Privacy Policy

This policy explains what information Bower Family Electric, LLC (“we”, “us”) collects through Peltuvo — our website, the app, and the estimate, invoice, booking and project pages contractors send to their customers — and how we use, share and protect it. It doesn’t cover the websites of Stripe, Creem, Google or other companies you may visit through the Service; their own policies apply there.

1. Our two roles

• Account information — about the contractors and team members who use Peltuvo: names, emails, logins, the business profile and billing status. We decide how this is used and are responsible for it.
• Business data — what a contractor keeps in Peltuvo about their work and customers: customer names, contact details and addresses, jobs, estimates, invoices, payments, photos and notes. It belongs to the contractor. We process it as their service provider: to provide the Service, and in de-identified form to improve it (see section 3). The contractor is responsible for telling their customers how it is used.

2. What we collect

Information you give us

• Account details: name, email, password (stored only as a secure hash), and two-step login settings.
• Business profile: business name, address, phone, logo, colors, trade, service area, hours, deposit, tax and payment settings.
• Team members you invite: name, email and role.
• Messages you send us, such as support emails and in-app feedback, along with the page you were on.
• Pricing-coach household numbers. These are encrypted before they are stored, visible only to the account owner, never shown to support, and never used for statistics, product improvement or AI.

Business data you enter

Customers and their contact details and addresses, jobs, estimates, invoices, payment records, schedules, photos and videos, receipts, time and mileage logs, expenses, permits, warranties and notes. Reading the total from a receipt photo happens on your own device; the photo isn’t sent anywhere for that.

From people using a contractor’s customer pages

• Approving an estimate: the typed name, the option chosen, the date and time, the internet (IP) address and browser/device, and a fingerprint of the exact estimate version shown. This is kept as a record of what was agreed.
• Booking a start date for approved work: the date chosen and any details entered.
• Paying an invoice: card and bank details are entered on Stripe’s secure page and go to Stripe, not to us. We receive the payment status, amount, date, payment type and, for cards, the brand and last four digits.

Collected automatically

• Technical and security records: IP address, browser and device type, pages requested, errors, sign-in times, and a log of sensitive account actions.
• Product statistics: events such as “estimate sent” or “setup step finished”, tied to a scrambled ID. They never include names, emails, money amounts or customer details. We collect them ourselves; no outside analytics company receives them.

From services you connect

• Stripe: whether your Stripe account is ready to take payments, and the status of payments made to you.
• Creem: your plan, subscription status and renewal dates.
• Calendars (Google, Microsoft, Apple iCloud or a calendar link): the start and end times of your other events, so the Service knows when you are busy. We don’t store their titles or details.

We don’t collect your device’s GPS location, your phone contacts, full card or bank numbers, or Social Security numbers, and we don’t buy information about you from data brokers.

3. How we use it

• To provide the Service: store your work, create documents, take bookings, show payment status, and sync your calendar.
• To send emails you ask us to send to your customers (estimates, invoices, receipts, reminders, confirmations, review requests).
• To send you account emails: sign-in and security notices, trial reminders, billing notices and important changes to the Service.
• To keep the Service secure: prevent abuse and fraud, limit repeated login attempts, investigate problems.
• To support you.
• To improve the Service and build new features, including AI features, using de-identified data (explained below).
• To meet legal obligations and enforce our Terms.

We don’t use your information for advertising, and we never send marketing to your customers. We will send you marketing emails only if you choose to receive them.

Improving the Service, including AI

We use business data and product statistics to fix problems, improve features and build new ones — including creating, training and testing artificial-intelligence (AI) features, such as suggested line items, prices or job lengths. Before business data is used this way, we de-identify it:

• we remove names, email addresses, phone numbers, street addresses, signatures, IP addresses and payment details;
• photos are separated from customer names and addresses, and hidden details stored in the file, such as location, are stripped;
• we don’t try to identify anyone from de-identified data, and anyone who helps us with this work must agree not to try either.

Nothing we build shows one business’s customers, prices, documents or photos to another business. Figures from many businesses, such as typical prices, are combined so no single business can be picked out. Pricing-coach household numbers and data from Google (section 6) are never used for this. We don’t let other companies train their own AI models on your data.

4. Who receives information

We share information only with these service providers, only what each needs to do its job, and under terms that limit what they can do with it:

• Cloudflare — hosts the app, the database, photo and file storage, backups and error logs, and protects the site from attacks.
• Resend — delivers email. It receives the recipient’s address and the content of the message.
• Stripe — sets up your Stripe account and processes your customers’ payments to you.
• Creem — our merchant of record. It processes your subscription payments and receives your name, email, billing details and tax location.
• Google, Microsoft or Apple — only if you connect that calendar. Your job appointments are added to your calendar: title, time, address, the customer’s phone number and your appointment notes.
• US Census Bureau geocoder and US National Weather Service — job addresses are turned into map coordinates, and the coordinates are used to look up the forecast for outdoor work. The weather service receives coordinates only, no names.

