy practices:

• Cloudflare:Hosting, database (D1), and file storage (R2). All data is stored on Cloudflare's infrastructure. Privacy Policy
• Clerk:User authentication and account management. Handles login via Google, Facebook, Apple, and email. Privacy Policy
• Stripe:Payment processing via Stripe Connect. Handles credit card processing, payouts, and financial compliance. Privacy Policy
• Twilio:SMS notifications sent to your customers (Pro tier feature). Phone numbers are transmitted to Twilio for message delivery. Privacy Policy
• Resend:Email notifications sent to your customers (Pro tier feature). Email addresses are transmitted to Resend for message delivery. Privacy Policy

5. Data Storage and Security

Your data is stored on Cloudflare's global network using their D1 (database) and R2 (file storage) services. We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS for all connections)
• Authentication required for all API access
• Business-level data isolation (each business can only access its own data)
• Secure credential storage for third-party API keys

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will retain your data for 30 days to allow for recovery or data export, after which it will be permanently deleted.

Payment records may be retained longer as required by financial regulations and tax reporting obligations.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Data Portability: Request your data in a machine-readable format
• Objection: Object to certain processing of your personal data

To exercise any of these rights, please contact us at the email address below. We will respond to requests within 30 days.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. Cookies and Tracking

The Service uses minimal cookies necessary for authentication and session management. We do not use advertising cookies, tracking pixels, or analytics tools that track you across other websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Oh Sit!
Email: privacy@ohsit.app