Privacy Policy

Last updated: March 10, 2026

This Privacy Policy describes how Promethean ("we," "us," or "our") collects, uses, and shares information when you use our platform and services. It also describes the rights you and your customers have over that information.

1. Information We Collect

From field service businesses (our customers):

• Business name, contact name, email address, and phone number provided at registration
• Billing information (processed securely by our payment provider; we do not store card numbers)
• Configuration preferences (auto-reply text, business branding, service categories)
• Usage data (number of inbound contacts, messages sent, dashboard activity)

From end customers (callers and form submitters):

• Phone number (captured when a call is received or forwarded)
• Name, email address, and service address (provided via the booking form)
• Service type, urgency level, and any description of the requested work
• Optional: photo URLs provided by the customer
• Message content of any inbound SMS messages sent to the business number

Automatically collected:

• IP addresses and browser/device information for security and analytics
• Timestamps of form submissions and message events

2. How We Use Information

We use the information we collect to:

• Deliver automated SMS responses to missed calls on behalf of the field service business
• Present and process customer service requests submitted through booking forms
• Notify field service business operators of new inbound requests via email
• Display job records in the business operator's dashboard
• Process billing and manage subscriptions
• Improve the reliability and performance of our platform
• Respond to support requests and communicate service updates

We do not use end customer data for marketing, advertising, or any purpose unrelated to delivering the service request initiated by the customer.

3. SMS Messaging

When a customer calls a business number that forwards to Promethean and the call is missed, we send an automated SMS to the caller on behalf of the field service business. This message identifies the business by name and provides a link to submit a service request.

When a customer submits a booking form, they are providing their contact information and consenting to receive follow-up communications from the field service business about their request.

We do not sell, rent, or share customer phone numbers with third parties for marketing purposes. Phone numbers are used solely to deliver the service confirmation and booking messages described above.

Customers may opt out of future SMS messages by replying STOP to any message. Opt-out requests are honored promptly.

4. Information Sharing

We share information only in the following circumstances:

• With the field service business: Customer contact information and service request details are shared with the business operator who the customer contacted. This is the core function of the service.
• Service providers: We use third-party providers to deliver key functions, including Twilio (SMS and voice delivery), Supabase (database), Resend (email), and Stripe (payments). These providers process data only as directed by us and under appropriate data processing agreements.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, with advance notice provided.

We do not sell personal information to third parties.

5. Data Retention

We retain job records and customer contact information for as long as the field service business maintains an active Promethean account, plus 90 days after account closure. Businesses may request deletion of their data and their customers' data at any time by contacting us.

6. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted database storage, and access controls. Twilio webhook signatures are validated on every inbound request. We conduct periodic security reviews of our infrastructure.

No system is 100% secure. We encourage businesses to use strong passwords and to contact us immediately if they suspect unauthorized access to their account.

7. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Request a portable copy of your data
• Opt out of certain processing activities

To exercise any of these rights, contact us at hello@usepromethean.com. We will respond within 30 days.

8. Cookies

Our platform uses essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies. Our marketing website may use basic analytics to understand traffic patterns; this does not involve personal identification.

9. Children's Privacy

Our Services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify business account holders of material changes by email. The effective date at the top of this page will reflect the most recent revision. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

11. Contact Us