Privacy Policy

Pool Boss LLC ("Pool Boss," "we," "us," or "our") operates the Pool Boss platform at poolboss.app (the "Service"). This Privacy Policy describes how we collect, use, disclose, retain, and protect information in connection with the Service.

Pool Boss operates as a business-to-business SaaS platform. Our direct customers are pool service businesses ("Customers"). Those Customers use the Service to manage information about their own end customers ("End Users"). This Policy covers both relationships.

By using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, do not use the Service.

This Policy does not apply to information collected by third-party services that may be linked to or integrated with the Service. Those services are governed by their own privacy policies.

2.1 Account and Registration Data

When you register for or use the Service, we collect information including your name, business name, email address, phone number, billing address, and payment information (processed and stored by Stripe; Pool Boss does not store full card numbers).

2.2 Customer Data You Provide

As part of normal Service operation, you may input business records, customer contact information, service history, scheduling data, invoices, and financial records. Pool Boss processes this data on your behalf as a service provider.

2.3 End User Data

When you use the Service to manage your own customers, you may input End User personal data including names, addresses, phone numbers, email addresses, and service records. Pool Boss processes End User data solely as directed by you through your use of the Service. You are the data controller for End User data; Pool Boss acts as a processor only.

2.4 Automatically Collected Data

We automatically collect certain data when you access the Service, including IP address, browser type and version, operating system, device identifiers, pages and features accessed, session duration, clickstream data, and error logs. This data is used to operate, secure, and improve the Service.

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to maintain session state, remember your preferences, analyze usage patterns, and support security features. You may control cookie settings through your browser; however, disabling certain cookies may impair Service functionality. We do not currently respond to browser Do Not Track signals.

2.6 Communications Data

If you contact Pool Boss for support or other purposes, we retain records of those communications, including email content and support tickets, to assist you and improve our services.

Pool Boss uses collected information to:

• Provide, operate, maintain, and improve the Service;
• Process payments and manage your subscription;
• Send transactional communications including account notices, receipts, and support responses;
• Send marketing and product communications (you may opt out per Section 8.4);
• Analyze and understand how the Service is used to develop new features and improve existing ones;
• Generate aggregated, anonymized data and industry benchmarks (see Section 3.1);
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity;
• Enforce these Terms and our other policies;
• Comply with applicable legal obligations;
• Protect the rights, property, and safety of Pool Boss, our customers, and the public.

3.1 Aggregated and Anonymized Data

Pool Boss reserves the right to collect, use, and disclose aggregated, de-identified, or anonymized data derived from Customer Data and End User Data for any purpose, including product improvement, research, and public reporting. Such data will not identify any individual Customer or End User. This right survives termination of your account.

4.1 Service Providers

We share information with third-party vendors who assist us in providing the Service. These include Stripe (payment processing), Supabase (database infrastructure and hosting), email delivery providers, analytics platforms, and customer support tools. Service providers are contractually restricted to using your information only as necessary to perform services for Pool Boss.

4.2 Business Transfers

Pool Boss reserves the right to transfer any and all information collected in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of Pool Boss's assets. In any such event, your information may be transferred to the acquiring entity, which may use it subject to terms that differ from this Policy. We will make reasonable efforts to notify you of any such transfer.

4.3 Legal Compliance and Protection

Pool Boss may disclose information: (a) as required by applicable law, regulation, legal process, or government request; (b) to enforce these Terms or other agreements; (c) to protect the rights, privacy, safety, or property of Pool Boss, its customers, or the public; or (d) in connection with investigating or preventing fraud or security incidents. Pool Boss is not required to notify you prior to making such disclosures.

4.4 With Your Consent

Pool Boss may share your information with third parties when you have provided explicit consent to do so.

4.5 No Sale of Personal Information

Pool Boss does not sell personal information to third parties for their own marketing purposes.

Pool Boss retains account information and Customer Data for as long as your account is active and for a reasonable period thereafter to fulfill the purposes described in this Policy, resolve disputes, enforce agreements, and comply with legal obligations.

Following account termination, Pool Boss may retain Customer Data for up to 90 days before deletion, at Pool Boss's sole discretion. Pool Boss is not obligated to retain data beyond this period. Automatically collected data, aggregated data, and anonymized data may be retained indefinitely.

Pool Boss reserves the right to delete any data at any time without notice, subject to applicable law. Pool Boss is not responsible for any loss resulting from data deletion following account termination.

Pool Boss implements commercially reasonable technical and organizational security measures designed to protect information against unauthorized access, loss, alteration, or destruction. These include encryption of data in transit (TLS), encryption of data at rest, row-level security controls, and access controls limiting data access to authorized personnel.

NOTWITHSTANDING THE FOREGOING, NO SECURITY MEASURE IS PERFECT OR IMPENETRABLE. POOL BOSS CANNOT GUARANTEE THE ABSOLUTE SECURITY OF ANY INFORMATION. POOL BOSS DISCLAIMS ALL LIABILITY FOR UNAUTHORIZED ACCESS TO OR DISCLOSURE OF YOUR INFORMATION RESULTING FROM CIRCUMSTANCES BEYOND POOL BOSS'S REASONABLE CONTROL.

In the event of a data breach that triggers notification obligations under applicable law, Pool Boss will provide required notices in accordance with its legal obligations.

As a Customer who inputs End User personal data into the Service, you are solely responsible for:

• Obtaining all legally required consents from End Users before providing their personal information to Pool Boss;
• Providing End Users with appropriate notice of how their data will be used, including processing by Pool Boss;
• Handling all End User requests relating to their personal data, including requests for access, correction, deletion, or portability;
• Complying with all applicable privacy laws and regulations governing your collection, use, and disclosure of End User data.

