PRIVACY

Privacy Policy

Last updated: October 8, 2026

This policy explains how VMT Services and Repair Corp., operator of VMT Contractor Suite, collects, uses and protects information when companies and their authorized users use the service.

1. Information we collect

We collect account and business information such as names, email addresses, telephone numbers, company details and user roles. Customers may enter project, customer, employee, estimate, invoice, change-order, document and communication data. We also process technical information such as IP address, device and browser information, login events, security logs and service usage.

2. Payment information

Subscription payments are processed by Stripe. We do not store complete payment-card numbers. Stripe may collect payment, identity and billing information under its own privacy policy. We receive transaction identifiers, subscription status and limited billing details needed to administer your plan.

3. How we use information

We use information to provide and improve the service; authenticate users; separate each company's workspace; process subscriptions; send requested documents and service messages; prevent fraud and abuse; troubleshoot problems; maintain backups; comply with law; and provide customer support.

4. AI-assisted features

When a user chooses an AI-assisted feature, relevant content may be sent to a contracted technology provider to generate the requested result. AI features are not included in every plan. Users must review generated content before use. We do not sell customer project data for advertising.

5. When information is shared

We share information only with service providers needed to operate VMT Contractor Suite—such as hosting, database, email, payment, monitoring and AI providers—under appropriate contractual or security controls; when directed by the customer; in connection with a lawful business transfer; or when required to comply with law or protect rights and safety.

6. Data separation, security and retention

Company data is logically separated by account. We use access controls, encryption in transit, secure password hashing, logging and backups designed to protect information. No system is completely secure. Information is retained while an account is active and afterward only as reasonably necessary for legal, security, backup and operational purposes.

7. Choices and rights

Authorized account owners may review or correct company information through the service. Verified requests for access, export or deletion may be submitted by email. Some information may be retained where required for billing, fraud prevention, dispute resolution, backup integrity or legal compliance.

8. Cookies and similar technology

We use essential browser storage and cookies for authentication, security and core functionality. We may use limited operational analytics to understand reliability and usage. We do not use customer project data for behavioral advertising.

9. Children and international use

The service is intended for businesses and is not directed to children under 13. If information is processed from outside the United States, it may be transferred to and stored in the United States or other locations where our providers operate.

10. Optional Google and Gmail connection

A company administrator may connect a Google account and select Gmail to send company documents. We request only basic account identification (openid and email) and permission to send email (gmail.send). We use the verified email address to identify the sender and the sending permission to deliver invoices, estimates, change orders, receipts, statements and work authorizations requested through the service. This connection does not give us permission to read, search or download your inbox, contacts or existing messages.

We store the connected email address, connection status and an encrypted refresh token associated with the company. Short-lived access tokens are used by our server to call Google. We transmit the selected recipients, message content, document links and any selected attachments to Google for delivery, and retain sending identifiers and document-delivery records. These records are separate from confirmation that a recipient has read a message.

Google account data is used only to provide and secure this connection and the requested sending functionality. We do not sell it, use it for advertising, or use it to train generalized AI or machine-learning models. It is processed by our hosting infrastructure and Google as necessary to operate the integration, and shared with recipients only as directed by the company. VMT Contractor Suite's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Gmail in Settings → Email Delivery. Disconnecting removes the company's stored connection credentials from the active database and stops Gmail sending for that company; existing business documents and delivery records remain subject to the retention policy above. Protected backups may retain prior records under that policy. You can also revoke the application's Google access in your Google Account connections; doing so affects every connection using that Google account and this application. Contact us to request deletion of retained Google account data.

11. Updates and contact

We may update this policy and will post the revised date. Privacy questions and verified requests may be sent to vmtcontractorsuite@gmail.com.