Privacy Policy

Contact form. When you submit our contact form we collect the information you enter: your first and last name, email address, phone number (optional), the service categories you select, and your message. Submissions are delivered to a shared administrative inbox, where a member of staff reviews each one and passes it to the right company and team. We use this information solely to respond to your inquiry and to provide the services you ask about.

Analytics. We use Google Analytics to understand how the site is used — pages viewed, approximate region, browser and device type, and how visitors arrive. This uses cookies and similar technologies. It tells us about traffic patterns, not who you are. You can opt out using Google’s browser add-on.

Server logs. Our hosting provider records standard technical data such as IP address, timestamp, and requested page, for security and reliability.

Fonts. Typefaces are loaded from Google Fonts, which means your browser’s IP address is visible to Google when a page loads.

Avalon HQ accounts are created by Avalon administrators for staff and authorized crew. You cannot sign up for one yourself.

Account information. Your name, work email address, phone number (optional), and assigned role. Passwords are stored only as salted cryptographic hashes — we never store or have access to your actual password.

Work records. Work orders assigned to you, completion notes, hours recorded, and completion timestamps, along with the customer and property information needed to perform the work.

Photos. The app can access your camera and photo library only when you choose to attach a photo to a completed work order. Photos you attach, and any caption you add, are uploaded to our systems as a record of completed work. The app does not browse, scan, or upload anything from your photo library in the background, and it accesses the camera only while you are actively taking a photo for a work order.

Security and audit records. To protect company and customer data, we log significant actions taken in the app — what was changed, by which account, when, and the IP address the request came from. We also record failed sign-in attempts so accounts can be locked after repeated failures.

On your device. Sign-in tokens are stored in your device’s secure keystore (iOS Keychain). Signing out removes them.

To be explicit, because these are the questions people most often have:

• We do not track your location. The Avalon HQ app does not request, collect, or store GPS or location data, and it does not track employee whereabouts.
• We do not sell or rent personal information to anyone, and we never have.
• We do not use your information for advertising, and we do not share it with advertising networks or data brokers.
• We do not track you across other apps or websites.
• There is no third-party analytics or advertising SDK in the mobile app. The analytics described in section 1 apply to this website only.

We use the information described above to:

• respond to inquiries and provide construction and property maintenance services;
• assign, track, and document work orders, and maintain a record of completed work;
• authenticate users and keep accounts secure;
• investigate misuse, troubleshoot problems, and maintain reliability;
• meet legal, tax, insurance, and contractual obligations.

We share information only with providers that help us operate, and only as needed for them to do so. They may not use it for their own purposes.

We may also disclose information where required by law, or to protect the rights, property, or safety of Avalon, our employees, or our customers.

Work orders, completion records, and work photos are business records and are retained for as long as needed for warranty, insurance, tax, and legal purposes. Account records are kept for the duration of employment or engagement, and for a reasonable period afterwards. Contact-form inquiries are kept for as long as needed to respond and maintain the customer relationship. Security and audit logs are retained on a rolling basis.

All traffic between the app and our servers is encrypted in transit using HTTPS. Passwords are stored only as salted hashes. Access is role-based, so staff see only what their role requires, and accounts lock after repeated failed sign-in attempts. Work-order photos are stored in access-controlled cloud storage and served through short-lived signed links rather than public URLs.

No system is perfectly secure, but we take these safeguards seriously and review them as the application changes.

You may ask us to confirm what personal information we hold about you, provide a copy, correct anything inaccurate, or delete information we are not required to retain. Utah residents have these rights under the Utah Consumer Privacy Act; we extend the same handling to everyone who asks, regardless of where you live.

Because we do not sell personal information or use it for targeted advertising, there is nothing to opt out of on that front.

To make a request, contact us using the details below. We may need to verify your identity before acting, particularly for deletion requests.

App account deletion. Avalon HQ accounts are issued and removed by Avalon administrators. If you are a current or former employee or crew member and want your account deactivated or your personal information removed, contact us and we will handle it, subject to records we are legally required to keep.

Neither this website nor the Avalon HQ app is directed to children. Avalon HQ is a workplace tool for adults, and we do not knowingly collect personal information from children under 13.

If we change how we handle personal information, we will update this page and revise the date at the top. Significant changes affecting Avalon HQ users will also be communicated directly.

Questions about this policy, or requests about your information: