&lt;!doctype html&gt;&lt;html lang=&#39;en&#39;&gt;&lt;head&gt;&lt;meta charset=&#39;utf-8&#39;&gt;&lt;meta name=&#39;viewport&#39; content=&#39;width=device-width,initial-scale=1&#39;&gt;&lt;title&gt;Privacy - Anchor Ops&lt;/title&gt;&lt;style&gt;:root{color-scheme:light dark;--ink:#111827;--dim:#6b7280;--bg:#ffffff;--line:#e5e7eb;--accent:#EA5D15;}@media (prefers-color-scheme:dark){:root{--ink:#e5e7eb;--dim:#9ca3af;--bg:#0b0f17;--line:#1f2937;}}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--ink);font:16px/1.65 ui-sans-serif,system-ui,-apple-system,&#39;Segoe UI&#39;,Roboto,sans-serif;}.wrap{max-width:46rem;margin:0 auto;padding:3rem 1.25rem 4rem;}h1{font-size:1.6rem;margin:0 0 .25rem;letter-spacing:-.01em;}h2{font-size:1.05rem;margin:2rem 0 .5rem;letter-spacing:-.01em;}.sub{color:var(--dim);margin:0 0 2rem;font-size:.92rem;}p,li{color:var(--ink);}ul{padding-left:1.15rem;}li{margin:.3rem 0;}a{color:var(--accent);}hr{border:0;border-top:1px solid var(--line);margin:2.5rem 0 1.25rem;}footer{color:var(--dim);font-size:.85rem;}&lt;/style&gt;&lt;/head&gt;&lt;body&gt;&lt;div class=&#39;wrap&#39;&gt;&lt;h1&gt;Privacy&lt;/h1&gt;&lt;p class=&#39;sub&#39;&gt;Anchor Ops &amp;middot; last updated 2026-08-14&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Anchor Ops&lt;/strong&gt; is software a home-service business uses to run its own
work: its customers, quotes, jobs and invoices. Most of the personal information
here was given to &lt;em&gt;that business&lt;/em&gt; by its customers. We hold it on the
business&#39;s behalf.&lt;/p&gt;

&lt;h2&gt;What is held&lt;/h2&gt;
&lt;ul&gt;
  &lt;li&gt;&lt;strong&gt;About a business&#39;s customers:&lt;/strong&gt; name, email, phone, service
      address, and the record of work done - enquiries, quotes, jobs, appointments,
      invoices, payments recorded against them, notes and photos staff attach to a
      job.&lt;/li&gt;
  &lt;li&gt;&lt;strong&gt;About the people who use the software:&lt;/strong&gt; name, email, phone,
      role, a password stored only as a one-way hash, and - where enabled - a
      two-factor secret.&lt;/li&gt;
  &lt;li&gt;&lt;strong&gt;Operational records:&lt;/strong&gt; when a record changed and which system
      it came from, so a figure can always be traced back to its source.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;No payment card numbers are stored. Where a payment is recorded, it is an
amount, a date and a method - not an instrument.&lt;/p&gt;

&lt;h2&gt;Where it lives&lt;/h2&gt;
&lt;ul&gt;
  &lt;li&gt;One database on one private server, reachable only over an authenticated
      connection. It is not a shared or public host.&lt;/li&gt;
  &lt;li&gt;&lt;strong&gt;Backups:&lt;/strong&gt; kept on the same server, and copied to Google
      Drive every six hours and daily. Backups are retained on a rolling basis and
      older ones are pruned automatically.&lt;/li&gt;
  &lt;li&gt;&lt;strong&gt;Uploaded files&lt;/strong&gt; (job photos, quote attachments) are stored on
      the server&#39;s own disk, filed per business.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;Who can see it&lt;/h2&gt;
&lt;ul&gt;
  &lt;li&gt;Each business sees &lt;strong&gt;only its own records&lt;/strong&gt;. The boundary is
      applied to every request, not just to the screens, and it is tested on every
      release with a decoy tenant whose data must never appear.&lt;/li&gt;
  &lt;li&gt;Within a business, what a person sees depends on the role they were given.&lt;/li&gt;
  &lt;li&gt;The people who operate and maintain this software can reach the database in
      order to run it, fix it and back it up.&lt;/li&gt;
  &lt;li&gt;A quote is visible to a customer without signing in &lt;strong&gt;only&lt;/strong&gt;
      when someone at the business deliberately shares it, and only that quote.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;Who else processes it&lt;/h2&gt;
&lt;ul&gt;
  &lt;li&gt;&lt;strong&gt;Resend&lt;/strong&gt; delivers outbound email (quote links, invitations,
      password resets), so the message and its recipient pass through them.&lt;/li&gt;
  &lt;li&gt;&lt;strong&gt;Google Drive&lt;/strong&gt; stores off-site backups of the database.&lt;/li&gt;
  &lt;li&gt;Where a business connects its own &lt;strong&gt;Jobber&lt;/strong&gt;, &lt;strong&gt;Meta&lt;/strong&gt;
      or &lt;strong&gt;Google Ads&lt;/strong&gt; account, records flow from those accounts into
      this system at that business&#39;s instruction.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Nothing here is sold, rented, or shared for advertising. There is no advertising
pixel, no analytics tracker and no third-party script on any page of this product.&lt;/p&gt;

&lt;h2&gt;How long it is kept&lt;/h2&gt;
&lt;p&gt;Records are kept for as long as the business keeps using the software, because
they are that business&#39;s operating history. Deleting a record inside the product
moves it to a recoverable Trash rather than destroying it immediately - which is
deliberate, so a mistake is survivable - and it can be permanently removed on
request. Backups age out on their own schedule, so a deleted record may persist in
a backup for a period after deletion.&lt;/p&gt;

&lt;h2&gt;Asking about your own information&lt;/h2&gt;
&lt;p&gt;If you are a customer of a business that uses this software, that business holds
the relationship and the record: ask them, and they can correct or delete it. If
they need help doing so, we will help them do it.&lt;/p&gt;
&lt;p&gt;Questions about your data: &lt;a href=&#34;mailto:privacy@anchorops.ca&#34;&gt;privacy@anchorops.ca&lt;/a&gt;.&lt;/p&gt;&lt;hr&gt;&lt;footer&gt;&lt;a href=&#39;/privacy&#39;&gt;Privacy&lt;/a&gt; &amp;middot; &lt;a href=&#39;/terms&#39;&gt;Terms&lt;/a&gt;&lt;/footer&gt;&lt;/div&gt;&lt;/body&gt;&lt;/html&gt;