If we use an outside AI provider to run a feature, we will add it to this list before it receives any data, and it won’t be allowed to train its own models on your data.

We may also share information:

• when you tell us to, for example when you send a document to a customer;
• when the law requires it, such as a valid subpoena or court order — we will tell you first unless the law forbids it;
• to protect someone’s safety, or to stop fraud or abuse of the Service;
• if the Service is sold or merged into another company. We will tell you by email first, and the new owner must keep following this policy for information collected under it.

We don’t sell personal information or “share” it for targeted advertising, as those terms are used in California and other state privacy laws, and we haven’t done so in the past 12 months.

5. Cookies and browser storage

We use only the cookies the Service needs to work:

• sign-in cookies that keep you logged in securely;
• a cookie that remembers which business you are working in;
• a support cookie, used only during a support session the owner has approved.

Your browser may also save app files so the app opens faster and works with a weak signal. There are no advertising, social-media or third-party analytics cookies. Because we don’t sell or share personal information, there is nothing to opt out of — but we treat a browser’s Global Privacy Control or “Do Not Track” signal as an opt-out anyway.

6. Google calendar data

If you connect Google Calendar, we ask only for permission to manage a calendar that Peltuvo creates for your jobs and to see when you are free or busy. We use this only to put your jobs on your calendar and to avoid booking you when you are busy. Peltuvo’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We don’t use Google data for advertising, sell it, use it to train AI models, or let people read it except with your permission, for security, or when the law requires. Disconnecting the calendar in Settings deletes the stored connection and busy times. You can also remove our access in your Google account.

7. Text messages

Today Peltuvo doesn’t send text messages: “Send by text” opens the Messages app on the contractor’s own phone. If we add automated texting, mobile phone numbers and text-message consent will never be shared with or sold to third parties or affiliates for their marketing. Anyone receiving texts will be able to reply STOP to stop them.

8. How long we keep information

• Account and business data: while the account exists. Cancelling a plan doesn’t delete anything; the account stays read-only so you can still export.
• Deleted accounts: erased 30 days after the owner deletes the account (the undo period). Copies in our backups are overwritten within 30 more days. A note that a deletion happened is kept, without its contents.
• Unused accounts: an account with no paid plan and no sign-in for 24 months may be deleted, after at least 60 days’ email notice to the owner.
• De-identified data and what we learn from it, such as improved features or trained AI models: may be kept after an account is deleted, because it no longer identifies anyone.
• Error and request logs: about 7 days.
• Activity log of sensitive account actions: as long as the account exists.
• Billing records: as long as tax and accounting law requires.
• Support emails: as long as needed to help you and keep a record of what we agreed.

9. Security

• Every connection uses HTTPS encryption.
• Each business’s data is walled off from every other business on every database request, and we test that wall automatically.
• Passwords are stored as secure hashes. Calendar passwords, calendar access keys and pricing-coach numbers are encrypted when stored. Nightly backups are encrypted.
• Links to photos and files are signed and expire.
• Two-step login is available for every account.

No system is perfectly secure. If a breach affects your information, we will tell affected account owners without unreasonable delay and as the law requires, and help contractors notify their own customers.

10. Your rights

Wherever you live, you can ask us to:

• tell you what personal information we have about you, and give you a copy;
• correct information that is wrong;
• delete your information;
• stop sending you marketing emails.

Account owners can do most of this directly in the app: Settings → Your data lets you export or delete everything. For anything else, email support@peltuvo.com from the email address on your account so we can confirm it’s you. You may use an authorized agent with your signed permission. We answer within 45 days (if we need longer, we will tell you why, up to 45 more days). If we turn down a request, you can appeal by replying to our answer. We will decide the appeal within 60 days, and if you are still unhappy you can contact your state attorney general. We will never treat you differently for using these rights. Account security and billing emails can’t be turned off while the account is open.

11. If you are a contractor’s customer

If a contractor who uses Peltuvo has your information, that contractor controls it. Please contact them first to see, correct or delete it. If you contact us, we will pass your request to the contractor and help them answer it. We can’t change or delete a contractor’s records without their instruction, except where the law requires it.

12. Children

Peltuvo is for adults running a business. Account holders must be at least 18, and the Service isn’t directed at children under 13. If we learn that we have collected a child’s information by mistake, we will delete it.

13. Where information is stored

We keep our database and file storage in North America. Like any website, connections pass through Cloudflare’s worldwide network on their way to you. The Service is meant for businesses in the United States.

14. Changes to this policy

If we make an important change, we will email account owners at least 30 days before it takes effect. The date at the top shows the current version.

15. Contact

Privacy questions or requests: Bower Family Electric, LLC · support@peltuvo.com