Privacy Policy

Last Updated: November 7, 2026

SkipperTrax is a product and service of PHM Enterprises LLC, a Florida limited liability company (“PHM”, “we”, “us”). References to either name in this policy refer to the same business. Some features described here exist only in some PHM products or plans.

1. Who This Policy Covers, and Our Role

SkipperTrax is software that businesses use to run their work. This policy covers two kinds of information:

  • Information about our own users — the business owners and staff who sign in, and visitors to our websites. For this information, PHM decides how it is used.
  • Information a business keeps in SkipperTrax about other people — its customers, contacts, tenants, owners, vendors and employees. The business decides what it collects and how it uses it; PHM stores and processes it on the business’s behalf, only to provide SkipperTrax to that business. If you are a customer, tenant or employee of a business that uses SkipperTrax, please send requests about your information to that business first; we will help them respond, and you can also contact us at support@skippertrax.com.

2. Information We Collect

  • Account information: name, email address, mobile phone number, company details, role, and sign-in records (including passkeys and the devices you sign in from).
  • Business records: customers, contacts, properties, tenants and leases, leads, quotes, jobs and visits, invoices, payments records, notes, tasks, photos, files, signatures, messages and call records, and anything else a business enters or imports.
  • Staff work records: time clock entries, timesheets, job assignments and, where the business uses them, employee records.
  • Location: see section 4.
  • Payments: card and bank payments are entered on Stripe’s pages and processed by Stripe; we do not receive or store full card or bank account numbers. We keep the payment’s amount, date, status and reference.
  • Communications: emails and texts sent through SkipperTrax and their delivery status, replies, and — if a business uses our phone features — missed-call records and voicemail recordings.
  • Device and usage data: IP address, browser and device type, pages viewed, timings, error logs, and push-notification tokens.

3. How We Use Information

  • To provide, maintain, secure and support SkipperTrax, and to do what you ask it to do (send a quote, sync a calendar, take a payment)
  • To communicate with you about your account, billing and changes to the service
  • To send one-time passcodes and verification codes for account security, when you choose SMS delivery
  • To improve SkipperTrax and fix problems
  • To prevent fraud and abuse, and to comply with legal obligations

We do not sell personal information, and we do not use the business records you keep in SkipperTrax for advertising or to train artificial-intelligence models.

4. Location

  • While the app is open: to find nearby customers, places and addresses, to show which job you have arrived at, and to save a location on a record when you choose to.
  • Mileage tracking, including in the background: if mileage tracking is turned on, our iPhone app records your location while you drive — including when the app is in the background or the screen is locked — to log trips and miles between jobs. It needs your permission (“Always” location on iPhone), shows that tracking is active, and stops when you turn mileage tracking off or change the permission in your device’s Settings. A company administrator can turn tracking on as a default for new devices; the person’s own device setting always wins.
  • Who sees it: trips and location points are stored with your user account in your company’s SkipperTrax account, and the company’s administrators can see them. They are kept for the period the company sets, then deleted.
  • We never sell location data or use it for advertising.

5. Phone Numbers and SMS Messaging

If you provide a mobile phone number and consent to SMS, it is used solely to deliver the transactional messages you agreed to:

  • App users: one-time passcodes, login verification codes and password-reset codes for account security, and — only if you switch them on — work alerts about work assigned to you.
  • Customers of a business that uses SkipperTrax, who agreed to text updates from that business: service messages about work you requested — appointment confirmations, reminders, changes and cancellations, “on my way” and weather notices, links to quotes, invoices, statements and documents to sign, and replies to your own messages or missed calls. Each names the business it is from.

We do not send marketing or promotional messages from SkipperTrax’s shared texting number. A business that has its own registered texting number may send its customers service-due reminders from that number, only to customers who gave it marketing consent; that business is responsible for those messages, and STOP works the same way.

We do not sell, rent, or share your mobile phone number or SMS opt-in data with third parties or affiliates for their marketing or promotional purposes. For our SMS program, mobile numbers are sent only to our SMS delivery provider (Twilio) strictly to transmit the messages you have agreed to receive. Phone numbers in a business’s records may also be synced to integrations that business connects, as described in section 6. Message and data rates from your mobile carrier may apply.

Message frequency varies with activity; the expected ranges for each kind of message are on the SMS Consent & Messaging Program page.

You may opt out of SMS messages at any time by replying STOP to any message we send, or by removing your phone number from your account. Reply HELP to any message for help, or contact support@skippertrax.com. Opting out of SMS will not affect your ability to use SkipperTrax, but may require you to use email-based authentication instead.

Full disclosure of the SMS Messaging Program is available at SMS Consent & Messaging Program.

6. Who We Share Information With

We share information only as needed to provide SkipperTrax, with these kinds of service providers, each limited to its job:

  • Hosting: our servers are hosted with a data-center provider in the United States.
  • Messaging: Twilio (text messages, phone numbers, voicemail) and SendGrid (email).
  • Payments: Stripe (payments a business takes from its customers, and our own subscription billing); Apple, for subscriptions bought in our iPhone and iPad apps.
  • AI: Anthropic (Claude), OpenAI and xAI (Grok), to answer requests a signed-in user makes of an AI feature, through their paid business APIs under terms that prohibit using what we send to train their models.
  • Maps, addresses and weather: Google Maps Platform and OpenStreetMap (address lookup, maps and directions) and Open-Meteo (weather for route days), which receive addresses or coordinates.
  • Notifications: Apple (push notifications to your devices).

Integrations you choose to connect receive what is needed for the feature you turned on: QuickBooks (Intuit), Microsoft 365 (calendar, contacts, email, OneDrive/SharePoint copies), Google (section 8), Apple iCloud (contacts import) and OpenPhone. If you connect your own AI client (for example Claude, ChatGPT or Grok) to your account, the records it asks for are sent to that AI provider under your own agreement with them, limited to what your role can see; you can disconnect it at any time.

