Privacy Policy
This policy explains how [LEGAL ENTITY NAME] ("we") handles personal information in Snowlawna. For the data a company keeps about its own clients and staff in its workspace, that company decides why and how it is used, and we process it on its behalf. Questions: our privacy officer at [PRIVACY OFFICER EMAIL].
1. What we collect
Account information: your name, work email, company, role, sign-in times, and passkeys (we store only their public keys). Sign-in codes and links are stored only as one-way hashes.
Workspace content entered by your team: clients' names, addresses, phone numbers and emails, contracts, quotes, property measurements traced on satellite imagery, jobs and notes.
Technical information: server logs (pages and API calls, times, IP addresses used for rate limiting, which are stored only as hashes) and error reports.
2. Driver GPS and location tracking
What: while a driver is on shift in the Snowlawna driver app, the app sends their device's GPS position with its accuracy, speed, heading, battery level and time, plus their status (en route, on site, on break), completed stops with notes and photos, and arrival and departure at stops detected from the positions.
When: only between the start and end of a shift in the driver app, with the device's location permission granted. Ending the shift, or revoking the app's location permission, stops the sharing.
Who sees it: the owners, admins, managers and crew of the driver's own company, on the live map and dispatch board. It is never shared with other companies. Customers never see a driver's position; they may receive an alert that the crew is nearby.
Why: dispatching and routing, estimated arrival times, proof of service, detecting arrivals at a property, and "move your car" alerts to customers who asked for them. Retention: detailed location points are kept for [LOCATION RETENTION PERIOD, e.g. 90 days], then deleted; shift summaries and completed stops are kept with the company's records.
Drivers can ask their employer, or us, for access to and correction of their location records. Employers using Snowlawna must inform their drivers of this tracking and obtain any consent required by law.
3. How we use information
To provide and secure the service: signing people in, showing each company only its own workspace, sending the emails and texts the company asks for, routing and dispatch, preventing abuse, fixing errors and supporting customers. We do not sell personal information or use it for advertising.
4. Customer alerts
If a company turns on "move your car" alerts for one of its customers, we use that customer's phone number or email address to send alerts before a snow visit and when the crew is near. Customers can reply STOP to a text, or ask the company, to stop them.
5. Service providers and transfers
We use service providers to run Snowlawna: Supabase (database and storage), Vercel (hosting), Google Maps Platform (routing), Twilio (text messages), Resend (email) and Sentry (error monitoring, only when enabled). Some of them process data outside Canada, including in the United States, where it may be accessible under local law. Each is bound by contract to protect it.
7. Retention and security
We keep account and workspace data while the workspace is active, and delete it within [DELETION PERIOD] after a company closes its workspace, unless the law requires longer. Data is encrypted in transit, access is limited by role, and each company's data is separated from every other company's in the database.
8. Your rights
You may ask to access or correct your personal information, withdraw consent, or have it deleted, by writing to [PRIVACY OFFICER EMAIL]. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
Effective date: [EFFECTIVE DATE].