4 days left

    Legal

    Privacy Policy

    Last updated: September 23, 2026

    Introduction and Scope

    This Privacy Policy describes how Praevisio Consulting LLC ("we," "us," or "our") collects, uses, and discloses personal information when you use Bounty CRM, our websites, mobile applications, and related services (collectively, the "Service"). This Service is intended solely for users within the United States.

    This policy applies to three primary groups of individuals:

    • Business Customers (Tenants): Contractors and service businesses that create a Bounty CRM account, subscribe to the Service, and add staff users ("Account Owners" and authorized users).
    • End Customers (Portal Visitors): Individuals who interact with public portals or links hosted by a Tenant without creating a Bounty account—such as paying an invoice, accepting or declining an estimate, or signing a contract ("End Users").
    • Website Visitors: People who browse the marketing website (https://www.bountycrm.app) without creating a Bounty account or using a tenant portal.

    By using the Service, you acknowledge this Privacy Policy. If you do not agree, do not access or use the Service.

    Who We Are

    Praevisio Consulting LLC operates Bounty CRM, a multi-tenant business software platform for service contractors.

    Roles and Tenant Responsibilities

    For data entered, uploaded, or collected on behalf of a Tenant (including End User contact details, jobs, estimates, invoices, and signed contracts), the Tenant is the data controller (or business). Praevisio acts solely as a data processor (or service provider) processing that data strictly on the Tenant's behalf to deliver the Service.

    Tenant Warranties: Tenants are solely responsible for ensuring they have obtained all necessary notices, authorizations, and consents required under applicable law from their End Users before uploading, transmitting, or collecting End User personal information through the Service. End Users with privacy inquiries should direct their requests to the applicable Tenant first.

    Praevisio acts as a data controller only for its own account administration, direct platform billing, and general service analytics data.

    Information We Collect

    The information we collect depends on your interactions with the Service:

    Account and Authentication Data: Full name, business name, email address, role permissions, passkey credentials (WebAuthn), authentication logs, and hashed passwords (where local credentials are used). If you sign in using single sign-on (SSO) or social login providers such as Google OAuth or Apple OAuth, we collect identity verification tokens, your primary profile email, full name, and external user IDs provided by those authentication services.

    Tenant Business Data: Customer contacts, job schedules, operational notes, estimates, invoices, payment terms, e-signatures, uploaded files (e.g., PDFs, job photos, logos), and SMS/email communication history sent via the platform.

    End User Interaction Data: Name, contact details, payment information, billing addresses, IP addresses, browser types, and digital signatures submitted through Tenant public portal flows.

    Payment & Billing Information:

    • SaaS Subscriptions: Billing contacts, subscription plan selections, and Stripe customer identifiers.
    • Tenant Invoice Payments (Stripe Connect): Payment statuses, transaction metadata, and limited card/bank details provided by Stripe. We do not store raw credit card numbers or full bank account details on our servers.

    Usage, Location, and Device Logs: IP addresses, operating systems, browser configurations, API activity, error/crash reports, time logs, and geolocation metadata attached to uploaded content or time-tracking features (where enabled).

    Cookies and Tracking Technologies:

    • Essential cookies: session and authentication cookies (httpOnly). These are always on and are required for login and to keep you signed in.
    • Analytics cookies: Google Analytics 4 on the marketing website only, and only after you accept analytics in the cookie banner. If you decline, or have not yet made a choice, Google Analytics is not loaded and the site still works.
    • After you accept, Google may receive pages viewed (including in-app navigations on the marketing site), device and browser information, approximate location derived from IP address, referral source, and conversion events such as waitlist join, checkout started, and sign-up. We do not send names or email addresses in those analytics events.
    • Your cookie preference is stored for about thirteen (13) months. You can change it anytime via Cookie settings in the website footer.
    • Google's privacy policy: https://policies.google.com/privacy

    How We Use Information

    We process personal information to:

    • Provide, maintain, secure, and optimize the Service.
    • Authenticate users, process subscription billing, and facilitate Tenant-directed customer invoicing.
    • Deliver transactional emails and SMS messages on behalf of Tenants (e.g., invoices, estimate reminders, e-sign requests).
    • Prevent, detect, investigate, and mitigate technical errors, security incidents, fraud, or terms of service violations.
    • Comply with applicable legal, tax, and regulatory requirements.
    • Generate de-identified, aggregate insights or performance benchmarks to improve platform features.
    • Measure marketing-site traffic and conversions with Google Analytics when the visitor has consented.
    • Communicate with Account Owners and active users, and at the company contact email, regarding platform updates, operational notices, administrative alerts, planned maintenance, and material Terms of Service or Privacy Policy changes.
    • Send an optional product newsletter (weekly release notes and product offerings) to people who opt in at signup, on the beta waitlist, on the public newsletter page, or in Settings. Each newsletter includes an unsubscribe link.

    Mobile Messaging and SMS Privacy

    No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, except as strictly necessary to deliver transactional SMS communications requested by the Tenant through our underlying telecommunications providers.

    Artificial Intelligence (AI) and Automated Features

    We may integrate or offer access to third-party AI tools, automated integrations, or external AI connectors ("AI Tools") within the Service.

    Platform AI Features: Where AI features are built into the Service, data submitted to those features is processed to fulfill your specific automated request (e.g., generating job estimates, transcribing communications, or analyzing operational data).

