Privacy Policy

Sqop is software that businesses use to run their work. Who is responsible for your information depends on how it reached us:

• Information a contractor puts into Sqop about its own customers and jobs (for example, a homeowner's name, address, insurance claim, photos and contract) belongs to that contractor. The contractor decides what is collected and how it is used, and Sqop processes it on the contractor's behalf as its service provider. If you are a homeowner, the contractor you are working with is your first point of contact for questions or requests about that information, and its own privacy practices apply. We will help the contractor answer you.
• Information about Sqop account holders and visitors — contractor staff who log in, agents who use the Referral Network, people who contact us, and visitors to our public pages — is Sqop's responsibility, and this policy describes how we handle it.
• Information an agent enters to make a referral (a homeowner's contact details and a short description of the work) is used only to deliver that referral, as described in section 6.

Account and contact information. Name, email address, phone number, job title, company or office name, business address, logo and profile photo, and the role your company assigns you. Sign-in records, including the time and IP address of sign-in link requests. A record of the agreements you accept in Sqop (which document, which version, when, and your IP address), and, for an agent, that a homeowner asked you to share their contact details with the contractors on a referral.

Job, property and claim information that contractors enter or upload: homeowner and co-owner names and contact details, property and mailing addresses, map coordinates for the address, insurance carrier, claim number, adjuster contact details, mortgage company, policy and estimate details, scope line items, schedules, notes and job status.

Photos, files and scans. Job photos and videos, documents, contracts, warranties and 3D scans. Photos can carry the information your camera stores in them, including the time, device and the GPS location where the photo was taken; we keep that information in the stored original because it documents where and when work was done. A copy of a photo that Sqop shows through a share link or the homeowner portal, puts in a photo-report PDF, includes in a job export download, or sends to an AI provider is made without that information (a photo in a format we cannot clean is listed in the export's report instead). Videos, other documents, and files attached to messages or emails are sent as they were stored. A photo in a format we cannot clean (such as some iPhone HEIC photos) is shown on a share link or the homeowner portal only as a cleaned preview where one exists, and otherwise a note says it cannot be shown there.

Signatures. When someone signs a document through Sqop, we first show them the full electronic-records disclosure, and then we record the typed name, the drawn signature, the time, the IP address and browser, the signer's agreement to use electronic records and signatures and the version of the disclosure it was given under, and a fingerprint of the exact document signed, so the signed copy can be proven later.

Payments and billing. Contractors' subscription billing details and payments homeowners make through a contractor's payment link are handled by our payment processor, Stripe. Sqop does not receive or store full card numbers. We receive the payment amount, status, and the payer's name and email.

Bank information (only if a contractor connects a bank account). If a contractor chooses to connect a business bank account to keep its books, the connection is made through Plaid, and we receive the account names and transactions (amount, date, description and merchant). We use this to show those transactions in that contractor's own books and, when a user asks Q about the books, to answer the question (see section 5).

Communications. Messages and attachments sent in Sqop, including between a contractor and a homeowner, between a contractor and an agent, and with Sqop support; voice memos; in-app calls; and, where a company turns them on, call recordings and transcripts. Q, our AI assistant, keeps the conversations a user has with it. If you turn on notifications, we store your browser's push subscription so we can send them through your browser's push service; you can turn them off in your browser or device settings.

Location. The addresses entered for jobs and offices, GPS information stored in photos, and — only if you allow it in your browser — your current location on the job map.

Sensitive information. Photo GPS information and your current location on the job map can be precise geolocation, which some state laws treat as sensitive. We use it only to show where work was done and, with your permission, where you are on the job map. We do not sell it, share it for advertising, or use it to infer anything else about a person. We do not collect health, biometric or similar sensitive information, we do not use facial recognition on photos, and we do not create voiceprints from voice memos or calls.

Usage and device information. Which pages are opened and how long they stay visible, which areas of the app staff use, error reports, browser type, device type, IP address, and a random identifier (stored in your browser when you are signed in; for visitors to public pages and shared links, kept only while the page is open — see section 7). Pages a link opens, such as a portal, payment or referral page, also record that the link was opened.

Vendor and subcontractor records. Contractors may store their own vendors' and subcontractors' contact details, tax forms (such as W-9s and insurance certificates) and tax identification numbers for paying them and filing 1099s.

• From you, when you create an account, fill in a form, upload a file, sign, pay or send a message.
• From a contractor using Sqop, about its own customers, jobs, vendors and the agents it works with.
• From an agent, when the agent refers a homeowner.
• From documents users upload, such as insurance paperwork that our AI features read at the user's request.
• From services a user chooses to connect, such as a bank (through Plaid) or a building-supply account.
• Automatically, from your browser or device when you use Sqop.