We may also disclose information when the law requires it, to protect the rights, safety and security of our users or others, or as part of a merger, acquisition or sale of our business (in which case this policy continues to apply to it). We do not share information with third parties for their own marketing.

7. Our Mobile Apps

The SkipperTrax app for iPhone and iPad shows the same account as the website. It asks for the following only when you use the feature that needs it, and you can say no or change your answer at any time in your device's Settings:

  • Location: while the app is open, for nearby places and arriving at jobs; and, only if you turn on mileage tracking and allow “Always”, in the background to log your trips (section 4). Never used for advertising.
  • Camera and photos: to attach the photos you take or pick to your records. The app only sees the photos you choose.
  • Notifications: if you allow them, your device's push token is stored with your account so messages about your work reach that device. Signing out removes it.

The apps contain no advertising and no third-party tracking or analytics code, and we do not track you across other companies' apps or websites. Page views, timings and error logs are kept on our own servers with your user ID, to support you and keep the service running.

8. Google User Data

If you choose to connect a Google account, SkipperTrax asks for access to the following, and uses it only for the purposes listed:

  • Basic profile (name, email address): to identify which Google account you connected.
  • Google Calendar (read your calendar list and events; create, update and delete events): to show your Google Calendar alongside your SkipperTrax schedule, and to keep appointments and jobs you schedule in SkipperTrax in sync with your Google Calendar.
  • Google Contacts (read and write): to let you import people from your Google Contacts into SkipperTrax (you choose which contacts are imported; only the ones you select are saved), and to keep the contacts you choose to sync the same in both places — when you sync a contact, SkipperTrax creates or updates it in your Google Contacts (name, company, email, phone numbers, addresses, website and note), and brings changes you make in Google back in. SkipperTrax never deletes anything from your Google Contacts.
  • Google Drive (only the files and folders SkipperTrax creates): if a company administrator turns on the cloud-drive copy, to save a copy of the company's SkipperTrax files into a folder in that Google Drive and keep it up to date. The copy is one way. SkipperTrax cannot see, open or change any other file in your Drive, and never deletes anything there.

How it is stored. Access tokens are encrypted and stored on our servers so the connection keeps working. Calendar events and the contacts you import or sync are saved in your SkipperTrax account as your business records.

Sharing. We do not sell Google user data, and we do not share it with anyone except as needed to provide the features above, to comply with the law, or with your consent. Google user data is not used for advertising, is not used to train artificial-intelligence or machine-learning models, and is not read by people except with your permission, for security purposes, or as required by law.

AI features. SkipperTrax does not use data obtained through Google Workspace APIs (including Google Calendar, Google Contacts and Google Drive) to develop, improve or train generalized or foundational artificial-intelligence or machine-learning models, and does not transfer that data, whether raw, aggregated, anonymized or derived, to anyone who would. Some features use an AI model to answer a request a signed-in user makes, such as the in-app Assistant. Contacts or appointments that came from Google may be included in that request only when they are part of the user's question, and only for answering it. These requests go only to the AI providers listed here, through their paid business APIs, under terms that prohibit using what we send to train their models: Anthropic (Claude), OpenAI and xAI (Grok). We do not send Google user data through AI aggregators or model gateways.

Removing access. You can disconnect Google at any time from your integration settings in SkipperTrax, or revoke access from your Google Account at myaccount.google.com/permissions. To have imported contacts or synced events deleted, delete them in SkipperTrax or contact us at support@skippertrax.com.

SkipperTrax's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Security

We use reasonable administrative, technical and physical safeguards to protect information, including encryption in transit (HTTPS), encrypted storage of connection tokens, access controls by role, and separation between companies’ data. No system is completely secure, and we cannot guarantee that information will never be accessed without authorization. If we learn of a security breach affecting your information, we will notify the affected business and, where required, the affected people and authorities, without unreasonable delay and within the time the law requires.

10. Data Retention

  • While an account is active, we keep its records so the business can use them.
  • Deleted items go to Recently Deleted and are permanently removed after 30 days by default.
  • Location points are kept for the period the company sets (section 4).
  • Server logs (sign-ins, errors, page views and change history) are kept for 30 to 90 days, depending on the log.
  • After a subscription ends, the account stays available read-only, including export, for at least 30 days.
  • When an account is deleted, sign-in is blocked immediately. Within 90 days of the request we delete or de-identify the account’s data, except what we must keep for legal, tax, billing, dispute or security reasons, and backup copies, which are overwritten on our regular backup cycle.
  • SMS opt-in records are kept for the life of the account plus a reasonable period afterwards, to show that messages were sent with consent.

11. Your Choices and Rights

You can see and correct most of your information in SkipperTrax itself, export your company’s data at any time (Import & Export, in the Admin area), and ask us to access, correct or delete your personal information, including your phone number and SMS preferences, at support@skippertrax.com. You can also delete your account from inside SkipperTrax: My Account → Settings → Privacy → Delete My Account. We may need to verify your identity, and some information may be kept as described in section 10. If the information is a business’s record about you (section 1), we will pass your request to that business or ask you to contact it. We will not treat you differently for using these rights.

12. Children

SkipperTrax is a business tool for adults. It is not directed to children under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

13. Where Information Is Processed

PHM is based in the United States, and information is stored and processed in the United States.

14. Changes to This Policy

We may update this policy; the date at the top shows the latest version. For a material change we will give notice by email or in the app before it takes effect, and material changes affecting SMS messaging are always communicated in advance.

15. Contact Us

For privacy inquiries, contact PHM Enterprises LLC at support@skippertrax.com.