Privacy policy

Last updated October 16, 2026

This policy explains what information ServiceMain ("we") handles, why, and what choices you have. It covers this website (servicemain.com) and the ServiceMain app that organizations use to run utility conservation and incentive programs. Questions: [email protected].

The short version

• We do not sell personal information, and we do not use it for advertising.
• The organizations that use ServiceMain (our customers) decide what program information goes into the app. We keep it for them and use it only to run the service.
• Signing in with Google or Microsoft gives us your name and email address, nothing else from your account.
• Each organization's information is kept in its own database and its own file storage, in its own Google Cloud project.

This website

The website sets no cookies. It is served by Cloudflare, which records technical information such as your IP address to deliver the pages and protect them from abuse. The site's font is loaded from Google Fonts, so Google also receives your IP address when you visit. We may use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.

If you fill in the demo request form, we receive what you enter: your name, work email and organization, and any optional details about your role, phone number and programs. We use it only to reply to you, arrange a demo and prepare a price estimate. The form's answers are sent to our mailbox through our email provider, Resend, and kept in our email; the website itself does not store them. If you email us, we use your message and address only to reply.

The ServiceMain app

Information our customers put in the app

Our customers use ServiceMain to manage their programs. They and their staff enter information such as program participants' names, addresses, phone numbers and email addresses; appointments and visit details; photos, signatures and documents collected during visits; and charges and invoices for their clients. Our customers decide what is collected and why, under their own privacy notices. We process this information on their behalf and only to provide the service to them. If you are a program participant and have a question about your information, please contact the organization that runs your program; we will help them answer it.

Information about the people who use the app

For each person who signs in (our customers' staff and any outside accounts they add) we keep their name, email address, role and, if given, phone number, plus a record of changes they make in the app, so that each organization can see who did what.

Signing in

Each organization chooses how its people sign in: with Google, with Microsoft, or with a code sent by email.

When you sign in with Google or Microsoft, they tell us your name, your email address, whether they have verified that address, and which company account manages it, if any. We use this only to sign you in. We do not receive your password, and we cannot see your email, files or anything else in your Google or Microsoft account.

When you ask for a sign-in code, we email a 6-digit code to the address you enter, through our email provider. The code works once, for 10 minutes. We keep only a check value of the code, never the code itself, and note the internet address the request came from, to stop repeated attempts.

Cookies and storage on your device

The app uses one cookie to keep you signed in and a short-lived cookie while you sign in with Google or Microsoft. So that it keeps working without a connection, the app stores your current work, and pictures you have opened, on your device. Signing out removes them.

Where information is kept and who helps us

The app and its information are hosted on Google Cloud in the United States (Oregon), each organization in its own project. Some organizations choose to have ServiceMain run in their own Google Cloud account instead; their information then stays in that account. Google Cloud encrypts the information when it is stored, and connections to the app are encrypted (HTTPS).

We use these service providers, who handle information only to provide their service to us:

• Google Cloud: hosting, database and file storage
• Google and Microsoft: signing in, for organizations that use them
• Resend: sending sign-in codes and the website's demo requests by email
• Google Workspace: our own email
• Cloudflare: this website and our domain's name service

We may disclose information if the law requires it, or to protect people or the service from harm.

How long we keep it

We keep a customer's information for as long as they use ServiceMain, or less if they remove it or ask us to delete it. When a customer stops using ServiceMain, we return or delete their information as agreed with them. Backups are kept for up to 7 days, and files deleted from storage can be recovered for 7 days, before they are gone.

Your choices

You can ask to see, correct or delete information about you. If the information was entered by an organization that uses ServiceMain, please ask them first; they control it. Otherwise email [email protected] and we will answer within 30 days.

Children

ServiceMain is for organizations and their staff. It is not meant for children, and we do not knowingly collect information from children.

Changes

If this policy changes, we will post the new version here with a new date, and tell our customers about important changes.