Privacy Policy

1. Introduction

Welcome to ClientConnect ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automated call scheduling service.

By using our service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our service.

2. Information We Collect

We collect several types of information from and about users of our service, including:

• Personal Information: Name, email address, phone number, and other contact details you provide when registering for our service.
• Calendar Information: When you connect your Google, Outlook, or Apple calendar, we access your calendar data to schedule and manage appointments.
• Call and SMS Data: Information related to calls and SMS messages sent through our platform, including timestamps, duration, and content.
• Usage Data: Information about how you use our service, including log data, device information, and analytics.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our service
• Process and complete transactions
• Schedule and manage automated calls and SMS messages
• Integrate with your calendar services
• Respond to your inquiries and provide customer support
• Send administrative information, such as updates or changes to our policies
• Monitor and analyze usage patterns and trends
• Protect against unauthorized access and ensure the security of our service

4. Sharing of Information

We may share your information with:

• Service Providers: Third-party vendors who process data on our behalf so the service can function — Vonage (delivery of the text messages and phone calls the service sends and receives), Stripe (payment processing for subscriptions and for payments between providers and their clients), Twilio SendGrid (delivery of transactional email, including booking notifications and invoice copies), and Google Firebase (delivery of push notifications to our mobile apps, and crash reporting).
• Intuit (QuickBooks): Only when a provider connects their own QuickBooks account do we send that provider's customer and invoice details to Intuit, so their bookkeeping stays in sync. If no QuickBooks account is connected, we send nothing to Intuit.
• Calendar Service Providers: Google, Microsoft, or Apple when you connect your calendar to our service.
• Legal Requirements: When required by law or to protect our rights, privacy, safety, or property.

The full list of the third parties we send data to — what each one is used for, what it receives, and whether it applies to every account or only when a provider connects that integration — is published on our Subprocessors page, which we update whenever the list changes.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Mobile opt-in data and SMS consent are not shared with any third parties or affiliates for marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

You have certain rights regarding your personal information, including:

• Accessing, correcting, or deleting the personal information held in your own account with us (a request to remove you from a business's own records is made to that business — see "Deleting your account" below)
• Withdrawing consent for calendar integration
• Opting out of marketing communications
• Requesting a copy of your personal data

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

Deleting your account. You can permanently delete your account yourself — from Settings in the app if you are a business owner, from My Profile in the app if you are a client, or from your subscription page on the web. Our account deletion page sets out step by step what is erased for each account type, what is kept, and why. Deletion is permanent in both cases and we cannot reverse it. What it reaches, however, depends on which kind of account you are deleting.

If you are a client, we delete the account we hold for you: your login and credentials, your profile (name, email address and phone number), the link to the business you were connected to, the documents you uploaded with no booking link loaded (they are paired with no business, so there is nobody left to keep them), the push-notification registrations for your devices, and the phone-consent records for your number and for any reading-contact number you entered when booking. Any recurring payment you set up is cancelled first. We do not delete the records of a business you booked with. It keeps the appointments you booked (including the name, email address and phone number you gave when booking), your contact record in its CRM, the SMS conversation between you and it, message bodies included, and the documents paired with it — the files you uploaded while its booking link was loaded, the files it uploaded to you, and the invoice PDFs the system filed there, including the copies stored in Google Cloud Storage. Documents paired with a different business, and documents you uploaded with no booking link loaded, are not part of what that business keeps. That information is that business's own record of the work it did for you — you provided it in the course of doing business with it — and for those records the business is an independent data controller, with us processing them on its behalf. Deleting your account does not remove them, and we will not delete a business's records at a client's request. To ask for their removal, contact that business directly.

If you are a business owner, deletion is total and irreversible: your login and profile, your appointments, calendars, maintenance and aircraft records, availability, booking links (which stop working immediately), contacts, SMS threads and message history, templates, uploaded logos, push registrations and calendar and accounting connections are all destroyed, and stored tokens are revoked with the providers that issued them. Documents paired with you whose clients' own accounts are already deleted are destroyed with your account, including the copies stored in Google Cloud Storage; files paired with a live client account stay with that client. Clients connected to you keep their own accounts and are simply unlinked. Everything we are not legally required to retain is gone, and there is no archive it can be restored from.

In both cases we retain anonymized financial records of completed transactions — amounts, dates, invoice numbers and payment-processor references, with your name, email address and the link to your login removed — for as long as tax and accounting law requires. Those are our own records. A do-not-text suppression record for a number that replied STOP is also never removed by an account deletion.

