Privacy Policy

This Privacy Policy explains how True Blue Service (“True Blue Service,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our field service management software and related websites, mobile web experience, and APIs (collectively, the “Service”).

True Blue Service is a business-to-business tool used by service companies (for example, plumbing, HVAC, electrical, and landscaping businesses) to manage their customers, jobs, estimates, invoices, and payments. The Service is not directed to consumers or to children under 13.

1. Information We Collect

Account data. Name, email, phone, password hash, role (admin / dispatcher / technician), profile image, and login/authentication events.

Company data. Business name, address, business email, logo, tax settings, and subscription status.

Operational data you enter. Customers (name, phone, email, address), jobs, schedules, pricebook items, estimates, invoices, payments, notes, and attachments you upload.

SMS consent data. If SMS messaging is enabled, we may store customer mobile phone numbers, SMS consent timestamps, consent source, and opt-out status so that service-related text messages are sent only where consent has been recorded and opt-outs can be honored.

Integration data. When you connect a third-party service (for example, QuickBooks Online), we receive and process data from that service as described in Section 5 below.

Technical data. IP address, browser and device information, pages viewed, timestamps, and similar diagnostic information used for security, fraud prevention, and product improvement.

Cookies. We use strictly necessary cookies to keep you signed in and to protect your session. See Section 9 for details.

2. How We Use Information

• Provide, operate, and maintain the Service.
• Authenticate users, protect accounts, and prevent abuse.
• Process subscription payments and send billing receipts.
• Send transactional messages you expect (verification emails, invoice notifications, password resets, invitation emails, transactional SMS messages where enabled, and similar).
• Sync data with third-party services you connect, such as QuickBooks Online.
• Respond to support requests and diagnose issues.
• Improve the Service — measure feature usage, fix bugs, and monitor reliability.
• Comply with legal obligations.

Optional catalog data sharing. Company administrators may opt in to an optional program that contributes sanitized, generic catalog signals — such as generic item names, descriptions, section/category, and keywords — to improve product quality and AI-assisted suggestions. This program is off by default. Signals are used only in aggregate across multiple businesses and never include pricing, costs, margins, customer or job data, addresses, or your company’s identity. You can turn it on or off at any time in Account › Company profile. See our Catalog Data Sharing notice for full details.

We do not sell your personal information, and we do not use Service data (including data synced from QuickBooks) for third-party advertising.

We do not sell, rent, or share mobile phone numbers or SMS consent records for third-party marketing or promotional purposes. SMS consent records are used to provide requested messaging features, honor opt-outs, maintain audit records, and comply with messaging and telecommunications rules.

3. Roles: Controller and Processor

For data about a company’s own customers, jobs, and invoices, the company using True Blue Service is the data controller and True Blue Service acts as the processor / service provider on that company’s behalf. If you are an end customer of one of our users (for example, you received a quote or invoice from a plumber who uses True Blue Service), please contact that business directly regarding your personal information. We will assist the business in responding to valid requests.

For account and billing data of our direct customers (the companies who pay for the Service), True Blue Service is the controller.

4. Sub-processors and Service Providers

We use the following sub-processors to run the Service. Each is bound by contract to protect information and to use it only to provide services to us.

• Amazon Web Services (AWS). Application and database hosting, storage, logging. Data is stored in United States (AWS us-west-2, Oregon).
• Stripe, Inc. Subscription billing, checkout, and payment processing. Stripe’s own privacy notice governs its handling of card data.
• Twilio SendGrid. Transactional email delivery (verification codes, invoice notifications, password resets, invitations).
• Twilio, Inc. When SMS messaging features are enabled, transactional SMS delivery, opt-out handling, and related messaging compliance services.
• Intuit, Inc. When a company connects QuickBooks Online, we exchange data with Intuit under the QuickBooks Online Platform Services Agreement. See Section 5.

We will update this list before adding materially new sub-processors that handle customer data.

5. QuickBooks Online Integration

If you choose to connect your QuickBooks Online company, True Blue Service requests OAuth access scoped to the accounting data needed to sync customers, items, invoices, estimates, and payments between True Blue Service and QuickBooks Online.

• We use QuickBooks data only to provide the sync feature you enabled — we do not sell, rent, or share QuickBooks data, and we do not use it for advertising, training third-party machine-learning models, or any unrelated purpose.
• Access tokens are stored encrypted at rest. Token refresh and revocation are handled server-side.
• You can disconnect the integration at any time from Account › Integrations. On disconnect:
  • OAuth access and refresh tokens are revoked with Intuit and deleted from our database.
  • Sync stops immediately. No further data is sent to or pulled from your QuickBooks Online company.
  • QuickBooks reference IDs (for example, the QuickBooks Online customer or invoice ID stored alongside your local records) are retained on your own records for audit purposes. This preserves your sync history and makes reconnecting the same QuickBooks company safe and idempotent.
  • Sync logs are retained under our standard log retention schedule described in Section 7.
  • If you need full deletion of all QuickBooks-sourced data and reference IDs after disconnect, contact us using the details in Section 13 and we will complete the deletion within 30 days.
• We receive Intuit webhook events only for entity types we sync, and we verify each webhook’s HMAC-SHA256 signature before acting on it.

6. Security

• Transport: TLS 1.2+ for all connections between browsers, mobile devices, and our servers, and between our servers and sub-processors.
• At rest: storage and database volumes are encrypted using AWS-managed keys; OAuth tokens and other secrets are stored encrypted.
• Access control: role-based access inside the Service; administrative access to production systems is limited to authorized personnel, logged, and reviewed.
• Backups: automated database backups with tested restore procedures.
• Monitoring: application and infrastructure logs, CloudWatch alarms on error rates and health signals.

No system is perfectly secure. If we become aware of a security incident affecting your information, we will notify affected customers without undue delay and within any timeframe required by applicable law.

7. Data Retention

• Active accounts. We retain your data as long as your account is active.
• Closed accounts. On account closure, we retain core account and operational data for up to 90 days to allow account recovery and to meet our record-keeping obligations, after which it is deleted or anonymized on a rolling basis.
• Billing records. Invoices and payment records are retained for at least seven (7) years to meet tax and accounting obligations.
• Security and audit logs. Retained for up to 13 months for security investigations.
• Legal holds. We may retain information longer if required to comply with legal obligations, resolve disputes, or enforce agreements.

8. Your Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to legal and contractual retention requirements.
• Receive a copy of your data in a portable format.
• Object to or restrict certain processing, and to withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority in your jurisdiction.

We do not sell personal information and do not “share” it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA / CPRA).

To exercise any of these rights, email us at support@trueblueservice.app. If you are an end customer of a business that uses True Blue Service, please first contact that business, since they control the data collected about you.

9. Cookies

We use cookies that are strictly necessary for the Service to function. These cookies are required to use the Service and cannot be disabled through in-product settings.

We do not use cookies for advertising or cross-site tracking. If we introduce analytics or other non-essential cookies in the future, we will update this policy and, where required, request your consent first.

10. International Transfers

The Service is hosted in United States (AWS us-west-2, Oregon). If you access the Service from outside the United States, your information will be transferred to, processed, and stored in the United States. Where required by law, we rely on appropriate safeguards for cross-border transfers.

11. Children

The Service is intended for use by businesses and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, take reasonable steps to notify you (for example, an in-app notice or an email to account administrators).

13. Contact

For privacy questions, data requests, or product support, email us at support@trueblueservice.app.

True Blue Service
State of formation: California