ArbreCRM logoArbreCRM

Privacy Policy

Last updated: April 5, 2026

1. Who We Are

ArbreCRM is a software-as-a-service platform designed for tree service companies. We provide business management tools including client management, quoting, job scheduling, invoicing, and permit tracking.

For questions about this policy, contact us at info@arbrecrm.com.

2. Information We Collect

Account Information

When you create an account, we collect your name, company name, email address, and password (stored as a bcrypt hash — we never store your plain-text password).

Business Data

We store the data you enter into ArbreCRM: client records, quotes, jobs, invoices, permits, equipment records, and related files (photos, signatures). This data belongs to you.

Usage Data

We may collect basic usage information such as pages visited and features used to improve the product. We do not sell this data.

3. How We Use Your Information

  • To provide and operate the ArbreCRM service
  • To process billing and subscription payments via Stripe
  • To send transactional emails (password resets, account notifications)
  • To send SMS notifications through your configured Twilio account
  • To respond to support requests
  • To improve and develop new features

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

ArbreCRM uses the following third-party services to operate:

  • Supabase — Database hosting and file storage (Canada region)
  • Stripe — Payment processing for subscriptions
  • Twilio — SMS notifications (configured per account)
  • Vercel — Application hosting
  • Google — AI search feature (Gemini API)

Each of these services has its own privacy policy governing their use of data.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Supabase in the Canada (ca-central-1) region. Data is isolated per account using tenant-level security. Files (photos, signatures, permit images) are stored in Supabase Storage.

We use HTTPS for all data transmission, bcrypt for password hashing, and JWT tokens for session authentication.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days before permanent deletion. You may request earlier deletion by contacting us.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent at any time

To exercise these rights, contact us at info@arbrecrm.com.

8. Cookies

We use only essential cookies required for authentication and security. See our Cookie Policy for details.

9. SMS / Text Messaging

ArbreCRM SMS Notifications is an optional messaging program that sends service-related text messages to your customers on your behalf, including appointment reminders, quote notifications, invoice alerts, and job status updates.

  • Phone numbers are collected when a customer requests a quote, books a service, or is manually added by the business owner with verbal consent.
  • Phone numbers are used solely for delivering service-related notifications through your ArbreCRM account. We do not sell, rent, or share phone numbers with third parties for marketing purposes.
  • Message frequency varies based on service activity (typically 1–5 messages per service engagement).
  • Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
  • Customers can reply STOP at any time to opt out of all future messages. Reply HELP for support or contact info@arbrecrm.com.
  • Opt-out and opt-in preferences are recorded and respected immediately.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email. Continued use of ArbreCRM after changes constitutes acceptance of the updated policy.

11. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You have the right to request information about what personal data we collect, use, disclose, and sell.
  • Right to Delete — You have the right to request the deletion of your personal data, subject to certain exceptions.
  • Right to Opt-Out of Sale — ArbreCRM does not sell your personal information to third parties. Because we do not sell data, there is no need to opt out.
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at info@arbrecrm.com.

We will respond to verified requests within 45 days as required by law.

12. Quebec Law 25

ArbreCRM complies with Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information). We ensure that personal information collected from Quebec residents is handled in accordance with this law, including:

  • Appointing a person responsible for the protection of personal information
  • Conducting privacy impact assessments for information systems
  • Implementing incident response procedures for confidentiality breaches
  • Obtaining valid consent before collecting, using, or disclosing personal information

For any questions regarding our compliance with Law 25, contact us at info@arbrecrm.com.

13. Sub-Processors

ArbreCRM relies on the following third-party service providers (sub-processors) to deliver our service. Each sub-processor processes data only as necessary to perform the service described:

  • Supabase — Database hosting and file storage
  • Stripe — Payment processing
  • Twilio — SMS delivery
  • Vercel — Application hosting
  • Google Analytics — Website analytics
  • Resend — Transactional email delivery

We review our sub-processors regularly and ensure each maintains appropriate data protection practices. We will update this list if sub-processors change.