LEGAL
Last updated: August 3, 2026
We collect the personal information you provide directly (name, email, phone, address), service-request details (photos, notes), payment metadata via Stripe (we never store full card numbers), and limited diagnostic info (IP address, user agent) on public forms such as the SMS consent page.
To deliver service appointments and follow-ups; send appointment, payment, and security alerts (email + SMS where opted in); manage your account and billing; comply with legal obligations.
SMS text messaging is governed by a SEPARATE, standalone consent collected at /sms-consent — accepting our Terms of Service or Privacy Policy does NOT enroll you in SMS. When you submit consent at /sms-consent we record the verbatim consent text, the consent version, date, time, phone number (E.164), email, full name, IP address, user-agent, and consent source. SMS data is used ONLY for transactional and customer-care messaging by NexFlow Plumbing & Drain Services and is never sold or shared with third parties. Reply STOP at any time to opt out, or HELP for assistance.
We do not sell or rent personal data. We share only with service providers necessary to operate the platform: Stripe (payments), Twilio (SMS delivery), Resend (email delivery), and trusted infrastructure providers. Each acts as a processor under strict contractual terms.
Passwords are hashed (bcrypt). API keys are stored encrypted at rest and never echoed back through the UI. Database access is role-restricted and audited.
You can update profile info, change email (with re-verification), change password, and opt-out of SMS at any time (reply STOP, visit /sms-consent, or contact us). You can also delete your account by contacting support.
Our services are not directed to children under 13. We do not knowingly collect data from children.
Material changes to this policy will be communicated by email and posted here.
Questions? Email privacy@nexflowplumbing.com.