Privacy Policy

Last updated: March 4, 2026

1. Who We Are

ArbreCRM is a software-as-a-service platform designed for tree service companies. We provide business management tools including client management, quoting, job scheduling, invoicing, and permit tracking.

For questions about this policy, contact us at support@arbrecrm.com.

2. Information We Collect

Account Information

When you create an account, we collect your name, company name, email address, and password (stored as a bcrypt hash — we never store your plain-text password).

Business Data

We store the data you enter into ArbreCRM: client records, quotes, jobs, invoices, permits, equipment records, and related files (photos, signatures). This data belongs to you.

Usage Data

We may collect basic usage information such as pages visited and features used to improve the product. We do not sell this data.

3. How We Use Your Information

  • To provide and operate the ArbreCRM service
  • To process billing and subscription payments via Stripe
  • To send transactional emails (password resets, account notifications)
  • To send SMS notifications through your configured Twilio account
  • To respond to support requests
  • To improve and develop new features

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

ArbreCRM uses the following third-party services to operate:

  • Supabase — Database hosting and file storage (Canada region)
  • Stripe — Payment processing for subscriptions
  • Twilio — SMS notifications (configured per account)
  • Vercel — Application hosting
  • Google — AI search feature (Gemini API)

Each of these services has its own privacy policy governing their use of data.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Supabase in the Canada (ca-central-1) region. Data is isolated per account using tenant-level security. Files (photos, signatures, permit images) are stored in Supabase Storage.

We use HTTPS for all data transmission, bcrypt for password hashing, and JWT tokens for session authentication.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days before permanent deletion. You may request earlier deletion by contacting us.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent at any time

To exercise these rights, contact us at support@arbrecrm.com.

8. Cookies

We use only essential cookies required for authentication and security. See our Cookie Policy for details.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email. Continued use of ArbreCRM after changes constitutes acceptance of the updated policy.