Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, phone number, and password when you create an account
• Property Information: Property addresses, unit details, and related information you provide
• Service Request Information: Descriptions of maintenance issues, photos, preferred scheduling times, and related communications
• Payment Information: Billing details processed through our secure payment processors
• Communications: Messages sent through the platform between homeowners, property managers, and contractors
• Business Information: Company names, addresses, and professional credentials for property managers and contractors

1.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Device type, operating system, browser type, and unique device identifiers
• Usage Information: Pages visited, features used, time spent on the Service, and interaction patterns
• Log Data: IP address, access times, and referring URLs
• Location Information: General location based on IP address (we do not collect precise GPS location)

1.3 Information from Third Parties

We may receive information from:

• Address verification services to validate property information
• Identity verification services for contractor credentialing
• Payment processors regarding transaction status

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Facilitate service requests, scheduling, and communication between parties
• Manage Accounts: Create and manage user accounts, authenticate users, and maintain security
• Process Payments: Handle billing, invoicing, and payment processing
• Communicate: Send notifications about service requests, appointments, and account updates
• Improve Services: Analyze usage patterns to enhance features and user experience
• Ensure Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Customer Support: Respond to inquiries and provide technical assistance

3. How We Share Your Information

We share your information in the following circumstances:

3.1 With Service Participants

• Property Managers: Homeowner contact information and service request details necessary to coordinate services
• Contractors: Property addresses, service descriptions, and scheduling information necessary to perform work
• Homeowners: Contractor company names, technician names, and appointment details

3.2 With Service Providers

We use trusted third-party services to operate our platform:

• Supabase: Database hosting, user authentication, and data storage (PostgreSQL)
• Vercel: Web application hosting and content delivery
• Stripe: Payment processing and money movement between users via Stripe Connect (see Section 3.4 below). We share name, email, billing address, and transaction amounts; Stripe collects and tokenizes payment-card information directly and Sterling never receives raw card numbers.
• Resend: Transactional email delivery
• Twilio: SMS/text message delivery for service notifications (see Section 3.3 below)
• Apple Push Notification service (APNs): Delivery of mobile push notifications to iOS devices (device tokens only)
• Firebase Cloud Messaging (FCM): Delivery of web push notifications (device tokens only)
• Sentry: Error monitoring and application performance (no personal data stored)
• Radar: Address autocomplete and verification (addresses only, no personal data)
• Google Calendar (Google API Services): Optional. When you connect Google Calendar, we create, update, and delete only the calendar events that represent your Sterling service visits. We request only the calendar.events scope and never read or modify your other calendar events.
• Microsoft Graph (Outlook Calendar): Optional. The same Sterling-visit events, written to your Outlook calendar when you connect it.

Calendar Integration (Google, Microsoft, Apple)

Connecting a calendar is entirely optional and is initiated only by you, from Settings → Calendar. When connected, Sterling writes your scheduled service visits to your calendar so they appear alongside your other appointments, and keeps them updated if a visit is rescheduled or cancelled.

Sterling’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar access solely to add and manage your Sterling appointments on your own calendar at your request. We do not use this data for advertising, we do not sell it, and we do not share it with any third party. You can disconnect at any time in Settings → Calendar — which immediately stops all access and removes the Sterling events — and you may additionally revoke access from your Google Account permissions page.

3.3 SMS/Text Message Communications

Brand Identification: All SMS messages are sent by Sterling Home Tech Inc. (“Sterling”), a property management platform operating at sterlinghome.xyz.

How You Opt In

SMS notifications are disabled by default. To receive text messages, you must explicitly enable them in your account by following these steps:

1. Sign in to your Sterling account at sterlinghome.xyz
2. Open Settings (gear icon in the navigation)
3. Tap Notifications
4. Toggle SMS to on
5. Review the consent disclosure and tap “I Agree”

The consent disclosure presented at the time of opt-in states:

“Sterling will send service scheduling confirmations and updates to [your phone number]. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out at any time. By tapping ‘I Agree,’ you consent to receive automated text messages from Sterling Home Technologies.”

