Wolf Handyman privacy policy

Who operates Wolf

Wolf Handyman LLC operates the private Wolf Handyman business app at https://wolf.plainspokendesk.com. For support or privacy requests, contact wolfhandymanllc@gmail.com. The mailbox is monitored; Mike handles deletion requests.

Information entered into Wolf

Wolf stores information entered by authorized users: customer names, email and service addresses; job details, assignments, notes, parts and photos; invoice drafts, line items, rates, totals and approval status; and payment amounts, dates, references and void reasons. It also stores team names and permissions, sign-in and membership identifiers, business settings and action history.

We use this information to manage work, prepare invoices, track payments, control access and support recovery. Wolf records payments but does not process them.

Information from Google

Connecting a Google mailbox is optional. The account owner signs in and grants permission directly with Google; Wolf does not collect the Google password.

Wolf requests openid and email to verify the chosen sender’s Google identifier and email address, plus https://www.googleapis.com/auth/gmail.send to send invoices. It stores that identity, connection ownership and status, and access and refresh tokens. Tokens let the server send approved messages and renew authorized access.

The integration does not request or use inbox-reading, message-search, Gmail-draft management, contacts, calendar or Drive permissions.

How sending works

After an authorized user confirms the saved invoice, sender and recipient, Wolf sends Google the message and its attachments: the approved customer PDF and selected job photos. Google and the recipient’s email provider process the message; the recipient receives its contents if delivered.

The PDF includes customer-facing invoice information and may show payments received and the balance due. Private job notes and payment references are excluded. Wolf keeps sender, recipient, invoice/revision, user, time, content fingerprint, outcome and any Google message identifier to record attempts and help prevent duplicate sends. Provider acceptance is not delivery confirmation.

Where information is stored and who can access it

Wolf uses Cloudflare hosting, a D1 database, R2 file storage and Cloudflare Access authentication. Google provides mailbox authorization and outgoing delivery. Business users access records according to their membership, role and job assignment. Infrastructure administrators may also have operational access.

Google tokens and pending authorization verification data are encrypted on the server with AES-GCM. Tokens are separate from normal workspace records and excluded from normal workspace exports. Google authorization and API requests use HTTPS.

Google data use commitments

We use Google account data only for the disclosed service, security or legal requirements, under the Google API Services User Data Policy and its Limited Use requirements. We do not sell it, use it for advertising or use it to train AI.

Transfers are limited to providing the disclosed service with the user’s consent, security or legal requirements. Human access is limited to providing the service with affirmative permission for the specific information, security or legal requirements. These limits apply to staff and contractors.

Disconnecting Google

Open More, then Email accounts, and choose Disconnect. The owner can disconnect a personal mailbox; an administrator controls company connections. Wolf disables the connection, clears its stored token ciphertext from the active account record and attempts Google revocation.

If revocation is not confirmed, remove Wolf in your Google Account’s third-party connections settings. You may also revoke access there independently. Revocation can affect other connections using the same Google account and OAuth client.

Disconnection does not delete business records, account identifiers or send history, recall messages, or delete copies held by Google or recipients.

Retention and deletion

Our policy is to keep each job and its linked invoices and photos for one seven-year period beginning when the job was originally opened. Adding invoices or photos, uploading files, editing records or completing work does not restart that period. A standalone invoice with no linked job has its own seven-year period beginning when it was originally created. The current app does not automatically delete records after seven years.

This business-record policy does not set the retention period for technical logs, mailbox metadata, send history or backup/recovery copies. These have separate handling and are not all deleted by disconnecting a mailbox.

Email wolfhandymanllc@gmail.com to request deletion. Mike handles requests. There is no general self-service deletion function, and this policy does not promise automatic deletion on a fixed date or deletion of every provider or recipient copy.

Cookies and operational information

Hosting and sign-in services may process cookies and technical connection or security information to provide and protect access. The Google connection is used only for the purposes described above.

Questions and policy changes

Contact wolfhandymanllc@gmail.com about this policy. Do not send passwords or authorization tokens. Before a new use of Google data begins, the disclosures must be updated and any required consent obtained.