Privacy Policy
Effective date: September 24, 2026
Client Sparrow is a customer-relationship and operations platform built for commercial kitchen hood-cleaning businesses. This policy explains, in plain language, what information we collect, how we use it, and the choices you have.
What we collect
Account information. When you sign up or are invited to Client Sparrow, we collect your name, email address, and a securely hashed password.
Business records you enter. Client Sparrow is a CRM for hood-cleaning businesses. The customer, location, job, estimate, invoice, and team records you create are stored so the service can operate. These records may include contact details of your customers that you choose to enter.
Messages. If you connect an email account (Gmail or Outlook) or an SMS provider (Twilio), we access and store the messages needed to provide the inbox and sending features — for example, incoming customer replies and the messages you send through the service. We only access what the features you use require.
Technical data. We collect basic operational logs (such as request timestamps and error logs) needed to keep the service running securely.
How we use your data
We use the data we collect to operate, maintain, and improve Client Sparrow — including providing the dashboard, job scheduling, messaging, invoicing, and reporting features — and to communicate with you about your account, such as security or service notices. We do not sell your personal data, and we do not share it with advertisers.
Email and SMS access
When you connect a Gmail or Outlook mailbox, Client Sparrow uses Google's and Microsoft's APIs only to provide the features you ask for: sending messages on your behalf and syncing incoming mail into your unified inbox. We do not read mail beyond what these features need, and we do not use your mailbox data for advertising.
When you connect Twilio, we use it only to send the SMS messages you compose or approve and to receive replies into your inbox.
Security
Data is encrypted in transit using HTTPS/TLS. Sensitive credentials you provide (such as API keys and OAuth tokens) are encrypted at rest. Access to production data is limited to what is needed to operate the service. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.
Data retention and deletion
We keep your data for as long as your account is active and as needed to provide the service. You can request a copy of your data or ask us to delete your account and associated data at any time by emailing sssamirrr@gmail.com. We will confirm once deletion is complete, except where we are required to retain limited records for legal or accounting reasons.
Your choices
You can disconnect a connected email account or SMS provider at any time from Settings, which stops further syncing. You can ask us to correct inaccurate information in your account. For marketing messages, if any, every message includes a way to opt out.
Changes to this policy
If we make material changes to this policy, we will update the date below and, where appropriate, notify account owners by email.
Contact
Questions about this privacy policy or your data: sssamirrr@gmail.com.