No SMS messages are sent until you complete this opt-in process. Your consent is recorded with a timestamp in your account preferences.

What Messages You Receive

Sterling sends only transactional, service-related SMS notifications. These include:

• Service scheduling confirmations (e.g., “Confirmed: Pool service scheduled for Mar 10, 2026 at 2:30 PM”)
• Appointment reminders
• New message alerts from your property manager or contractor
• Service status updates

We do not send marketing, promotional, or advertising messages via SMS.

Message Frequency

Message frequency varies based on your service activity. Typically 1–5 messages per month. You may receive more during active service periods or none during inactive periods.

Message and Data Rates

Standard message and data rates may apply depending on your mobile carrier plan.

How to Opt Out

You can stop receiving SMS messages at any time by:

• Replying STOP to any message from Sterling
• Disabling the SMS toggle in Settings > Notifications within your account

After opting out, you will receive a one-time confirmation message. You will continue to receive notifications through other channels (email, push notifications) unless you disable those separately.

Help

Reply HELP to any SMS message for assistance, or contact us at support@sterlinghome.xyz.

Your phone number is shared with our SMS delivery provider, Twilio, solely for the purpose of delivering these messages. Twilio’s privacy policy is available at twilio.com/legal/privacy.

3.4 Payment Processing (Stripe & Stripe Connect)

Sterling uses Stripe, Inc. (“Stripe”) to process payments and to move funds between homeowners, property managers, and contractors. Sterling operates as a platform on top of Stripe Connect — we facilitate transactions but do not act as a money transmitter ourselves, and we never store full payment-card numbers. Card details are entered directly into Stripe-hosted elements and tokenized before they reach our servers.

Information shared with Stripe in connection with a payment may include:

• Name, email address, and billing address
• Payment-method tokens (Stripe’s reference to your stored card or bank account)
• Transaction amounts, descriptions, and the parties to the transaction
• For contractor and property-management Stripe Connect accounts: business name, tax ID, bank account information, and verification documents required by Stripe’s Know-Your-Customer (KYC) obligations

Stripe acts as an independent data controller for payment data and is subject to its own privacy policy at stripe.com/privacy. By making or receiving a payment through Sterling, you also agree to Stripe’s applicable services agreements (Stripe Services Agreement and, for Connect accounts, the Stripe Connected Account Agreement).

3.5 Legal Requirements

We may disclose information when required by law, court order, or governmental request, or when necessary to protect our rights, safety, or property.

3.6 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until you request account deletion
• Service Request History: Retained for 7 years for warranty and legal purposes
• Communications: Retained for 3 years after the related service is completed
• Payment Records: Retained for 7 years per tax and accounting requirements

After deletion, some information may remain in backups for up to 30 days before being permanently removed.

5. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted over HTTPS (TLS 1.3 encryption)
• Passwords hashed using bcrypt algorithm
• Row-level security (RLS) ensuring users can only access their own data
• Regular security audits and monitoring
• Access controls limiting employee access to personal data
• Data hosted in SOC 2 Type II certified facilities

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

6.1 All Users

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information (subject to certain exceptions)
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: Limit how we use sensitive data

Do Not Sell or Share My Personal Information: Sterling does not sell personal information to third parties or share it for cross-context behavioral advertising.

6.3 European Users (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• All rights listed in Section 6.1
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Our legal bases for processing include: contract performance, legitimate interests, and consent where applicable.

7. Cookies and Local Storage

We use minimal tracking technologies:

• Essential Cookies: Required for authentication and session management
• Local Storage: Used to store user preferences and improve performance

We do not use third-party advertising cookies or sell data to advertisers. You can manage cookies through your browser settings, though disabling essential cookies may prevent you from using the Service.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. For significant changes, we may also send you an email notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: privacy@sterlinghome.xyz
• Address: Sterling Home Tech Inc., Scottsdale, Arizona, USA

We will respond to your request within 30 days (or sooner where required by law).