Pool Boss processes End User data exclusively as directed by you through your use of the Service. Pool Boss is not responsible for your compliance with applicable privacy laws. You indemnify and hold harmless Pool Boss from any claims, fines, or penalties arising from your failure to comply with your obligations regarding End User data.

8.1 Access and Correction

You may access and update your account information at any time through your account settings. For corrections that cannot be made through the settings, contact boss@poolboss.app. Pool Boss will use commercially reasonable efforts to respond to requests within 30 days.

8.2 Data Export

You may request an export of your Customer Data by contacting boss@poolboss.app. Export requests must be submitted before account termination. Pool Boss will use commercially reasonable efforts to provide exports in a standard format within 30 days. Pool Boss is not obligated to provide exports in any particular format or to maintain export functionality at any specific time.

8.3 Account Deletion

You may request deletion of your account by contacting boss@poolboss.app. Account deletion will be processed within 90 days, subject to legal retention obligations. Deletion of your account does not guarantee deletion of all data; Pool Boss may retain certain information as required by law or for legitimate business purposes. Pool Boss is not liable for any consequences of account deletion.

8.4 Marketing Communications

You may opt out of marketing emails at any time using the unsubscribe link in any such email or by contacting boss@poolboss.app. You will continue to receive transactional and account-related communications. Opting out of marketing does not affect Pool Boss's right to contact you regarding your account, billing, legal notices, or material Service changes.

This section applies to residents of California and supplements the rest of this Privacy Policy. It is provided pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”). Capitalized terms used but not defined in this section have the meanings given in the CCPA.

9.1 Categories of Personal Information Collected

In the preceding 12 months, Pool Boss has collected the following categories of personal information:

• Identifiers (name, email address, phone number, IP address, account username);
• Commercial information (billing address, subscription plan, transaction history, invoices);
• Internet or other electronic network activity (log data, usage data, clickstream data, device identifiers);
• Professional or employment-related information (business name, role, business address);
• Inferences drawn from the above to create a profile about you (usage patterns, feature preferences, product analytics).

Pool Boss collects this information for the business purposes described in Section 3 of this Policy. Pool Boss does not collect sensitive personal information as defined under the CPRA.

9.2 Categories of Personal Information Disclosed for Business Purposes

In the preceding 12 months, Pool Boss has disclosed the following categories of personal information to service providers for business purposes: Identifiers; Commercial information; Internet or other electronic network activity. These disclosures are made to Stripe (payment processing), Supabase (database hosting), and other service providers identified in Section 4.1. Pool Boss does not sell personal information and does not share personal information for cross-context behavioral advertising.

9.3 Your California Privacy Rights

California residents have the following rights under the CCPA, subject to certain exceptions and limitations:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purposes for collecting it, and the categories of third parties with whom we share it;
• Right to Delete: You may request that we delete personal information we have collected from you, subject to exceptions under applicable law;
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you;
• Right to Opt Out of Sale or Sharing: Pool Boss does not sell personal information and does not share personal information for cross-context behavioral advertising. No opt-out mechanism is required;
• Right to Non-Discrimination: Pool Boss will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge different prices, or provide a different level of service because you exercised a privacy right.

9.4 How to Submit a CCPA Request

To exercise your rights, submit a verifiable consumer request to boss@poolboss.app with the subject line “California Privacy Request.” You may also submit a request on behalf of a minor child for whom you have parental authority.

Pool Boss will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will notify you in writing. We will deliver our response electronically. We may not respond to requests we cannot verify or that do not comply with applicable requirements, and we may charge a reasonable fee for excessive or repetitive requests as permitted by law.

9.5 Pool Boss as a Service Provider

When Pool Boss processes End User personal information on behalf of a Customer, Pool Boss acts as a “service provider” under the CCPA. In that capacity, Pool Boss is contractually prohibited from retaining, using, or disclosing End User personal information for any purpose other than providing the Service to the Customer, and from selling or sharing such information. Customers who are themselves subject to CCPA and who use Pool Boss to process California residents' personal information should ensure their agreements with Pool Boss include the service provider provisions required by the CCPA. Customers who receive CCPA requests from their End Users are solely responsible for responding to those requests.

The Service is not directed to individuals under 18 years of age, and Pool Boss does not knowingly collect personal information from minors. If Pool Boss becomes aware that it has collected personal information from a person under 18 without verifiable parental consent, it will take steps to delete such information. If you believe we have inadvertently collected such information, contact boss@poolboss.app.

Pool Boss reserves the right to modify this Privacy Policy at any time. When we make material changes, we will notify you by email or through a notice in the Service. The updated Policy will be effective upon posting. Your continued use of the Service after any change constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, your sole remedy is to stop using the Service and terminate your account.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, POOL BOSS'S LIABILITY FOR ANY CLAIMS ARISING OUT OF OR RELATED TO THIS PRIVACY POLICY OR POOL BOSS'S DATA PRACTICES SHALL BE SUBJECT TO THE SAME LIMITATIONS SET FORTH IN THE TERMS OF SERVICE, INCLUDING THE AGGREGATE LIABILITY CAP. POOL BOSS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES ARISING OUT OF OR RELATED TO ANY PRIVACY INCIDENT.

Questions, concerns, or requests regarding this Privacy Policy should be directed to:

Pool Boss LLC

30 N Gould St, Ste N

Sheridan, Wyoming 82801

boss@poolboss.app