Privacy Policy

Effective Date: February 14, 2026 · Last Updated: February 14, 2026

This Privacy Policy explains how Permitdashboard LLC, doing business as Val ("Val," "we," "us," or "our"), collects, uses, and protects your information when you use our mobile application, website, and related services (the "Service"). We take your privacy seriously — it's a core product principle, not an afterthought.

1. Information We Collect

1.1 Information You Provide

Data Type	Purpose	Stored Where
Phone number	Account creation and authentication (OTP)	Our auth server (encrypted)
Schedule entries	Core scheduling functionality	Your device (primary) + server (sync)
Jobsite names & addresses	Schedule context, geofencing	Your device + server
Voice recordings	Speech-to-text processing	Processed in real-time, never stored
Text input	Schedule parsing via NLP	Processed in real-time, not retained
Crew member info	Crew dispatch and assignments	Server (encrypted)
Payment information	Subscription billing	Payment processor (not on our servers)

1.2 Information Collected Automatically

Data Type	Purpose	Stored Where
Device location (opt-in only)	Passive arrival confirmation at registered jobsites	Your device only
App usage analytics	Service improvement	Aggregated, anonymized
Device type & OS version	Compatibility and debugging	Server logs (30-day retention)

2. Our Architecture: Privacy by Design

Val is built with privacy as a core design principle, not an afterthought:

• Voice audio is streamed, processed, and discarded — we do not store recordings
• GCs never see your full schedule — they only see whether you're free, busy, or tentative on a given day
• Job names, client details, and exact addresses are never shared with other users
• All data is encrypted at rest and in transit (TLS 1.3)
• Authentication uses short-lived tokens with minimal claims

3. Location Data

This is where most scheduling apps get it wrong. Here's how we handle location:

3.1 What We Do (When Enabled)

• Compare your device location against jobsites you've registered
• Confirm arrival at known jobsites (passive, no action required from you)
• Over time, learn travel time patterns between your registered jobsites

Note: Location features are being rolled out progressively. Not all location features may be available at launch.

3.2 What We Never Do

• Never track or log locations that don't match a registered jobsite
• Never record visits to residential addresses (unless it's your registered home address)
• Never track visits to supply houses, stores, or personal errands
• Never prompt you with "you're not where you said you'd be"
• Never share your exact coordinates with GCs or other users
• Never build a location history on our servers

3.3 Your Controls

• Location features require explicit opt-in via device permissions
• You can disable location tracking at any time in Settings
• Location data is processed on your device and matched only against registered jobsites
• Disabling location does not affect core scheduling features

4. Availability Sharing

When you share availability with general contractors:

• GCs see fuzzy availability windows only (e.g., "Available Monday AM")
• GCs never see: job names, client names, exact locations, rates, or notes
• Shared availability uses approximate zones (zip code / radius), never exact coordinates
• You control which GCs can view your availability
• You can revoke any share link at any time

5. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process voice and text input into schedule entries
• Send you notifications about schedule changes, weather, and booking requests
• Generate predictive scheduling suggestions (Pro tier and above)
• Improve our AI parsing accuracy (using anonymized, aggregated data only)
• Communicate service updates and security notices
• Process payments for paid subscriptions

6. What We Never Do With Your Data

• Never sell your personal information to third parties
• Never share your schedule data with advertisers
• Never use your data to build profiles for ad targeting
• Never provide your data to your GCs, competitors, or anyone beyond what you explicitly share
• Never train AI models on identifiable user data

7. Third-Party Services

We use the following third-party services to operate Val:

Service	Purpose	Data Shared
Deepgram	Speech-to-text processing	Voice audio (streamed, not stored)
Anthropic	Natural language parsing	Transcribed text (pseudonymous tokens only)
Telnyx	SMS for OTP authentication	Phone number (for OTP delivery)
Payment processor	Subscription billing	Payment details (we never see full card numbers)

Each third-party service is bound by their own privacy policies and our data processing agreements. We select providers that align with our privacy-first approach.

8. Data Retention

• Schedule data: Retained on our servers while your account is active; deleted within 30 days of account deletion
• Voice audio: Not retained — processed in real-time and discarded
• Account data: Retained while your account is active
• Server logs: 30-day rolling retention, then deleted
• Anonymized analytics: Retained indefinitely for service improvement

9. Data Security

We protect your data with:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest on our servers
• Encrypted database storage on your device
• Strict separation between your schedule details and what's shared with GCs
• JWT-based authentication with short-lived access tokens
• Rate limiting and request validation on all API endpoints
• Regular security audits of our codebase

10. Your Rights

You have the right to:

• Access all data we hold about you
• Export your schedule data at any time
• Correct any inaccurate information
• Delete your account and all associated data
• Opt out of location tracking, analytics, or notifications
• Revoke any availability shares
• Withdraw consent for data processing (which may limit Service functionality)

To exercise any of these rights, contact us at privacy@callval.app or use the in-app Settings.

11. Children's Privacy

Val is designed for professional tradespeople and is not intended for use by anyone under 18 years of age. We do not knowingly collect information from minors. If we learn that we have collected data from a minor, we will delete it promptly.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information
• Right to opt out of the sale of personal information (we never sell your data)
• Right to non-discrimination for exercising your privacy rights

13. International Users

Val is currently operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We process data in compliance with applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email at least 30 days before taking effect. The "Last Updated" date at the top reflects the most recent revision.

15. Contact Us

Questions or concerns about your privacy? We take these seriously.

Email: privacy@callval.app

General: hello@callval.app