What the Prestige system uses—and why.

Data connected to core features

• Personal information: name, email, phone, company, and account identifier for accounts, service delivery, support, and security.
• App activity and user content: requests, orders, appointments, messages, documents, support activity, and safety reports for requested workflows.
• Financial information: transaction amount, receipt, and payment status. The payment processor handles full card credentials.
• Location: pickup, destination, navigation, or job location only when transportation or field work needs it and permission is granted.
• Device and diagnostics: app or browser version, device type, crash and performance details, security events, notification subscription, and network status.

Sharing and processing

Prestige does not sell personal information. Data is processed or shared only as needed for the requested service, account operation, safety, legal compliance, or with contracted providers such as Supabase, Square, Google, Twilio or another messaging carrier, hosting and monitoring services, and an approved field or service partner assigned to the work.

Current permission policy

• Location: allowed only for same-origin transportation, navigation, nearby, and field features.
• Notifications: requested for chosen account and work-status updates.
• Camera and microphone: disabled by the current web application policy.
• Contacts and broad file storage: not requested by the current web application.
• Payments: available only through the configured secure payment flow.

A future native Android release must ask only for permissions required by its active features and must show an in-app disclosure before any sensitive permission when Google Play policy requires one.

Security and control

Data is encrypted in transit. Protected employee functions use server-side identity and role checks, rate limiting, restricted database tables, and audit trails. Customers can request access, correction, or deletion. A deletion request requires account verification, Administrator or Office Manager approval, a cancellable 30-day hold, and a separate final review.

Request account deletion · Read the full Privacy Policy