Privacy Policy

Checkmate (“Checkmate”, “we”) is a CRM for home-service and outdoor-living companies, available at crm.checkmatescale.com. This policy explains what we collect, how we use it, and the choices you have. Each business that uses Checkmate (a “customer company”) controls the data in its own workspace.

Information we process

• Account data for staff users: name, email, phone, role.
• Customer-company data entered or received in the CRM: client names, phone numbers, email and street addresses, estimates, invoices, work orders, photos, notes and payments.
• Communications: calls and texts on the company’s Checkmate phone lines (including recordings and transcripts where recording is announced), emails sent from Checkmate, and email threads synced from a connected Gmail account (see below).
• Technical data needed to run the service, such as sign-in sessions and logs.

How we use information

Only to provide the CRM to the customer company: showing client timelines, sending the estimates, invoices and follow-ups that a staff member approves, transcribing and summarizing calls, and securing the service. We do not sell personal information and do not use it for advertising.

Google user data (Gmail)

A staff user may choose to connect their Google account with “Sign in with Google”. Checkmate then requests these permissions:

• gmail.send: to send emails the user writes or approves in Checkmate (for example an estimate with its PDF) from the user’s own address.
• gmail.readonly: to find messages exchanged with the company’s existing clients (matched by the client’s email address) and show them on that client’s timeline. Messages that do not involve a known client are not stored.
• openid, email, profile: to identify which Google account is connected.

OAuth tokens are encrypted at rest, are never sent to the browser, and are only used by Checkmate’s servers for the purposes above. Synced email content is visible only to staff of the same customer company. We do not use Google user data for advertising, do not sell it, do not transfer it to third parties except as needed to provide the service or comply with law, and do not use it to train generalized AI or machine-learning models. Humans do not read it except with the user’s permission, for security or abuse investigations, or as required by law.

Checkmate’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time in Settings > Integrations, which revokes Checkmate’s access at Google and deletes the stored tokens, or at myaccount.google.com/permissions. Emails already synced to a client timeline stay with the customer company’s records until they delete them or ask us to.

Service providers

We use infrastructure and communications providers to run Checkmate, including Supabase (database and storage), Netlify (hosting), Twilio and Bland (phone and text), Resend (email delivery when Gmail is not connected), Google (Gmail, when connected) and OpenAI (transcription and drafting assistance on company data, not Google user data used for model training). They process data only on our instructions.

Mobile app permissions

The mobile app may ask for notifications (incoming calls), the microphone (voice notes and calls) and the camera or photo library (job photos). Each is optional.

Retention and deletion

Data is kept while the customer company uses Checkmate. A customer company can delete records at any time, and we delete a workspace’s data on request after the account closes.

Security

Access is limited to authorized staff of each customer company through row-level security. Data is encrypted in transit, and secrets and OAuth tokens are encrypted at rest.

Master Touch Pools SMS Program

Master Touch Outdoor Living (“Master Touch Pools”) uses Checkmate to send text messages to its customers about appointments, estimates, invoices and service updates.

• What we collect: your name, mobile phone number, service address, the messages you send and receive, and the date, time and method of your opt-in consent.
• How we use it: only to send you the service notifications you requested, respond to your messages, and keep records of consent and opt-outs.

How you opt in: Customers opt in one of three ways: (a) checking an unchecked consent box on the Master Touch Pools website quote form that says: “I agree to receive text messages from Master Touch Pools about your service request. Msg & data rates may apply. Msg frequency varies. Reply STOP to opt out, HELP for help.”; (b) signing an estimate or contract that contains the same consent language; or (c) texting the business first. Consent is stored with a timestamp in the CRM. Consent is not a condition of purchase.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information may be shared only with the service providers that deliver messages for us (such as our telecom carrier and messaging platform), solely to provide the service.

Reply STOP to any message to opt out, or HELP for help. Contact Master Touch Outdoor Living at info@mastertouchpools.com or (561) 674-6909. See the SMS Terms.

Contact

Questions or requests: info@mastertouchpools.com.