Privacy Policy

Introduction

bmango LLC ("we", "our", "us", or "SepticReminder") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and service located at septicreminder.com (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, do not use the Service.

Information We Collect

We collect several types of information from and about users of our Service:

Personal Information You Provide

When you purchase our service, we collect the following personal information directly from you:

• Contact Information: Name, email address, zip code, and phone number (for Premium plan subscribers only)
• Household Information: Household size, number of bedrooms, presence of garbage disposal
• Septic System Details: Tank size (in gallons), system type, last pump date, last inspection date
• Plan Selection: Whether you chose Base ($39) or Premium ($59) plan

Payment Information

Payment processing is handled by Stripe, Inc., a third-party payment processor. We do not see, collect, or store your credit card numbers, CVV codes, or banking information. Stripe collects and processes this information on our behalf in compliance with PCI DSS standards.

Automatically Collected Information

When you access the Service, we may automatically collect certain information about your device, including:

• IP address and general location information
• Browser type and version
• Operating system
• Pages visited, time spent on pages, and referring website
• Date and time of access

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: Calculate your personalized septic maintenance schedule based on EPA guidelines and your specific household and system details
• Reminders: Send maintenance reminders via email (all plans) and text message (Premium plan only)
• PDF Generation: Create and deliver your personalized maintenance schedule PDF
• Customer Support: Respond to your inquiries, troubleshoot problems, and provide assistance
• Service Improvement: Analyze usage patterns to improve our Service, develop new features, and enhance user experience
• Legal Compliance: Comply with applicable laws, regulations, legal processes, or government requests
• Fraud Prevention: Detect, prevent, and address fraud, security issues, or technical problems

How We Store and Protect Your Information

Your personal information is stored securely in a PostgreSQL database hosted by Supabase, Inc. We implement industry-standard security measures including:

• Encryption at rest and in transit using TLS/SSL protocols
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and updates
• Database backups to prevent data loss

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Third-Party Service Providers

We use the following third-party service providers to operate our Service:

• Stripe, Inc.: Payment processing (PCI-DSS compliant). We never see your credit card information.
• Supabase, Inc.: Secure database hosting for your account information and system details.
• Resend, Inc.: Transactional email delivery for maintenance reminders and system communications.
• OpenAI, Inc.: AI-powered content generation for personalized maintenance tips and schedule formatting (no personally identifiable information is sent to OpenAI).

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Cookies and Tracking Technologies

Our Service uses cookies and similar tracking technologies to enhance user experience and analyze usage patterns. Cookies are small data files stored on your device.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly, including authentication and security.
• Analytics Cookies: Help us understand how visitors interact with our Service by collecting anonymous usage statistics.

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use all portions of our Service.

Data Retention

We retain your personal information for as long as necessary to provide you with the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Active Accounts: Your data is retained indefinitely while you use the Service to continue sending maintenance reminders.
• Deleted Accounts: Upon your request for deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal, tax, or regulatory purposes (typically 7 years for financial records).
• Inactive Accounts: If you do not engage with our reminders for 5 consecutive years, we may contact you to confirm you wish to continue the service. If we receive no response after 60 days, we may delete your account.

International Data Transfers

Your information may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

Our servers and third-party service providers are primarily located in the United States. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there.

By using the Service, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

General Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Opt-Out: Unsubscribe from reminder emails (though this defeats the purpose of the Service). Premium users can also opt out of text messages.
• Data Portability: Request a machine-readable copy of your personal information for transfer to another service.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purpose for collection, and the third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@septicreminder.com. We will respond to your request within 45 days.

Children's Privacy (COPPA Compliance)

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Septic system ownership and maintenance is an adult responsibility.

If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe we might have information from or about a child under 13, please contact us at privacy@septicreminder.com.

Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and relevant regulatory authorities as required by applicable law. Notification will be made without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

Breach notifications will include:

• Description of the breach and the types of data affected
• Likely consequences of the breach
• Measures we have taken or will take to address the breach
• Recommended actions you can take to protect yourself

Do Not Track Signals

Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Because there is not yet a common understanding of how to interpret DNT signals, our Service does not currently respond to DNT browser signals.

Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending you an email notification to the email address associated with your account

We encourage you to review this Privacy Policy periodically. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after we post modifications constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: