Privacy Policy

1. Introduction

Mold Inspector ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mold inspection management software and related services.

2. Information We Collect

Information You Provide

• Account information (name, email, phone number, company name)
• Billing and payment information
• Financial-account information you choose to connect via Plaid (e.g., account names, balances, and transactions). We never receive your banking login credentials.
• Client data you enter into the platform
• Inspection reports and associated documents
• Communications with our support team

Information Collected Automatically

• Device and browser information
• IP address and location data
• Usage patterns and feature interactions
• Cookies and similar tracking technologies

Mobile App Permissions

When using our iOS or Android mobile application, we may request access to the following device features:

• Camera: Used for photographing inspection areas, scanning sample barcodes, and capturing property documentation. Photos are stored on our servers and associated with your assessments.
• Photo Library: Used to select existing photos from your device for upload to assessment areas.
• Push Notifications: Used to alert you about quote approvals, payment receipts, lab results, SMS messages, and other time-sensitive updates.
• Location: Used to record IP geolocation when clients digitally sign quotes and, when enabled by your business, to support technician arrival, job-site, and fleet tracking workflows.
• Local Storage: Used to store assessment drafts, photos, and app data offline so you can work without internet connectivity. Data syncs to our servers when a connection is restored.

You can revoke any of these permissions at any time through your device settings. Some features may not function without the required permissions.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and fraud

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third parties that perform services on our behalf (payment processing, hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

5. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS 1.2/1.3 encryption for all data in transit
• AES-256 encryption at rest for sensitive financial data
• Role-based access control with least-privilege enforcement
• Logical isolation of each customer's data
• Automated dependency vulnerability monitoring with prompt patching
• Multi-factor authentication on administrative and infrastructure access

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete information
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time

8. Third-Party Services

Our platform integrates with the following third-party services to provide core functionality:

• Stripe: Payment processing for invoices. Stripe collects and processes payment card information directly. We do not store credit card numbers on our servers.
• Plaid: Used to securely connect your financial accounts so you can view and manage financial data within the platform. When you link an account, you authenticate directly with your financial institution through Plaid — we never receive or store your banking login credentials. Plaid collects and processes your information in accordance with the Plaid End User Privacy Policy. We access only the financial-account data needed to provide this feature and store it encrypted on our servers.
• Twilio: SMS messaging for client communications. Phone numbers and message content are processed through Twilio's infrastructure.
• Laboratory Partners: Lab sample data and results are transmitted between our platform and laboratory information management systems (LIMS) for sample tracking and report generation.
• Apple Push Notification Service / Firebase Cloud Messaging: Used to deliver push notifications to your mobile device.

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

9. Account Deletion

You may delete your account at any time from within the app by navigating to Settings → Preferences → Delete Account. Account deletion is permanent and will remove your personal information, assessment data, and associated files from our servers. Some data may be retained as required by law or for legitimate business purposes (such as completed financial transactions). If you are unable to access the app, you may request account deletion by contacting us at the email address below.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our services.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: