Privacy Policy

1. Who We Are

Service Prospect is operated by Service Prospect Inc. at serviceprospect.ai. We are an appointment auction marketplace that connects pre-qualified, booked appointments with licensed service professionals across the trades we serve. Questions about this policy may be directed to support@serviceprospect.ai.

2. Data We Collect

We collect the following categories of information:

• Account data: Name, email address, mobile phone number, company name, license number
• Payment data: Billing address, last 4 digits of card (full card data handled by Stripe)
• Usage data: Pages visited, bids placed, appointments viewed, session activity
• Analytics data: We use Google Analytics 4 to understand, in aggregate, how the platform is used. This is subject to the cookie choice described in Section 4. Google Analytics does not receive your name, email address, phone number, or any property owner data
• Communication data: Support messages, contact form submissions, SMS message delivery metadata (timestamps, delivery status — we do not store message content after delivery)
• Property Owner data (platform side): Name, address, phone, email — used solely to fulfill won appointments and never shared beyond the winning contractor
• Phone number data: Your mobile phone number is collected when you begin our get-started signup funnel and when you register for an account, and is used to deliver transactional SMS messages — including one-time verification codes, auction win confirmations, appointment reminders, and payment and security notifications
• Marketing attribution and technical data: When you arrive from an advertisement, a search result, or another website and submit a form on one of our landing pages or on this platform, we record how you reached us. This includes campaign parameters in the web address (commonly called UTM parameters), advertising click identifiers supplied by the advertising platform (for example Google's gclid or Meta's fbclid), advertising and analytics cookie identifiers already set in your browser by those platforms (for example _fbp, _fbc and _ga), the page you first landed on, the website that referred you, and, at the moment you submit, your Internet Protocol (IP) address and your browser's user agent string, which identifies your browser and device type.
  Your IP address and user agent are read from your connection at the time of submission rather than accepted from your device, so that they are accurate. We use them to measure advertising effectiveness, to attribute enquiries to the campaign that produced them, and to detect fraudulent and automated submissions. An IP address is treated as personal data under the laws described in Section 7.

This platform also receives, and this policy also covers, information submitted through the landing pages we operate for the service brands in our network. Where a landing page is operated by a partner business under its own brand, that business is a separate controller of the information you give it and publishes its own privacy notice.

3. How We Use Your Data

We use your information to:

• Create and manage your account
• Process bids, payments, and appointment awards
• Send transactional emails (bid confirmations, auction alerts, receipts)
• Send transactional SMS messages (one-time verification codes, auction win confirmations, appointment reminders, payment and security notifications)
• Reveal a won appointment's property owner contact details to the winning contractor after payment, solely to fulfill that appointment
• Deliver marketing communications (you may opt out at any time)
• Prevent fraud and enforce our Terms of Service
• Measure how the platform is used, in aggregate, using Google Analytics, subject to the cookie choice in Section 4
• Measure which advertising campaigns produce enquiries, and report conversion events back to the advertising and analytics platforms named in Section 5 so that advertising spend can be measured and optimised
• Improve platform performance and user experience
• Comply with legal obligations

We do not sell your personal data to third parties. Property Owner contact details are shared exclusively with the winning contractor and only after payment is confirmed.

4. Cookies and Tracking

We use essential session cookies to keep you logged in. We use Google Analytics 4 to understand, in aggregate, how the platform is used; where a measurement ID is configured, Google Analytics may set analytics cookies (such as _ga) that distinguish your browser across visits.

Advertising measurement. On the landing pages we operate, advertising and analytics platforms may set their own cookies in your browser, and we read the identifiers in those cookies when you submit a form so that we can tell which advertisement produced your enquiry. Meta sets _fbp to identify your browser and _fbc to record an advertisement click; Google Analytics sets _ga. We read these identifiers only at the point you submit a form. We do not use them to build a profile of your browsing on other websites, and we do not place advertisements on this platform.

Reporting a conversion to an advertising platform so that it can measure its own advertising may be treated as "sharing" for cross-context behavioural advertising under the California Consumer Privacy Act as amended, and as a disclosure to a third party under comparable state laws. You have the right to direct us not to do this. See Section 7 for how to exercise it, and Section 8 for the separate and stricter promise that applies to your telephone number.

We are introducing a cookie consent banner so you can control whether analytics and advertising cookies are set. Until it is live, you can disable cookies in your browser settings, use your browser's Global Privacy Control signal where available, or contact us using the details in Section 12; however, disabling cookies may prevent you from logging in or using core features.

Cloudflare provides our CDN, DDoS protection, and Bot protection services. Cloudflare may process your IP address and request metadata as part of these services. See Cloudflare's Privacy Policy.

