Privacy Policy

This explains how The Organizer Chicks, LLC. ("RoosterDispatch", "we") handles personal information.

Two different kinds of information

The distinction runs through everything below, so it comes first.

Information about you, our customer. You are a business that subscribes to our software. We decide how this information is used, and this policy governs it.

Information you put into your instance about your own clients and staff. Their names, addresses, phone numbers, photographs of their homes, signed agreements. That is your business data, not data we use for our own purposes. We hold it on your behalf. We store and process this information to provide the service to you. You control how you collect and use this information and are responsible for complying with the privacy laws that apply to your business. Your own privacy policy governs how you collect and use it, and the people it describes should direct their questions to you.

What we collect about you

Account details: your company name, your chosen web address, contact name, email address, phone number and timezone.
Billing information, handled by Stripe. We receive confirmation of payment, the subscription status, and the last four digits and brand of the card. We never receive or store your full card number.
Technical logs: IP address, browser type, pages requested and error details, kept so the service can be operated and problems diagnosed.
Correspondence: what you send us when you ask for help.

What we do with it

Provide the service, take payment, respond to support requests, send you service messages about your account, and keep the system secure and working.

We do not sell personal information. We do not share it with advertisers, we do not use it to train machine-learning models, and we do not market to your clients.

How your instance is kept separate

Each subscription runs as its own application instance with its own database, not a shared database with a column identifying the customer. Uploaded files are likewise stored in a location mounted only into your own instance. The practical effect is that one customer's instance cannot reach another's records.

Other protections in place:

Traffic to and from the application is encrypted with HTTPS, and connections to the database are encrypted in transit.
Passwords are stored as salted hashes (bcrypt), never in readable form.
Any Stripe or Twilio credentials you enter are encrypted with a key unique to your instance, so they are not readable by us in the ordinary course of operating the service.
Databases are backed up daily with point-in-time restore unless 2(two) year suspension limit reached.

No system is perfectly secure, and we do not claim otherwise. If we discover a security incident that materially affects your information, we will notify you as required by applicable law and provide the information we are able to provide about the incident.

Who else is involved

We use a small number of providers to run the service. They act on our instructions and are not permitted to use the information for their own purposes:

Microsoft Azure, for hosting, databases and file storage (United States).
Stripe, for subscription payments from you to us and payment requests from you to your customers.
Twilio, for sending messages on your behalf to your customers.

If you connect your own Stripe or Twilio account to your instance, those are your accounts under your own agreements with those companies, and their privacy practices apply to what you do with them. We are not responsible for how those providers process information under their own services or for decisions they make regarding your accounts.

We may also disclose information if the law requires it, or to establish or defend legal claims. If a request is made for your data, we will tell you unless we are legally prohibited from doing so.

How long we keep it

While your subscription is active, we keep your information for as long as you use the service. After it ends:

After 1 (one) year without an active subscription, uploaded files (photographs and signed documents) are deleted.
After 2 (two) years, the database is deleted.

Both are permanent. You can ask for an export of your data at any point before then. We keep billing records for as long as tax and accounting rules require, separately from your instance.

Your choices

You can access and correct most information about you from inside your instance, ask us for a copy of your data, ask us to delete your instance, or cancel at any time. Depending on where you live, you may have additional rights over personal information, including access, correction, deletion, and objecting to certain uses. Write to us and we will help.

For information about your clients held inside your instance, you are the one who decides: you can edit or delete it directly, and requests from those individuals should go to you rather than to us.

Cookies

We use a single session cookie to keep you signed in. It is marked Secure and HttpOnly. We do not use advertising or tracking cookies, and there are no third-party analytics scripts on the application.

Children

The service is for businesses and is not directed at children under 13 (thirteen). We do not knowingly collect their information.

Changes

If we change this policy in a way that materially affects how your information is handled, we will email the address on your account. The date at the top always shows the current version.

Contact

The Organizer Chicks, LLC.
Bella Vista, AR
company@example.com