Privacy Policy

For your account: when you sign up, we decide how your account information is handled. In privacy law terms we are the controller of that data.

For your customer records: when you add your customers, properties, tanks, and service history, that data is yours. We only process it to run the service for you and on your instructions. In privacy law terms we are a processor, and you are the controller. You are responsible for having the right to collect and store that information about your customers.

• •Account information — your name, email address, company name, phone number, and business address. Passwords are stored only as salted hashes; we never see your password.
• •Billing information — your plan, subscription status, billing interval, and trial dates, plus identifiers issued by Stripe. We never receive or store your card number. Card details go directly to Stripe.
• •Business data you enter— your customers’ names, addresses, phone numbers and emails; property, tank and drain-field details; service records including gallons pumped, disposal sites and tank condition; photos, signatures, site sketches, checklists, invoices and payment status.
• •Usage and device data — pages viewed, approximate location (from IP), browser and device type, referring URL, and similar analytics collected via Google Analytics.
• •Technical logs — IP address, timestamps, and error diagnostics, kept for security and debugging.

• •To provide the service — scheduling, dispatch, invoicing, payments, reminders and reporting.
• •To bill you, and to tell you about trial, payment or subscription events.
• •To send transactional email on your behalf (invoices, service reminders, review requests and win-back offers to your customers).
• •To secure the service, prevent abuse, and debug problems.
• •To understand aggregate product usage so we can improve SeptiBase.
• •To respond to you when you contact support.

We do not sell your data, and we do not share it for cross-context behavioural advertising.

We use a small number of subprocessors to run SeptiBase. Each receives only what it needs:

• •Supabase — database, authentication and file storage. Your account and business data live here, hosted in the United States.
• •Vercel — application hosting and content delivery.
• •Stripe — subscription billing, and (if you enable it) processing card payments from your own customers. Stripe handles card data under its own privacy policy.
• •Resend — delivery of transactional email.
• •Anthropic — powers optional AI features on the Company plan (see section 5).
• •Google — Google Analytics for usage analytics, and Google Maps for map and satellite imagery.

We may also disclose data if required by law, to enforce our terms, or in connection with a merger or acquisition — in which case we’ll give you notice.

On the Company plan, features such as Ask Your Data and AI-generated service reports send data from your account to Anthropic to generate a response.

What gets sent is aggregated business information— counts of customers and jobs, job dates, statuses, service types and gallons pumped, invoice totals and payment status, service-due dates, and the names and roles of your team members — together with the question you typed. Your customers’ names, addresses, phone numbers and email addresses are not included in that context.

Under Anthropic’s commercial API terms, data submitted through the API is not used to train their models. AI answers can be wrong or incomplete — don’t rely on them as your only source for a business or compliance decision.

We use essential cookies to keep you signed in. These are required for the app to work.

We also use Google Analyticsto understand how the site and app are used. You can opt out with Google’s browser add-on, or by using your browser’s tracking-protection settings.

We keep your account and business data for as long as your account is active. If you cancel, we retain your data for a limited wind-down period so you can reactivate or export it, after which it is deleted from our active systems. Backups age out on their own schedule. Records we’re legally required to keep — invoices and tax records, for example — are retained as long as the law requires.

You can request deletion at any time (see section 9).

Data is encrypted in transit (TLS) and at rest. Access to your organisation’s records is enforced at the database level with row-level security, so one company’s data is not reachable by another. Access by our staff is limited to what’s needed to operate and support the service.

No system is perfectly secure. If a breach affects your data, we will notify you as required by applicable law.

• •Access and export — you can export your customers, jobs and invoices to CSV from Settings at any time.
• •Correction — you can edit your account and business records directly in the app.
• •Deletion — you can ask us to delete your account and data by emailing us.
• •Email preferences — transactional messages (invoices, receipts, security notices) are part of the service. Marketing email, if any, always includes an unsubscribe link.

California residents: under the CCPA/CPRA you have the right to know what personal information we collect, to request deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined. To exercise a right, email us at the address below.

If you are one of our customer’s customers and want your information changed or removed, please contact the septic company you did business with — they control that record. If you contact us, we will refer your request to them.

SeptiBase is operated from and hosted in the United States. If you access it from elsewhere, you understand your data is processed in the U.S.

SeptiBase is business software and is not directed at anyone under 18. We don’t knowingly collect personal information from children.

We may update this policy as the product changes. We’ll update the date at the top, and for material changes we’ll notify account holders by email or in the app.

Questions, requests, or anything that looks wrong — email joel@theskyfloor.com.

SeptiBase, operated by The Sky Floor
10611 Maple Grove Rd
Charlevoix, MI 49720