5. Third-Party Services

We work with the following third parties who may process your data:

• Stripe — Payment processing. Stripe handles all card data under PCI-DSS compliance. See Stripe's Privacy Policy.
• Cloudflare — CDN, Workers runtime, D1 database, Turnstile bot protection. See Cloudflare's Privacy Policy.
• GoHighLevel (GHL) — CRM used by our partner network to book and manage appointments, and one of our SMS delivery paths. GHL processes your phone number and message content solely to deliver transactional SMS on our behalf and does not use your data for its own marketing.
• Telnyx — Our primary SMS and voice delivery provider. Telnyx processes your phone number and message content solely to deliver messages on our behalf, and your phone number is not sold to or shared with Telnyx for its own marketing purposes. See Telnyx's Privacy Policy.
• Twilio — Fallback SMS delivery carrier, used to help ensure reliable delivery of transactional messages. It processes your phone number and message content solely to deliver messages on our behalf, and your phone number is not sold to or shared with Twilio for its own marketing purposes. See Twilio's Privacy Policy.
• Google (Google Analytics 4) — Website analytics, operated by Google LLC. Google Analytics receives aggregate usage data as described in Section 2; it does not receive your name, email address, phone number, or any property owner data. See Google's Privacy Policy.
• Meta Platforms, Inc. — Advertising measurement for the campaigns that bring enquiries to our landing pages. Where advertising measurement is enabled, we report that a conversion occurred, together with the advertising identifiers described in Section 2 and the IP address and browser user agent recorded at submission, so that Meta can attribute the conversion to the advertisement you clicked. We do not send your telephone number to Meta. See Meta's Privacy Policy.

6. Data Retention

We retain account data for as long as your account is active and for up to 3 years after account closure for legal and audit purposes. Transaction records are retained for 7 years as required by financial regulations. Property Owner contact data associated with won appointments is retained for 2 years.

Marketing attribution data described in Section 2, including the IP address and browser user agent recorded at submission, is retained for 25 months from collection and is then deleted or irreversibly anonymised. That period is set to match the longest standard reporting window used by the advertising and analytics platforms in Section 5, so the data is not held after it can serve the purpose it was collected for.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Data portability — request a copy of your data in a machine-readable format
• Direct us not to share your personal information for cross-context behavioural advertising. This covers the advertising measurement described in Sections 4 and 5. Exercising it does not affect your ability to use the platform, and we will not charge you a different price or provide a different level of service because you did.
• Withdraw a consent you have given, at any time, without affecting the lawfulness of anything done before you withdrew it
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@serviceprospect.ai. We will respond within 30 days. We will not discriminate against you for exercising any right in this section. Where your browser sends a Global Privacy Control signal, we treat it as a request not to share your personal information for cross-context behavioural advertising.

If you are in the United Kingdom or the European Economic Area, the legal bases on which we process your information are: performance of a contract, for the account, bidding, payment and appointment fulfilment purposes in Section 3; our legitimate interests in operating, securing and measuring our business, for fraud prevention and for aggregate analytics; your consent, for advertising and analytics cookies and for the advertising measurement in Section 4, which is why that measurement is subject to the cookie choice described there; and compliance with a legal obligation, for the retention periods in Section 6.

8. SMS Messaging & Phone Number Privacy

Your mobile phone number is collected when you begin our get-started signup funnel and when you register, and is used exclusively for transactional SMS communications. We do not sell, rent, or share your phone number with third parties for marketing purposes. Your mobile information — including your phone number, carrier details, and SMS opt-in consent data — will not be shared with or sold to third parties or affiliates for promotional or marketing purposes under any circumstances.

This promise is deliberately stricter than the rest of this policy and it overrides anything that could be read against it. The advertising measurement described in Sections 4 and 5 never includes your telephone number, in any form, hashed or otherwise. If we ever propose to change that, we will obtain your express consent first and update this policy before doing so.

Get-started verification code: When you enter your phone number in our get-started funnel, we send a one-time verification code by SMS to confirm the number. Standard message and data rates may apply.

SMS provider: We deliver SMS through Telnyx, our primary provider, and may use additional fallback delivery providers — including GoHighLevel and Twilio — to ensure reliable delivery. Your phone number and message content are shared with these providers solely to deliver messages on our behalf; they do not use your data for their own marketing. See Telnyx's Privacy Policy.

Contact reveal: When you win an appointment and complete payment, we reveal the property owner's actual contact details (name, phone, email if available, and property address) so you can fulfill that appointment. This information is confidential, is provided only for that specific appointment, and may not be added to any marketing list or shared with third parties. The platform does not mask or relay phone numbers between the parties.

SMS opt-out: You may stop receiving SMS messages at any time by replying STOP to any message; reply START to resubscribe, or HELP for assistance. You may also disable SMS notifications per category in your account settings. Opting out of SMS does not affect email or in-app notifications.

No marketing texts: All SMS we send is transactional and directly related to your platform activity. We do not send promotional or marketing text messages, and we do not send new-listing "appointment available in your area" alerts by SMS — those are delivered by email, push, and in-app notification only.

Data retention: SMS delivery metadata (timestamps, delivery status) is retained for 90 days for troubleshooting and compliance. Message content is not stored after successful delivery.

9. Security

We use industry-standard security measures including TLS encryption in transit, encrypted database storage via Cloudflare D1, bcrypt password hashing, and role-based access controls. No system is 100% secure; in the event of a data breach we will notify affected users as required by law.

10. Children's Privacy

Service Prospect is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately at support@serviceprospect.ai.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notice. The effective date at the top of this page will always reflect the most recent version.

12. Contact

Questions or concerns about this Privacy Policy? Reach us at support@serviceprospect.ai.