Privacy Policy

1. Who we are

ProxVan (“ProxVan,” “we,” “us”) provides software that helps home service professionals (electricians, plumbers, HVAC, roofers, and other trades — each a “Contractor”) market their business, manage customers, and publish content. This policy covers both the Contractors who use ProxVan and the end customers whose information a Contractor processes through the Services.

2. Information we collect

We collect the following categories of information:

• Account & business information. Name, email, password, business name, trade type, service areas, phone number, hours, logo, and brand settings you provide.
• Customer & lead data. Information a Contractor uploads or generates about their own customers and leads — contact details, job details, estimates, invoices, and related records. The Contractor is the owner of this data; ProxVan processes it on their behalf.
• Photos & media. Job photos, before/after images, and other media you upload for use on your website and content.
• Payment information. Subscription and billing details processed through our payment provider, Stripe. ProxVan does not store full card numbers; Stripe handles card data directly.
• Usage & event data. Product interactions, content performance, page views, clicks, leads generated, and similar analytics and event signals about how the Services are used and what outcomes content produces.
• Connected platform tokens.When you connect a third-party account (for example, Google Business Profile), we store the OAuth access and refresh tokens needed to operate that connection. Tokens are encrypted at rest (see “Connected accounts & OAuth” below) and are never exposed to your browser or to other Contractors.

3. How we use information

We use the information we collect to:

• Provide, operate, and secure the Services;
• Generate websites, content, and marketing material on your behalf;
• Measure results and report on content, lead, and campaign performance;
• Improve and develop our products, models, and features;
• Communicate with you about your account, billing, and support; and
• Comply with legal obligations and enforce our agreements.

4. Third-party service providers

We share information with vetted service providers strictly as needed to run the Services. Each processes data under its own terms and security commitments:

• Supabase — database, authentication, and storage;
• Vercel — application hosting and delivery;
• Cloudinary — image storage and optimization;
• Stripe — subscription billing and payments;
• Anthropic — AI content generation;
• Google (Business Profile) — connected business listing and reviews;
• Meta — connected Facebook/Instagram business surfaces;
• TikTok — connected business account surfaces;
• Resend — transactional and notification email.

We do not sell your personal information. We share data with these providers only to deliver the Services, and we require them to protect it.

5. Connected accounts & OAuth

You may connect third-party platforms (such as Google Business Profile, and later Meta and TikTok) so ProxVan can help you publish and measure content. When you connect an account:

• Scopes. We request only the permissions needed for the connected feature — for example, the Google Business Profile management scope to read your listing and post on your behalf after you approve. We do not request broader access than necessary.
• What we do with the connection. With your authorization, ProxVan may publish approved content to the connected account and read performance metrics (such as views, engagement, and review activity) to measure results. ProxVan does not auto-post without an explicit, approval-based action by you.
• Token security. Access and refresh tokens are encrypted at rest using authenticated encryption (AES-256-GCM) and are accessible only to server-side processes. They are never sent to the browser.
• Revoking access. You can disconnect any connected account at any time from your dashboard, which clears the stored tokens. You may also revoke access directly from the third-party platform’s security settings.

6. Aggregated & de-identified data

ProxVan may use anonymized and de-identified data — data that does not identify you, your business, or any individual — to improve our Services and to generate aggregate insights and benchmarks. This allows us to understand what marketing actions drive real-world outcomes across the home-services industry and to make the product smarter for everyone. Aggregated and de-identified data is not subject to the restrictions in this policy that apply to personal information, and we may retain and use it without time limit.

7. Data retention

We retain personal and business information for as long as your account is active and as needed to provide the Services, then for a reasonable period to comply with legal, tax, and accounting obligations or to resolve disputes. When data is no longer needed, we delete or anonymize it. Aggregated and de-identified data may be retained indefinitely as described above.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. Contractors can access and delete most data directly from the dashboard. For end-customer data held on a Contractor’s behalf, please contact the relevant Contractor, who is the controller of that data; we will assist them in responding.

9. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, encryption at rest for sensitive credentials, access controls, and row-level security that isolates each business’s data. No system is perfectly secure, but we work to protect your data and to notify you of material incidents as required by law.

10. Children’s privacy

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you through the Services or by email. Your continued use of the Services after an update means you accept the revised policy.

12. Governing law

This Privacy Policy is governed by the laws of the State of New Jersey, USA, without regard to its conflict-of-laws rules.

13. Contact us

Questions about this policy or your data? Contact us at privacy@proxvan.com.