• To provide the service: running jobs, sharing what a contractor chooses to share with its homeowner, sending referrals, processing payments, keeping books, and delivering messages and email.
• To provide the AI features described in section 5.
• To secure the service: signing people in, preventing fraud and abuse, and investigating problems.
• To support users, including when a user asks us for help with their account.
• To improve the service, including understanding which features are used and fixing errors.
• To send service email, such as sign-in links, invitations, notifications and billing notices.
• To meet legal obligations and to establish or defend legal claims.

We do not use personal information for advertising, and we do not make decisions about anyone that have a legal or similarly significant effect based solely on automated processing.

Sqop includes Q, an AI assistant, and AI features that read uploaded insurance and supplier documents, help draft estimates, and scan and tag photos. To do this, the content involved — for example a document, a photo, a message, or the job details Q needs to answer a question — is sent to the outside AI providers we use. Q also reads messages on a job, including messages from the homeowner, to keep the job's facts up to date for the contractor.

Our AI providers process this content only to return results to us, and their business terms do not allow them to train their models on it. We do not give anyone customer content to train AI models. The one way customer activity improves Sqop's own AI features is described next.

Some AI features get better from what users do. When a user corrects an AI photo tag, a short scrubbed description of that correction — with email addresses, phone numbers and any run of three or more digits removed — may be used to improve the feature for all Sqop customers. Sqop may also use tagged job photos, their tags and corrections internally to test and improve its own photo features. Photos are never shown to another customer, and this data is not given to AI providers or anyone else to train their models. A contractor's administrator can turn this off for the company in Admin → Photo settings.

AI output can be wrong. Sqop shows AI suggestions to a person to review, and the contractor decides what to use or send.

People you work with in Sqop, as the product is designed and as users direct.

• A contractor's staff see their company's information according to the roles the company assigns.
• A homeowner sees only what the contractor chooses to share in the Homeowner Portal, through a private link that the contractor can protect with a passcode.
• In the Referral Network, the homeowner sees the referring agent's name, contact details and office, and the businesses the agent listed. Businesses on the list may receive the homeowner's first name, city and the type of work, and receive contact details only if the agent chooses to share them. The business the homeowner chooses receives the referral and the homeowner's contact details, and the agent can follow the referral's progress. An agent sees the stage of a job, not its prices or the contractor's internal records. An office's administrator can review the office's referrals; each such review records who looked and why.
• Files and messages are shared only with the people the sender chooses.

Service providers that run parts of Sqop for us, under contracts that limit their use of the information to providing their service. They fall into these categories: hosting, database, sign-in, real-time messaging and file storage; payment processing; bank-account connection; AI model providers; email delivery; error monitoring; maps and address lookup; off-site backup storage; push notifications; and supplier connections a contractor chooses to turn on. Each receives only the categories of information described in section 2 that its service needs, and not for its own purposes. Voice-memo and call transcription and the relay for in-app calls run on servers we operate in the United States.

Payments are processed by Stripe. When you provide personal data in connection with a payment, a subscription, or a Stripe connected account on Sqop, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy.

Bank connections are made through Plaid. Plaid's handling of the information you give it is described in Plaid's End User Privacy Policy. We do not sell or rent bank information or use it for any purpose other than the connecting contractor's own books.

Sqop staff. A small number of authorized Sqop staff can access account information to provide support, keep the service secure, handle billing and meet legal obligations. Signing in as a customer's user to help them requires a written reason that is recorded.

For legal reasons, when we believe in good faith that the law requires it, or to protect the rights, property or safety of Sqop, our users or others.

In a business transfer, if Sqop is involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for targeted or cross-context behavioral advertising. We do not sell sensitive personal information.

Sqop uses cookies and browser storage to keep you signed in, remember that you entered a passcode for a shared link, keep display preferences and unsent drafts, and run the app. When you are signed in we also store a randomly generated identifier in your browser, and use a per-tab identifier, so our own systems can tell — without your name — how long a page was open and whether the same browser has returned. Visitors to our public pages and to links a contractor sends are not given a stored identifier: the one we use there is held only in the page's memory and is gone when the page is closed or reloaded, so a later visit cannot be matched to an earlier one. We do not use advertising cookies or third-party analytics, and we do not track you across other websites.

Our error-monitoring service may record a small sample of sessions in the app, and the session where an error happens, to help us fix problems. These recordings hide the text on screen and block images and video. Sessions are not recorded on pages opened from a private link (such as the homeowner portal, photo links, and signing, payment and referral pages), and the private part of those links is removed from error reports.

Screens that show a map or suggest addresses load map tiles and address suggestions from mapping services, which receive your IP address and browser information, and the area or address being looked up, so they can deliver them. Fonts and page scripts are served from Sqop's own site, not from outside content-delivery services. In-app calls use public connection (STUN) servers to set up the call; those servers receive your IP address and browser information so they can connect the call.

