Privacy Policy
Effective October 23, 2026
This policy explains how Aventum ("we", "us") handles information in our websites and in One, the CRM and back office we provide to home service businesses ("clients"). One is used by our clients and their team members ("users"). Questions: [email protected].
Who is responsible
Each client controls the information about its own customers in its copy of One. We process that information on the client's behalf to provide the service. For information about our own website visitors and clients, we are responsible.
Information we handle
- Account information: users' names, email addresses and sign-in details.
- Client customer information: what a client's customers provide through the client's website forms, texts and calls: names, phone numbers, email and service addresses, job details, photos, messages, estimates, appointments and payments recorded.
- Google user data: only when a user connects their Google account (see Google user data below).
- Technical information: basic logs (time, IP address, browser) needed to run and secure the service.
How we use information
- To provide One: answering and organizing leads, drafting estimates and messages for the client to approve, scheduling, reminders, and review requests.
- To support, secure and improve the service, and to meet legal obligations.
We do not sell personal information, and we do not use it for advertising.
Google user data
A user can connect their Google account to One. One asks only for the permissions below, uses the data only to provide the features the user sees in One, and never shows Google data to anyone outside the user's own business.
| Permission | What One does with it |
|---|---|
Google Calendar free/busy (calendar.freebusy) | Reads when the user is busy, so appointment times One offers to their customers don't clash. Event details are not read. |
Google Calendar events (calendar.events) | Adds booked jobs to the user's calendar, and updates or removes those same events when a job is moved or cancelled. One only changes events it created. |
Google Business Profile (business.manage) | Reads the business's locations and reviews, so One can show new reviews and match them to the business's customers. One does not post, edit or delete anything on the profile. |
Gmail send (gmail.send), if enabled | Sends emails the user writes or approves to their own customers, from the user's own address. One does not read the user's mailbox. |
Basic profile (openid, email) | Identifies which Google account is connected. |
- Storage: One stores the connection's access tokens and only the data it needs: busy times are used when finding appointment times and not kept; event IDs for jobs it created; reviews and their match to a customer.
- Sharing: Google user data is not sold, not used for advertising, and not shared with anyone except the service providers that host One (below), as needed to run it. People do not read it unless the user asks us for support, it's needed for security, or the law requires it.
- AI: Google user data is not used to train artificial intelligence or machine learning models.
- Limited Use: One's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Disconnecting and deletion: a user can disconnect Google in One at any time (Jobs → Settings), or remove One's access at myaccount.google.com/permissions. When disconnected, One deletes the stored tokens. To have stored Google data deleted, email [email protected]; we delete it within 30 days.
Text messages
One sends text messages for each client to that client's customers who agreed to receive them, as described on the client's website. Mobile information and texting consent are not shared with third parties or affiliates for marketing or promotional purposes. Customers can reply STOP to any message to opt out, or HELP for help.
Service providers
We use these providers to run One, each under its own security and privacy commitments: Cloudflare (hosting), Supabase (database), Telnyx (texts and calls), Anthropic (AI that drafts messages and estimates for the client to approve), and Google (calendar, reviews and email, when connected). Google user data is not sent to the AI provider.
Security
Data is encrypted in transit, each client's copy of One is separate, and access is limited to the client's users and to us when providing support.
Keeping and deleting information
We keep information while a client uses One. When a client leaves, we delete their copy of One and its data within 90 days, unless the law requires us to keep something longer. A client's customer who wants their information removed can ask the client or email us.
Changes
We'll update this page when our practices change, and change the date above.
Contact
Aventum · [email protected]