Privacy Policy

What we collect

When an Outdoor Living LLC admin invites you, and after you sign in, we store:

• Profile — your full name, email address, phone number, and mailing address (street, city, state, ZIP).
• Equipment records — for each pool, hot tub, or spa we maintain at your property: equipment type, automation system, sanitizer system, filter type, gallons, and installation date.
• Maintenance schedule + completion records — what's due when, what's been done, when the next interval lands.
• Notification preferences — your opt-in state for email reminders and your push-notification subscriptions (one per browser/device you opt in from).
• Push subscription metadata — for each device you enable push on: an endpoint URL provided by your browser's push service, two encryption keys (p256dh, auth) that let us encrypt push payloads only your browser can read, and the user-agent string at subscription time.
• Authentication state — a session cookie (set by Supabase, our auth provider) that keeps you signed in.

We do not collect: payment information (this app does not charge customers), location/GPS data, social-media identifiers, or marketing-tracking cookies.

Why we collect it

• To deliver scheduled maintenance reminders by email and (if you opt in) browser push notification.
• To give you a self-service hub for the equipment we service at your property.
• To support troubleshooting when you contact us about a service issue.
• To keep your account secure and authenticate you across sessions.

Who we share it with

We use the following third-party services as data processors — they store and process your data on our behalf, under contract, and are not permitted to use it for their own purposes:

• Supabase (database + authentication) — stores everything described in "What we collect" above. Operated by Supabase, Inc.; data resides in their US-region infrastructure.
• Cloudflare Pages (hosting + CDN) — serves the application code; does not store your customer data.
• Resend (transactional email) — used to send maintenance reminders and sign-in links once configured. Your email address and the body of each message we send you pass through Resend.
• Browser push services (Firebase Cloud Messaging from Google, Mozilla AutoPush, Apple Push Notification Service) — when you opt in to push notifications, your browser registers with one of these services. We send encrypted payloads to that service's URL; the service relays them to your device. The service operator can see metadata (timing, your endpoint URL) but cannot decrypt the payload itself.

We do not sell your data to anyone. We do not share it with marketers, ad networks, or analytics providers.

We will share your data with law enforcement only if compelled by a valid court order or subpoena, and we will give you notice unless legally prohibited from doing so.

How long we keep it

While your account is active, indefinitely. When you close your account or your service relationship with Outdoor Living LLC ends, your customer record and all associated equipment, schedule, push subscription, and reminder log entries are deleted within 30 days. Your authentication record may be preserved for a longer period for security audit purposes (logged sign-in attempts, etc.) but will not be linked to any customer-identifying information after deletion.

Your rights

• Access — request a copy of the data we hold about you. Email the address at the bottom of this policy.
• Correction — update your profile (name, phone, email opt-in) at any time from the Profile page in the app. For other corrections, contact us.
• Deletion — request that we delete your data. We will execute the deletion within 30 days unless legally required to retain something specific (we will tell you what and why).
• Email opt-out — toggle email reminders off in your Profile page; we will stop sending reminder emails immediately.
• Push opt-out — toggle browser push notifications off in your Profile page or in your browser's site settings; we will stop sending pushes immediately and the subscription record is deleted from our database.

Cookies

We use one cookie type: an authentication session cookie (set by Supabase). It is required for sign-in to work. We do not set analytics, advertising, or social-tracking cookies.

Children

This service is for active customers of Outdoor Living LLC and is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If we change this policy in a material way, we will email each active customer and post a notice in the app dashboard at least 30 days before the change takes effect.

Governing law

This policy is governed by the laws of the State of Nebraska, United States.

Contact

For privacy questions, deletion requests, or to exercise any of the rights above, email us at service@olpshub.com.