BookSpruce Privacy Policy
Effective date: November 5, 2026
Last updated: November 5, 2026
BookSpruce ("BookSpruce," "we," "us") provides software that helps plumbing and home-service businesses ("Clients") respond to missed calls and customer messages. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website (currently app.bookspruce.com, and any future BookSpruce domain), our web app, and the text messages sent through our service.
There are two groups of people this policy covers:
- Clients: the businesses that sign up for BookSpruce, and their staff.
- Customers: people who call or text a Client's business phone number, and whose calls or messages are handled by BookSpruce on that Client's behalf.
For Customer information, the Client is generally the business you are dealing with, and BookSpruce acts as its service provider. If you are a Customer with questions about how a specific plumbing business uses your information, you can contact that business directly or contact us using the details at the end of this policy.
1. Information we collect
From Clients
- Account details: name, business name, email address, phone number, password (stored in hashed form by our authentication provider).
- Business details: service area, hours, services offered, pricing guidance, and other information entered into the business info sheet.
- Billing details, if and when paid plans are offered. Payments are processed by a third-party payment processor; we do not store full card numbers.
- Usage data: log-ins, settings, and how features are used.
From Customers (on behalf of Clients)
- Phone number, and the date and time of calls and messages to the Client's business number.
- The content of text messages exchanged with the Client's business number, including replies generated by our automated assistant.
- Information you choose to share in messages, such as your name, address, description of the plumbing problem, and preferred appointment times.
From website visitors
- Basic technical data such as IP address, browser type, pages viewed, and referring site, collected through server logs. We use only the cookies needed to keep you signed in, and no advertising cookies.
2. How we use information
- To provide the service: sending a text when a call to a Client is missed, replying to Customer messages, and passing leads and conversation history to the Client.
- To generate automated replies. Message content and the Client's business info sheet are sent to an AI service provider to draft replies. Our AI provider's business terms do not allow it to use this data to train its models.
- To operate, secure, troubleshoot, and improve BookSpruce.
- To communicate with Clients about their account, support, and service updates.
- To comply with legal obligations and enforce our terms.
We do not sell personal information, and we do not share Customer phone numbers or message content with third parties for their own marketing.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. (This sentence is required by mobile carriers for A2P 10DLC registration. Keep it word for word.)
3. Text messaging (SMS) program
What messages are sent. When a Customer calls a Client's business number and the call is not answered, BookSpruce may send one text message to the calling number to follow up on that call (for example: "Hi, this is Mike's Plumbing! Sorry we missed your call. What can we help with? Reply STOP to opt out."). If the Customer replies, further messages are conversational replies about that service request, such as questions about the job, availability, and scheduling. We do not send marketing or promotional texts to Customers through this program.
Consent. By calling a Client's business number, a Customer initiates contact with that business, and the follow-up text responds to that inquiry. When a call is not answered, a recorded greeting tells the caller that the business may text them at that number, that message and data rates may apply, and that they can reply STOP to opt out. By replying to a text, the Customer agrees to receive further conversational messages about that request.
Message frequency varies based on the conversation. Typically one message per missed call, plus replies to your messages.
Message and data rates may apply.
Opting out. Reply STOP at any time to stop receiving messages from that business number. You will receive one confirmation message, and no further messages will be sent unless you text again or opt back in by replying START. Reply HELP for help, or contact bookspruce@gmail.com.
Carriers are not liable for delayed or undelivered messages. Full SMS terms: https://app.bookspruce.com/sms-terms
Who sends the messages. Messages are sent through our telecommunications provider, Twilio Inc., using phone numbers assigned to each Client.
4. How information is stored
BookSpruce data is stored with Supabase (database and authentication), hosted on cloud infrastructure in the United States (AWS us-east-1). Our app is hosted on Render. Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Access is restricted to authorized personnel and protected by access controls, including row-level security so that each Client can see only its own data.
No system is perfectly secure. If we learn of a security breach affecting your personal information, we will notify affected people and authorities as required by law.
5. Service providers we share information with
We share information only with providers who help us run BookSpruce, under contracts that limit their use of it:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, file storage |
| Render | Application hosting |
| Twilio | Phone numbers, calls, and text messaging |
| Anthropic | Drafting automated text replies |
| Resend (planned) | Sending account and notification emails |
We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, or sale of assets (in which case this policy will continue to apply).
6. How long we keep information
- Client account data: for as long as the account is active, and up to 90 days after closure, unless a longer period is legally required.
- Customer messages and call records: for as long as the Client's account is active, or until the Client deletes them, and then up to 90 days in backups.
- Opt-out (STOP) records: kept as long as necessary to honor the opt-out and demonstrate compliance, and for at least 5 years.
7. Your choices and rights
- Customers can opt out of texts at any time by replying STOP. You can ask us to access or delete your information by emailing bookspruce@gmail.com. We may need to coordinate with the Client whose business you contacted.
- Clients can update account information in the app and can request account deletion by emailing bookspruce@gmail.com.
- Residents of certain states (such as California, Colorado, Connecticut, Virginia, and others) may have additional rights, including to know, correct, delete, and opt out of the sale or sharing of personal information. We do not sell or share personal information for targeted advertising. To make a request, email bookspruce@gmail.com. We will not discriminate against you for exercising these rights.
8. Children
BookSpruce is not directed to children under 13 (or 16 where applicable), and we do not knowingly collect their information.
9. Changes to this policy
We may update this policy. If we make material changes, we will update the date above and notify Clients by email or in the app.
10. Contact us
BookSpruce
Email: bookspruce@gmail.com