Privacy Policy

August Automation LLC
Effective Date: June 4, 2026
Last Updated: July 21, 2026

1. Who We Are

August Automation LLC ("August Automation," "we," "us," or "our") is a Texas limited liability company operating at augustautomation.co. We build and operate KrewDash, a field service management platform sold to small businesses ("Clients"). This Privacy Policy explains how we collect, use, and protect information from our Clients and their end users.

For privacy questions, contact us at: contact@augustautomation.co

2. Information We Collect

From Clients (business owners and their staff):

• Name, email address, phone number
• Business name, address, and EIN (for SMS registration purposes)
• Login credentials (email and password, managed via Supabase Auth)
• Business operational data (jobs, clients, crew, payments, schedules)

From End Users (clients' customers):

• Name, phone number, email address
• Service address and borough
• Job details and preferences submitted through intake forms
• SMS opt-in consent

Automatically collected:

• Browser type and device information
• IP address and access logs
• Usage patterns within the platform

3. How We Use Information

We use the information we collect to:

• Provide and operate the KrewDash platform
• Send SMS notifications on behalf of our Clients to their customers and crew (appointment confirmations, job assignments, review requests)
• Process job creation, dispatch, scheduling, and payments
• Provide customer support
• Improve the platform
• Comply with legal obligations

We do not sell personal information to third parties.

4. SMS Messaging

By submitting a booking form or providing a phone number to one of our Client businesses, you consent to receive SMS messages related to your service appointment. These messages may include:

• Appointment confirmations
• Status updates
• Crew assignment notifications
• Post-service follow-ups

Message frequency varies based on your service appointments and account activity. Standard message and data rates may apply.

To opt out of SMS at any time, reply STOP to any message. To request help, reply HELP. For support, contact the business directly or email contact@augustautomation.co.

For full SMS program terms see: https://augustautomation.co/terms

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates for marketing or promotional purposes.

5. Google User Data (Google Calendar Integration)

KrewDash offers an optional integration that lets Clients connect their Google Calendar to the platform. This section describes how we handle Google user data if you choose to connect your Google account.

What we access. With your explicit consent via Google's OAuth consent screen, KrewDash requests the following Google Calendar permissions:

• View events on your calendars (calendar.readonly) — used to read the name of your primary calendar when you connect it, and to read the start and end times of events on your connected calendar.
• View and edit events on your calendars (calendar.events) — used to create calendar events on your connected calendar when a job is booked in KrewDash.

How we use it. Google Calendar data is used solely to:

1. Determine your availability — event start and end times on your connected calendar are compared against your business hours so that time slots already occupied on your calendar are not offered to customers on your booking form.
2. Create calendar events for booked jobs — when a job is scheduled in KrewDash, we create a corresponding event on your connected calendar.

What we store. We store your OAuth access and refresh tokens, encrypted at rest with AES-256-GCM, along with the identifier and display name of your connected calendar. We do not store the contents of your calendar events: event details read for availability checking are processed in memory to compute open time slots and are immediately discarded.

What we do not do. We do not share, transfer, or sell Google user data to third parties. We do not use Google user data for advertising. We do not allow humans to read your calendar data, except with your explicit permission (e.g., for support at your request), where required for security purposes, or to comply with applicable law. Google user data is never used to train machine learning or AI models, whether generalized or personalized.

Limited Use disclosure. KrewDash's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access. You can disconnect Google Calendar at any time from the Settings page in KrewDash, which deletes your stored tokens. You can also revoke KrewDash's access from your Google Account at https://myaccount.google.com/permissions. Upon disconnection or revocation, stored tokens are deleted; upon account termination, all stored Google user data is deleted within 30 days.

6. How We Share Information

We share information only as follows:

• With Clients: Business owners and their authorized staff have access to their customers' and crew data within their KrewDash instance.
• With Service Providers: We use Supabase (database and authentication), Twilio (SMS delivery), and Vercel (hosting). These providers process data on our behalf under their own privacy policies. Google user data (Section 5) is stored encrypted in our Supabase database and is not shared with any other provider.
• For Legal Compliance: We may disclose information if required by law, court order, or to protect the rights and safety of our users.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity.

We do not sell, rent, or trade personal information.

7. Data Retention

We retain Client and end user data for as long as the Client account is active. Upon account termination, data is retained for 30 days and then deleted unless a longer retention period is required by law.

SMS logs are retained for 90 days for debugging and compliance purposes.

8. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for OAuth tokens (AES-256-GCM)
• Row-level security on all database records
• Authentication via Supabase Auth
• API keys scoped and rotated regularly

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of SMS communications at any time by replying STOP
• Disconnect Google Calendar and revoke KrewDash's access to your Google data at any time (see Section 5)

To exercise these rights, contact us at contact@augustautomation.co.

10. Children's Privacy

Our platform is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Clients of material changes via email or in-platform notification. Continued use of the platform after changes constitutes acceptance.

12. Contact

August Automation LLC
contact@augustautomation.co
augustautomation.co