In both cases, too, every document is paired with one client account and one business at the moment it is created, and that pair never changes. A file a client uploads while a business's booking link is loaded in their Booking tab is paired with that business; a file that business uploads to the client, and the invoice PDFs the system files there, are paired with it too. A file a client uploads with no booking link loaded is paired with no business at all: nobody but the client can see it, and it stays that way until they load their next booking link, which claims it — the first link loaded after the upload, and no later one. Loading a different business's link changes nothing that already exists: earlier documents keep the business they were filed under, the new business never sees them, and only what is created or claimed under its link is its own. A business keeps access to the documents paired with it permanently: moving to another business neither takes them from the first nor hands them to the new one. The client always sees all of their own. Either paired side can delete a document, and that removes it — and the copy stored in Google Cloud Storage — for both; a business that is not the paired one cannot see it, lock it or delete it at all. A business can lock a document so the client cannot delete it (invoice PDFs are always locked), and can still delete a locked file itself. Nothing is destroyed automatically until both accounts are gone: a client's deletion leaves each paired document with its business, in its records and on that client's contact in its CRM, where it can still read it and remove it but can no longer add to it, while a document paired with no business goes with the client's account; a business owner's deletion destroys the documents paired with them whose clients' own accounts are already deleted and leaves the rest with the clients they are paired with. Whichever side deletes second takes the file with it. We will not delete a business's copy at a client's request; contact that business directly.

7. Third-Party Services

Our service integrates with third-party services, including Google Calendar, Outlook Calendar, Apple Calendar, Vonage, Stripe, Twilio SendGrid, Intuit QuickBooks, and Google Firebase. Our Subprocessors page lists all of them, including the services that host and store the data and the analytics services used on our website. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third-party services.

8. Text Messaging (SMS)

What we send. We send transactional text messages about appointments booked through the service — booking confirmations, reminders, cancellation notices, replies exchanged between you and your provider, and, where your provider uses them, prompts for information needed to complete the appointment. We do not send marketing or promotional text messages.

Who the messages come from. We operate two brands on one platform: ClientConnect, and SkyConnect for aviation operators. Messages sent on behalf of a SkyConnect operator are branded SkyConnect; all others are branded ClientConnect. Both are operated by Client Connect LLC, both are covered by this policy, and both are sent from the same messaging number.

How you opt in. You opt in by providing your mobile number and affirmatively agreeing to receive messages — on a booking page, by entering your number and checking the SMS consent box before pressing the "Schedule Appointment" button, and in our mobile apps by entering your number in your profile and checking the same consent box. The consent you agree to on a booking page reads: "By providing your phone number and pressing the 'Schedule Appointment' button, you agree to receive automated text messages from ClientConnect, and also agree to our Privacy Policy and Terms and Conditions. Consent is not a condition of purchase. Message frequency will vary. Message and data rates may apply. Reply HELP for help or STOP to cancel." The apps show the same consent language, adapted to a checkbox rather than a button.

A second opt-in path: reading-contact ("proxy") numbers. On SkyConnect, the person booking an appointment may enter a different number as the contact for aircraft tachometer/Hobbs meter readings — for example a maintenance contact who is not the person booking. Whoever enters that number is responsible for having permission to do so. That number never sees a booking page or a checkbox, so it is not messaged on the strength of someone else's consent: the first message it ever receives from us is an opt-in disclaimer naming the operator and SkyConnect, stating that message frequency varies and message and data rates may apply, and offering HELP and STOP. Nothing further is sent unless that disclaimer is delivered. Replying with the requested reading is what records consent for that number; the number can reply STOP at any time, exactly as above.

• Consent is not a condition of purchase. You can book and use the service without agreeing to receive text messages by arranging your appointment with your provider directly.
• Message frequency varies. How many messages you receive depends on how many appointments you book and how many messages you exchange with your provider.
• Message and data rates may apply. Those rates are set by your mobile carrier, not by us.
• Reply STOP to cancel. Reply STOP (we also honor UNSUBSCRIBE, END, QUIT, CANCEL, and STOP ALL) to any message to stop receiving them. We send one confirmation of the opt-out and then no further messages to that number. The suppression stays in place until you choose to reverse it: it survives account deletion, and booking again — whether you book or a provider books for you — does not resume messages.
• Reply START to resume. Texting START (we also honor UNSTOP and RESUME) to the same number is the only way to begin receiving messages again after opting out. The confirmation we send when you opt out tells you this, so you always know how to come back.
• Reply HELP for help. Reply HELP to any message and we will text back our support contact details. You can also reach us at support@clientconnect.tech.

