Effective August 13, 2026 · British Columbia, Canada
Who this covers
Plumber361 (“we”, “us”) operates plumber361.com and related call, onboarding, and Google Business Profile tools. This policy applies to website visitors, plumbing-business owners and staff, and people whose information a plumbing business submits through our services (including callers).
Each plumbing business remains responsible for its own privacy notices to customers, including call-recording disclosure where required.
Information we collect
From plumbing businesses
- Account details: name, work email, password hash, and shop name.
- Operating data the owner provides: hours, service areas, approved prices, transfer numbers, and escalation rules.
- Google listing data the owner selects or authorizes, such as place ID, address, phone, hours, photos, and reviews already public on Google.
- OAuth tokens needed to manage an authorized Google Business Profile. Refresh tokens are encrypted at rest.
- Pilot applications and contact messages sent through our forms.
From callers and customers, on behalf of a shop
- Phone number, name if given, location, property type, and the caller’s own description of the issue.
- Urgency, access notes, photos the caller chooses to send, and requested appointment times.
- Call audio, transcripts, and tool results from the telephony provider when a shop enables call coverage.
- Follow-up and review-request records after a completed job, when the shop turns those workflows on.
We store symptoms and caller wording. We do not record a certain plumbing diagnosis. We do not collect payment-card data on voice prompts.
Automatically from the website
- Basic server logs: IP address, user agent, path, and time, used for security and reliability.
- Session cookies required to keep an owner signed in. We do not use advertising cookies on the marketing site.
How we use information
- Provide call coverage, lead capture, booking requests, and Google profile operations the shop has authorized.
- Keep each organization’s data isolated from every other organization.
- Verify webhooks, prevent abuse, and investigate incidents.
- Reply to contact and pilot inquiries.
- Improve prompts and workflows using aggregated or owner-reviewed outcomes—not by selling caller lists.
We do not sell personal information. We do not use review gating or pay for reviews. We do not use caller recordings to train public AI models.
Processors
We use service providers to host the app, store data, place and receive calls, send messages the shop authorizes, and connect Google Business Profile. Those providers process data only to deliver the service. Current categories include cloud hosting, PostgreSQL hosting, voice AI telephony, email delivery, and Google APIs.
Retention
- Account and shop configuration: while the account is active, then as needed to close the relationship and meet legal duties.
- Call recordings and transcripts: minimized; retained only as long as the shop needs for operations, quality review, or legal hold, then deleted or made inaccessible.
- OAuth tokens: until the owner disconnects Google or the account is closed.
- Contact form submissions: as long as needed to respond, typically under 24 months unless a longer conversation continues.
- Server logs: typically 90 days unless needed for a security investigation.
Security
Production traffic uses HTTPS. Tenant queries are scoped from trusted server context, not from an organization ID supplied by the browser as authorization. Integration secrets and Google refresh tokens are encrypted. Webhook signatures are checked against the untouched raw body. We avoid logging full transcripts, recordings, access tokens, and unnecessary personal fields.
No internet service is perfectly secure. Owners should use a unique password and keep transfer numbers under their control.
Your choices
Business owners can request access, correction, or deletion of their account data, and can ask us to disconnect Google access. Callers should contact the plumbing business they called; we will help that business fulfill a valid request that applies to data we store for them.
Email hello@plumber361.com for privacy requests. We may need enough information to verify the request and the relevant shop.
Children
Plumber361 is built for plumbing businesses, not for children. We do not knowingly collect information from children under 13.
International transfers
We operate from British Columbia. Processors may store or process data in Canada, the United States, or other countries where they run infrastructure. Where those transfers happen, we rely on the safeguards those providers offer and on the contracts we have with them.
Changes
If this policy changes in a material way, we will update this page and revise the effective date. Continued use of the service after the update means the new policy applies to later use.
Contact
Privacy questions: hello@plumber361.com. Company pages: Contact, Terms of use.