    Third-Party AI Connectors: If a Tenant elects to link their Bounty CRM account to an external AI tool or third-party platform, the Tenant directs Praevisio to share relevant account data (which may include End User data) with that third party. The storage, processing, and model-training policies of external AI tools are strictly governed by that third party's privacy policy and the Tenant's separate agreement with them.

    How We Share Information

    We do not sell personal information. We share information strictly as described:

    Subprocessors and Service Providers: We engage trusted third-party service providers to support infrastructure, database hosting, storage, transactional communications, payment processing, and website analytics. A current list of our sub-processors is maintained at Subprocessors.

    Tenant-Directed Sharing: Information provided by End Users via portal links is shared directly with the Tenant managing the interaction.

    Legal and Safety Requirements: We may disclose information if required by a valid subpoena, court order, or applicable law, or when necessary to protect the legal rights, safety, and security of Praevisio, our users, or the public.

    Business Transfers: In the event of a merger, acquisition, financing, re-organization, or sale of company assets, personal information may be disclosed or transferred under appropriate confidentiality safeguards.

    Payments, Credit, and Financial Integrations

    We use Stripe to power our payment processing across two distinct flows:

    • SaaS Subscriptions: Tenants pay Praevisio Consulting LLC for platform access via Stripe Checkout and recurring subscription billing.
    • Tenant Invoice Payments: End-customers pay tenant invoices through Stripe Connect. The tenant operates as the Merchant of Record for all customer invoice transactions; Praevisio Consulting LLC facilitates the technical integration, updates CRM payment records, and assesses applicable platform processing fees.

    To administer our subscription billing tiers, issue ACH Volume Credits, and detect payment fraud, Praevisio Consulting LLC tracks and processes payment transaction metadata—including settled transaction amounts, payment methods, transaction timestamps, and monthly aggregated volume totals associated with your tenant account. Card processing, US bank account transfers (ACH), Stripe Link, and Stripe Financial Connections are governed by Stripe. Praevisio Consulting LLC does not store full credit card numbers, CVV codes, or complete bank login credentials on its servers.

    ACH payments and bank transfers may take several business days to settle. All payment timing, returns, and disputes are subject to the rules of Stripe and the relevant financial institutions. Use of these features is subject to the Stripe Privacy Policy: https://stripe.com/privacy

    If you connect bank accounts, verify identity, or participate in financial risk assessments, financial metadata and account verification details may also be processed by specialized third-party financial services (such as Plaid, Inc. or Stripe Financial Connections) in accordance with their respective privacy policies.

    Data Retention and Account Deletion

    Active Accounts: We retain Tenant operational data for as long as your subscription remains active to provide the Service.

    Configurable Retention: Active Tenants may configure automated file retention rules within Settings > Retention to purge job photos or temporary documents according to their business preferences.

    Account Deletion & Soft-Delete Window: Tenant administrators may request a full export of their business data in a standard machine-readable format at any time prior to account expiration. Upon receipt and confirmation of an account deletion request (submitted via Settings > Security > Data and privacy or by email), your account remains accessible until the end of your current subscription term. Once your final term completes, active account access is revoked, and your operational data enters a thirty (30) day soft-delete window ("Delete Window"). During this 30-day period, operational data is isolated from normal system use and may either be restored upon request or permanently deleted on a rolling basis. At the conclusion of the Delete Window, all remaining User Content and operational data are permanently purged or anonymized, and Praevisio Consulting LLC has no obligation to maintain, export, or restore your data, except where narrow retention of financial, tax, or security logs is strictly required by law.

    Security and Incident Management

    We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or disclosure. These include TLS/HTTPS encryption in transit, multi-tenant database isolation, access limits, and httpOnly session configurations.

    Incident Response: In the event of a confirmed security incident impacting your unencrypted personal information, we will notify affected Account Owners via email without unreasonable delay and in accordance with applicable legal requirements.

    Compliance Disclaimer: Unless confirmed via a separate written agreement, the Service is not certified for HIPAA compliance or SOC 2.

    U.S. State Privacy Rights

    Depending on your U.S. state of residence (including California, Virginia, Colorado, Connecticut, Utah, and other applicable states), you may have specific privacy rights regarding your personal information:

    • Right to Know / Access: The right to request confirmation of whether we process your personal data and to access specific pieces of your information.
    • Right to Correct: The right to request correction of inaccurate personal data.
    • Right to Delete: The right to request deletion of your personal data, subject to statutory retention exceptions.
    • Right to Opt-Out: The right to opt-out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal effects. Praevisio does not sell your personal data or share it for cross-context behavioral advertising.

    To exercise these rights, please email us at customerservice@praevisio.co. Website Visitors can decline or change marketing-site analytics anytime via Cookie settings in the website footer. End Users must contact the applicable Tenant directly to exercise privacy rights concerning operational CRM data.

    Children's and Minors' Privacy

    The Service is intended exclusively for adult business operations and is not directed to, or intended for use by, anyone under eighteen (18) years of age. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we learn that we have collected personal information from anyone under 18 without appropriate consent, we will take immediate steps to delete that information from our systems. If you believe a minor under 18 has provided us with personal information, please contact us at customerservice@praevisio.co.

    Changes to This Policy

    We reserve the right to update this Privacy Policy at any time. Updates will be posted to https://www.bountycrm.app/privacy with a revised "Last Updated" date. If we make material changes to how we collect, use, or disclose personal information, we will provide at least fourteen (14) calendar days' advance notice via email to the primary Account Owner or through an in-app notice prior to the changes taking effect. Continued use of the Service after changes become effective constitutes acceptance.

    Contact Us

    For questions about this Privacy Policy or to submit a privacy request: