Privacy Policy
Effective 30 August 2026
Servosa is a platform for running a home-services business: homeowners post work, professionals quote and schedule it, and the platform handles messaging, invoicing and payment in between. Doing that means holding personal information about both sides. This page says exactly what we hold, why, who else sees it, how long we keep it, and how to get it back or have it erased.
Who we are
Servosa is built and operated in Nova Scotia, Canada. We are the controller of the personal information described on this page. For anything in this policy — including a request to access, correct, export or delete your information — write to jekjeksalcedo@gmail.com.
What we collect, and why
We collect what the product needs to do the job you asked it to do. Nothing here is gathered for advertising, and we do not sell personal information or share it with data brokers.
| What | Why |
|---|---|
| Account details — email address, phone number, password, name or business name, language preference | To create and secure your account, verify it, and let the other side of a job reach you. Passwords are stored only as a salted scrypt hash — never in a form we can read. |
| Job information — descriptions, photos, service addresses, postal codes, approximate coordinates, quotes, invoices and payment records, and the intake conversation: the follow-up questions our AI asks about your problem and the answers you give | To match a request to nearby professionals, schedule the work, and bill for it. Before a professional accepts a job, they see the city only — not the street address. |
| Messages — the content of messages sent between a homeowner and a professional through the platform | To deliver them, and to run automated safety and content checks for abuse, fraud and attempts to move payment off-platform. |
| Location, while a job is in progress — a professional’s position on the way to a job, and safety check-in coordinates | To show the homeowner that their professional is on the way, and to support the lone-worker safety features. Live position is visible only while a job is marked en route, and the record is deleted on arrival. The counterpart is shown an approximate distance, never raw coordinates. |
| Call and voicemail content — caller phone number, recording, transcript and summary, for professionals who turn on the AI receptionist | To answer calls a professional missed and turn them into leads. See Callers who never signed up below — this is the most sensitive category on this page. |
| Device and diagnostic data — push notification token, app version, crash reports, IP address, request logs | To deliver notifications, keep the service up, rate-limit abuse, and find out when the app breaks. Crash reports carry an error message, a stack trace and an app version — no message content, addresses or phone numbers. |
| Emergency contact — name and phone number, if you choose to add one | Optional. Used only to notify that person if you trigger the safety alert. |
Photographs
Photos you attach to a request or a job are stripped of their embedded metadata — including GPS coordinates — before they are stored. Phone cameras routinely record the exact location a photo was taken; we remove it rather than pass it on.
The intake conversation
When you describe a problem, our AI may ask a short round of follow-up questions and then write a preliminary scope of the work — what the issue is likely to be, what is still unknown, whether a site visit is probably needed, and what qualifications the job may call for. It is a starting point for the professional, not a diagnosis, and it says so wherever it appears. A professional matched to your request sees that scope.
Two things about it stay with you. If the AI’s reading is wrong you can correct it before you submit, and the professional is shown that you did. And where the AI estimates what a job might cost, that estimate is yours alone — it is never shown to a professional, so it cannot anchor what they quote you.
If the AI flags something that sounds dangerous — a gas smell, a sounding carbon monoxide alarm, a burning smell from wiring — it stops asking questions and tells you to call for help. We record that it happened.
Callers who never signed up
When a professional enables the AI receptionist, Servosa answers calls to a number we provision for them. We then hold the caller’s phone number, a recording, and a transcript of what they said — about someone who never created an account and never agreed to anything with us. We treat that as the most sensitive data on the platform. Recordings, transcripts and AI summaries are automatically erased 90 days after the call; the call record itself (who called, when, and the outcome) is kept so the professional has a call history. If you called a Servosa-powered business and want your recording removed sooner, write to us and we will remove it.
Who else sees it
The other side of a job sees what they need to do the work: a professional you have accepted sees your name, contact details and service address; a homeowner sees the professional’s business details. Beyond that, we use the following service providers. Each processes data on our instructions and for no other purpose.
| Provider | What it handles | Where |
|---|---|---|
| Railway | Application hosting, and storage for uploaded files | United States |
| Supabase | The database — everything described above lives here | United States |
| Stripe | Card payments and subscription billing. We never see or store card numbers. | United States |
| Twilio | SMS, phone numbers, calls, recordings and transcription | United States |
| Anthropic | The AI features — scoping a request from your description, drafting quotes and messages, summarising a job or a voicemail, and content safety checks | United States |
| Address autocomplete and maps | United States | |
| Expo | Push notifications and mobile app updates | United States |
| Sentry | Error and crash reporting | United States |
| Intuit (QuickBooks) | Accounting sync — only if a professional connects their own account | United States |
We also send email through an SMTP provider for account verification, password resets and notifications.
Data location. Servosa is built in Nova Scotia, but the services above run in the United States, so your information is stored and processed there. If we change providers or regions in a way that affects this, we will update this page and move the effective date.
We may also disclose information where the law requires it, or where it is necessary to investigate fraud, abuse or a threat to someone’s safety.
How long we keep it
- Voicemail recordings, transcripts and AI summaries: 90 days, then automatically erased.
- The intake conversation: 90 days, after which your description and answers are redacted from it. The preliminary scope is kept, because a professional quoted against it. An intake you started and never submitted is deleted outright.
- Live job location: deleted as soon as the job is no longer en route.
- Your account, and the jobs, quotes and messages on it: kept while your account is open, so both sides have a record of the work.
- Invoices, payments and refunds: retained after account deletion in an anonymised form (see below). Both sides of a transaction, and we, need to be able to reconstruct it years later.
Your choices, and how to use them
You can ask us for a copy of your information, ask us to correct it, or ask us to delete it. Write to jekjeksalcedo@gmail.com and we will respond within 30 days.
Deleting your account
You can delete your account from the app. Deletion is not instant erasure of everything, and the difference matters: your contact details, addresses, saved locations, login credentials, sessions, devices and any call recordings are destroyed outright, and your name is replaced everywhere it appears. What survives is the shape of the transactions — an invoice still knows it was issued, for how much, and that it was settled, with the other party shown as a deleted user. We do this because those are financial records that the other side of the job, and we, are entitled and often required to keep.
Deletion is blocked while you have a job in progress or an unsettled invoice. Finish or cancel the work first.
Messages you do not want
Reply STOP (or ARRÊT) to any text message from us to stop them; reply START to resume. Notification emails carry an unsubscribe link, and you can change what you are notified about in the app. Security mail — verification codes and password resets — is not something you can turn off while your account is open, because it is how you get back in.
How we protect it
Traffic is encrypted in transit. Passwords are stored only as salted scrypt hashes. Access tokens for connected accounts, such as QuickBooks, are encrypted at rest with AES-256-GCM. Photo metadata is stripped on upload. Access to the production database is limited to the people who operate the service.
No system is perfectly secure, and we would rather say that plainly than imply otherwise. Servosa does not hold a SOC 2, ISO 27001, HIPAA or PCI certification, and we do not claim one. If you become aware of a security problem, please write to jekjeksalcedo@gmail.com.
If a breach occurs that creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada as required by PIPEDA, without unreasonable delay.
Children
Servosa is for adults running or hiring for a home-services job. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.
Changes
If we change this policy in a way that affects what we collect, who we share it with, or how long we keep it, we will move the effective date at the top and, for a significant change, tell you in the app or by email.
Questions, requests or complaints: jekjeksalcedo@gmail.com. You also have the right to complain to the Office of the Privacy Commissioner of Canada.