Because we do not track you across websites or allow others to do so through Sqop, we do not change how Sqop works in response to a browser's "Do Not Track" signal. We do not sell or share personal information for advertising, so there is nothing to opt out of; if that ever changes, we will honor Global Privacy Control signals as an opt-out.

We send email needed to run the service, such as sign-in links, invitations, referrals, notifications and billing notices. You cannot opt out of these while you use Sqop, but they are not advertising.

Contractors can use Sqop to send their own marketing email, which is sent on the contractor's behalf and under its name. Every marketing email sent through Sqop includes an unsubscribe link and the sending business's postal address; opt-outs are honored automatically. To stop marketing email from every business on Sqop, use the unsubscribe link or email us at legal@sq-op.com, and we will stop within 10 business days. If you reply to the sender, that stops that sender's marketing email.

Sqop does not send text messages.

We keep personal information for as long as an account is active and as long as needed to provide the service, then as long as needed for the purposes below.

• When something is deleted in Sqop, it is removed from everyday use and kept in a restricted archive rather than erased at once. This protects customers from accidental loss and keeps records available for audits, disputes and legal requirements.
• After a customer's subscription ends, the customer can ask for an export of its data for 90 days. After that, we keep the data only as long as reasonably needed for audit, dispute-resolution, legal, backup and security purposes, and no longer than 24 months after the export period (financial and tax records up to seven years), and then delete or de-identify it. Homeowners keep access to records already shared with them in the Homeowner Portal for at least 12 months.
• Call recordings are kept in use for the period the contractor's company sets, then removed from use and moved to the restricted archive.
• Financial, billing and tax records are kept at least as long as the law requires, generally up to seven years.
• We keep email addresses that have opted out of marketing email so we can keep honoring the opt-out.
• We keep off-site backup copies of customer files and periodic copies of the database for disaster recovery. Backups are not currently erased on a fixed schedule, so information that is deleted can remain in a backup. Backups are used only to recover from a failure.

Depending on where you live, you may have the right to:

• confirm whether we process your personal information;
• know what personal information we hold about you and get a copy of it;
• correct information that is wrong;
• have your personal information deleted;
• opt out of the sale of personal information, targeted advertising or certain profiling (we do none of these); and
• appeal our decision on your request.

You can make a request by email to legal@sq-op.com or by mail to the address in section 15. You can also update much of your own account information in Sqop. We will confirm your identity before acting on a request, and you may use an authorized agent where the law allows. Requests are free; if someone makes more than two in a year, we may charge a reasonable fee where the law allows. We will not treat you differently for using these rights.

If your request is about information a contractor holds about you as its customer, we will pass it to that contractor, who decides it, and we will help the contractor carry it out. If an agent referred you through the Referral Network, you can ask us directly to confirm, correct or delete the information the agent entered about you, and we will also tell the agent's office.

We respond within 45 days. If we need more time, we will tell you why within those 45 days, and we may take up to 45 more. When we act on a deletion request, we remove the information from use and then delete it or remove the details that identify you, except for copies in backups, which are handled as described in section 9. We may keep information we are required to keep by law, need to complete a transaction, need to establish or defend legal claims, or need to prevent fraud and keep the service secure — for example, financial records, which we keep with your name and contact details removed where the law allows.

If we decline your request, we will explain why. You can appeal by replying to our answer or emailing legal@sq-op.com with the word "Appeal." We will answer an appeal in writing within 60 days, with a written explanation of our decision. If we deny the appeal and you live in Texas, you may contact the Texas Attorney General.

We protect personal information with safeguards that include: keeping each company's data separate at the database level; encryption of data in transit; encryption at rest by our hosting providers; tax identification numbers stored in payee records kept in an encrypted vault, shown only as their last four digits, and readable in full only by a signed-in person with the Money permission, with each full read recorded; role-based permissions; private storage for customer files, opened only through short-lived links; private links and optional passcodes for anything shared outside a company; and records of sensitive staff actions.

No system is perfectly secure. If a breach of security affects your personal information, we will notify the affected customers and, where the law requires, the affected people and authorities, within the time the law requires.

Sqop is a business service and is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.

Sqop is offered in the United States. Personal information is stored and processed in the United States.

When we change this policy, we post the new version here with a new effective date. If a change is material, we will tell account holders by email or in the app at least 30 days before it takes effect, or sooner where the law, security or a provider requires it, with an explanation.

SQOP LLC, 1400 Preston Rd, Ste 400, Plano, TX 75093. Email: legal@sq-op.com. See also our Contact page and our Terms of Service.