Effective October 13, 2026
This policy describes how the Command Center application (the "Application"), operated by Mr. Handyman of Richmond ("we", "us"), collects, uses, and protects information. The Application is an internal management dashboard used by Mr. Handyman of Richmond's owner and staff.
Business records from connected systems. With authorization, the Application reads data from ServiceTitan (jobs, estimates, invoices, appointments, technicians, campaigns, leads, memberships) and QuickBooks Online (accounts and balances, invoices, bills, and financial reports). These records can include customer and vendor names, addresses, phone numbers, email addresses, and amounts owed.
Information entered in the Application. Pipeline stages, follow-up notes, commercial targets and contacts, insurance certificate dates, marketing spend, goals, and settings.
Usage information. Access-code sign-ins (a signed cookie, no personal profile), AI usage records (question text, token counts, cost), and sync logs.
To operate Mr. Handyman of Richmond's business: show revenue, margin, cash, receivables, and schedule; route follow-ups and parts orders; draft collection and renewal messages for staff to review; and produce a daily summary. We do not sell personal information and do not use it for advertising.
Railway hosts the Application and its database (United States). Intuit (QuickBooks Online) and ServiceTitan provide the connected data through their APIs under OAuth or API credentials that you authorize. Anthropic processes a summary of business figures to answer questions and write the daily headline when that feature is enabled; the Application sends aggregated facts, and sends customer-level details only when needed to answer a specific question. Each provider processes data under its own terms and privacy policy.
QuickBooks access is read-only. The Application stores OAuth tokens in its database and refreshes them automatically. You can disconnect QuickBooks at any time from the Application's Settings page, which revokes the token; you can also revoke access from your Intuit account. Disconnecting stops new syncs; previously synced records remain until deleted by Mr. Handyman of Richmond.
Synced records are kept while the Application is in use so that trends can be computed. Mr. Handyman of Richmond can delete records, disconnect sources, or delete the entire database at any time. Daily briefs and AI usage logs are kept for operational history.
Access requires a shared access code and a signed, HTTP-only session cookie. Credentials for connected systems are stored as environment variables or encrypted database rows, never in source code. Connections to providers use HTTPS. No system is perfectly secure, and Mr. Handyman of Richmond limits access to staff who need it.
Customers and vendors whose information appears in the Application should contact Mr. Handyman of Richmond with questions or requests about their records; the underlying records live in ServiceTitan and QuickBooks and are corrected there.
We may update this policy by posting a new version at this address with a new effective date.
Privacy questions: contact the office of Mr. Handyman of Richmond.