Placeholder text. This document is generic boilerplate intended for early-stage development. Have it reviewed by a qualified privacy attorney before relying on it — especially if you serve California or EU customers.

Privacy Policy

Version 1.0 · Effective April 25, 2026

This Privacy Policy explains how Kolidiscope, Inc. ("Kolidiscope", "we") collects, uses, and shares information when you use the ServPool Service.

1. Information we collect

We collect three categories of information:

Account information: your name, email, password (hashed), company name, and uploaded selfie or company logo.
Customer Data you enter: records about your pool-service customers (their names, addresses, phone numbers, emails, pool details), service-visit details, water-chemistry readings, photos, and notes. You and your team enter this; we store it on your behalf.
Service usage data: log entries about your interactions with the Service (pages visited, features used, IP address, browser type, error messages) for security and product improvement.

2. How we use information

To provide, operate, and improve the Service.
To send you account-related communications (billing, security, password resets).
If you opt in: to send product news, tips, and offers. You can opt out at any time from your Profile page or by clicking unsubscribe in any marketing email.
To produce aggregated, anonymized analytics and benchmarks that don't identify you or your customers (e.g. "average free chlorine in Florida pools in July").
To prevent fraud, enforce our Terms, and comply with legal obligations.

3. We do not sell your customers' personal information

We do not sell, rent, or share your Customer Data (the records of your pool customers) with third parties for their marketing purposes. We do not contact your customers directly. The only third parties who handle Customer Data are sub-processors strictly necessary to deliver the Service (see Section 5).

4. Cookies and tracking

We use a small number of strictly-necessary cookies to keep you signed in and remember your preferences. We do not use third-party advertising trackers. We do not currently respond to Do-Not-Track browser signals.

5. Sub-processors

We share information with these third parties only to the extent needed to operate the Service:

Fly.io (USA) — application hosting and database storage.
Stripe (USA) — payment processing for subscriptions. Stripe receives billing details directly; we do not store full card numbers.
Open-Meteo (EU) — weather forecasts; receives the latitude and longitude of pool addresses (not the addresses themselves) at the time of report generation.
Your chosen SMTP provider (Gmail, Outlook, etc.) — delivers the reports you choose to email; the report content passes through their servers to reach the recipient.

6. Where data is stored

Service infrastructure is hosted in the United States. By using the Service from outside the US you consent to the transfer of your information to the US.

7. Data retention

We retain your account and Customer Data for as long as your account is active. If you close your account, we delete or anonymize your data within 90 days, except where we are required by law to retain certain records (for example, tax records related to past payments).

8. Your rights

You may at any time:

Access, correct, or update your information from your Profile or by emailing us.
Export your Customer Data (an export feature will be added; until then, email us and we will provide it within 30 days).
Delete your account and associated data by emailing hello@kolidiscope.com.
Opt out of marketing communications.

California residents: you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect and the right to request deletion. Contact us using the email above to exercise these rights.

EU/UK residents: you have rights under the GDPR/UK GDPR including access, rectification, erasure, restriction, portability, and objection.

9. Security

Passwords are hashed with bcrypt. Communications between your browser and the Service are encrypted with HTTPS once deployed. We follow reasonable security practices but no system is perfectly secure; please use a strong, unique password and notify us immediately of any suspected compromise.

10. Children

The Service is not directed to children under 13 and we do not knowingly collect personal information from children.

11. Changes to this Policy

We will notify you of material changes by email or in-app notice and update the version number above.

12. Contact

Questions or privacy requests? Email hello@kolidiscope.com.