Privacy Policy

Last updated: July 2026

Friendly (operated by the founding team) provides field-service management software for trade businesses. This policy explains what we collect, how we use it, and the choices you have. We do not sell your data, and we do not use it to train AI models without your explicit consent.

1. What We Collect

We collect information needed to run the service:

Account information — your name, email, business name, and phone number.
Data you enter — customer records (names, addresses, phone numbers, emails), jobs and schedules, estimates and invoices, materials and pricebook items, job-card photos, and time-clock entries.
Communications — the content of the text messages and emails you send to your customers through the platform.
Payment information — processed by our payment provider (Stripe); we do not store full card numbers.
Usage data — logins, feature activity, and diagnostic logs used to keep the service working.

2. How We Use It

We use your data to operate the CRM (jobs, scheduling, invoicing, customer records), to send SMS, email, and push notifications at your direction, to power AI-assisted summaries and message drafts, to process billing, and to provide support and improve the product. We do not sell your data. We do not use your data to train AI models without your explicit consent.

3. Third-Party Services

We rely on a small set of vetted providers, and share only the data needed to deliver the service:

Telnyx — SMS and voice.
Supabase — database, authentication, and hosting.
Anthropic — AI processing (under standard API terms, your data is not used to train their models).
Stripe — payments.
Resend — transactional email.
Google Maps — address lookup and autocomplete.

4. Multi-Tenant Data Isolation

Friendly is a multi-tenant platform. Each business's data is isolated at the database level (row-level security scoped to your company), so one business can never access another's records. The customer data you enter belongs to you — you are its controller, and Friendly acts as your processor.

5. SMS & 10DLC Compliance

SMS features require recipient consent. Opt-out requests (replying STOP) are processed automatically and cannot be overridden. Unsolicited or cold outbound messaging is prohibited. We register messaging campaigns with The Campaign Registry, and mobile-originated data is never shared with third parties for their own marketing. See our SMS Policy for full details.

6. Data Retention

Active data is retained for the life of your subscription. After cancellation, your data is retained for 90 days and then deleted. Opt-out and suppression records are retained indefinitely so we can honor them.

7. Security

Data is encrypted in transit and at rest. We use row-level database security, store credentials in a secured environment, and follow least-privilege access practices.

8. Your Rights

You may request access to, correction of, or deletion of your personal data, and we will respond within 30 days. Requests about a business's end-customer data are routed through that business, which is the controller of that data.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here and communicated by email. Continued use of the service after an update constitutes acceptance.

10. Contact

Questions about this policy? Email us at hello@hifriendly.app.