We do not share your mobile opt-in. Your phone number is only used for your appointment and appointment information sent via SMS. We do not sell your data. Mobile opt-in data and SMS consent are not shared with any third parties or affiliates for marketing purposes. Your number is disclosed only to the provider you booked with and to the messaging provider that delivers the messages on our behalf (Vonage) and the mobile carriers that carry them.

9. Mobile App (Android) Privacy

The SkyConnect Android app (Google Play packagecom.pilotconnect.app) is a thin client over the same API powering this website. It collects and uses data identically to the web experience, with these mobile-specific additions:

• Permissions requested: INTERNET andACCESS_NETWORK_STATE (no user prompt — install-time only) for API connectivity, plus POST_NOTIFICATIONS (Android 13+ only — prompted once you are signed in) to deliver booking, reminder, and cancellation push notifications. The app does notrequest location, contacts, calendar, camera, microphone, or storage permissions.
• On-device storage: Your authentication token is persisted in EncryptedSharedPreferences (AES-256-GCM, key bound to the Android Keystore) so you stay signed in across restarts. UI preferences (tutorial state, etc.) are kept in unencrypted preferences. No PII is stored on-device beyond what's needed to render the screens you're viewing.
• Firebase Cloud Messaging (FCM): When you allow notifications, the app registers a token with Google Firebase to receive push notifications about your bookings. We send the token to our servers so we can dispatch pushes for events affecting your account. The token rotates automatically and is regenerated on reinstall. Push notification content is limited to event metadata (e.g. "New booking from Jane Smith at 2:00 PM") and does not include sensitive client information.
• Crash reporting (Firebase Crashlytics): Crash stack traces and Android system metadata (device model, OS version, free memory) are sent to Google Firebase to help us fix stability issues. Request/response bodies, screen contents, and other PII are not included.
• Advertising identifiers: The app does notcollect the Android Advertising ID or any device-stable identifier other than the FCM registration token described above.

Full disclosure of data the Android app collects, its purposes, and the third parties it's shared with is also published in the Google Play Store listing under "Data Safety." That listing and this policy are both prepared from the same internal data inventory we maintain for the app, so the two stay in lockstep.

10. Mobile App (iOS) Privacy

The SkyConnect iOS app (App Store bundle identifiercom.pilotconnect.app) is a native client over the same API powering this website. It collects and uses data identically to the web experience, with these iOS-specific details:

• Data collected: the personal, calendar, call and SMS, and usage information described in Section 2 — either entered by you or returned by our API for the screens you are viewing. The app does not request access to your contacts, photos, camera, microphone, location, or on-device calendar, and it does not collect the Identifier for Advertisers (IDFA) or track you across other companies' apps and websites.
• On-device storage: Your authentication token is stored in the iOS Keychain so you stay signed in across launches; UI preferences (tutorial state, etc.) are kept in standard app preferences. Deleting the app removes both.
• Push notifications (APNs): When you allow notifications, the app registers a device token that we use to deliver pushes through the Apple Push Notification service (APNs), routed via Google Firebase Cloud Messaging. We send the token to our servers so we can dispatch pushes for events affecting your account. Notification content is limited to event metadata (e.g. "New booking from Jane Smith at 2:00 PM") and does not include sensitive client information. You can turn notifications off at any time in iOS Settings.
• Sign in with Apple: If you sign in with Apple, we receive the identifier Apple issues for your account, the email address Apple provides (which may be Apple's private relay address), and — only on your first sign-in — the name you choose to share. We use these solely to create and identify your account. If you delete your account, we also ask Apple to revoke the tokens issued to us.
• Account deletion inside the app: You can permanently delete your account from the app — from Settings if you are a business owner, from My Profile if you are a client. Doing so cancels any subscription and recurring charges we bill through Stripe and removes your account and its data from our systems. A business owner's deletion additionally destroys that business's entire record on the service — appointments, contacts, booking links, messages and integrations — irreversibly, and unlinks the clients connected to it, who keep their own accounts. A client's deletion does not remove the records a business they booked with holds as its own business records, including the documents paired with it; see Section 6. Neither deletion cancels a subscription you bought through the App Store: Apple bills those, and only you can cancel them, in Settings → your name → Subscriptions on your device. Records of completed payments (invoices and transaction references) are retained where we are required to keep them as financial records, with your name, email address and the link to your login removed. See our account deletion page for the full list of what is erased and what is kept.

11. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

David Garrett McDaniel
Email: garrett@clientconnect.tech
Client Connect LLC
Address: 1404 Beechwood Ave, Nashville, TN 37212