LMP Platform

1. Introduction

This Privacy Policy describes how Loch Monster (“we”, “our”, or “us”) collects, uses, and protects information when you use our services. This policy applies to both the LMP Platform web application (this website) and the Loch Monster Plumbing (LMP) mobile app. By using either the web platform or the mobile app, you agree to the practices described in this policy.

2. Services Covered

This Privacy Policy covers:

• Web application (LMP Platform): The browser-based platform where you sign in to manage binders, calendar, forms, form assignments, contacts, addresses, reports, communications, and account settings. Session and preference data may be stored in your browser (e.g. cookies, local storage).
• Mobile app (Loch Monster Plumbing / LMP): The iOS and Android app where you sign in to view your schedule, fill and submit forms, upload photos and documents, view binders and addresses, and manage your profile. Session and preference data may be stored on your device (e.g. secure storage).
• SMS / text messaging: Outbound and inbound text messages used to communicate with customers and contacts about service work, and one-time passcodes (OTP) sent to authorized internal users for authentication or verification.

Both the web and mobile app use the same account and backend services. Data you provide in one (e.g. form submissions, profile updates) is available where appropriate in the other.

3. Information We Collect

We collect information necessary to provide and operate both the web platform and the mobile app:

• Account information: Email address, name, and (optionally) phone number when you create or update your account, whether on the website or in the mobile app.
• Authentication data: Passwords (stored in encrypted form), session tokens (e.g. access and refresh tokens), and one-time passcodes (OTP) that may be delivered by SMS to verify identity. On the web, session data may be stored in cookies or browser storage; in the mobile app, it may be stored in secure storage on your device.
• Form and job data: Information you submit through forms on the web or in the mobile app, including answers to questions and any files you upload (e.g. photos, documents, videos) as part of form submissions.
• Schedule, calendar, and assignment data: Data related to your assignments, binders, and scheduling, used to display your calendar and tasks on both web and mobile.
• Contacts, addresses, and phone numbers: Contact and address information you view or manage on the web (e.g. in binders, contacts, addresses) and that may be shown in the mobile app, including mobile numbers used for outbound and inbound customer text messaging.
• Communication records: Content and metadata related to outbound and inbound SMS and calls (e.g. timestamps, delivery status, and message content) that we log for operational and recordkeeping purposes.
• Organization and role data: Your organization, role, department(s), and permissions, which we use to control access and display the right content on both platforms.

4. How We Use Your Information

We use the information we collect to: provide and maintain both the LMP Platform (web) and the LMP mobile app (including login, calendars, binders, forms, form assignments, contacts, communications, and file uploads); authenticate you and manage your session on web and mobile, including sending OTP codes by SMS to authorized internal users; store and process form submissions and uploads; communicate with customers and contacts about service jobs via outbound and inbound text messages; communicate with you about your account or our services (e.g. password reset); and operate, secure, and improve our systems. We do not use your data for advertising.

5. SMS / Text Messaging

We use SMS (text messaging) for the following purposes:

• Outbound customer texts: Transactional messages related to service jobs, scheduling, appointment updates, follow-ups, and other job-related communication initiated by authorized company staff.
• Inbound customer texts: Replies and messages sent by customers or contacts to our business numbers, which may be received, logged, and routed to authorized staff for response.
• Internal OTP texts: One-time passcodes sent to authorized internal users for login, verification, or account security.

Message frequency varies based on active jobs, customer needs, and authentication events. Message and data rates may apply.

Recipients may opt out of customer service SMS at any time by replying STOP. For help, reply HELP or contact us using the details below.

We do not sell, rent, or share mobile phone numbers with third parties or affiliates for their marketing or promotional purposes. Mobile numbers are used only to provide the communications and authentication described in this policy, and to work with service providers (such as SMS delivery providers) that process messages on our behalf under appropriate agreements.

SMS Opt-In / Call to Action (CTA)

Customers and contacts opt in to Loch Monster Plumbing SMS by providing a mobile phone number for business communication and agreeing to receive transactional texts about their plumbing/service work. Opt-in occurs by one of these methods:

• Verbal: During phone intake or on-site service, staff collect the customer’s mobile number and obtain consent using language substantially as follows:

“By providing your mobile number, you agree to receive text messages from Loch Monster Plumbing about your service job, scheduling, and related follow-ups. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help. Consent is not required as a condition of purchase. Privacy Policy: https://app.lochmonsterplumbing.com/privacy-policy. Terms: https://app.lochmonsterplumbing.com/terms-and-conditions.”

• Paper form: On a service agreement/work order, the customer provides a mobile number and signs or acknowledges the same SMS disclosure.

After opt-in, authorized staff may send outbound service-related SMS, and customers may reply inbound. This campaign does not use marketing or promotional mass messaging. A standalone copy of this Call to Action is also published at /sms-consent.

6. Storage and Security

Web: Session and preference data (e.g. cookies, local storage) may be stored in your browser. Mobile app: Authentication tokens and certain profile data may be stored on your device using secure storage. Form submissions, file uploads, SMS logs, and other data you provide from either the web or the mobile app are sent to our servers and may be stored using third-party cloud services (e.g. for file storage or messaging). We use industry-standard measures to protect your data, and data in transit is encrypted (e.g. via HTTPS).

7. Sharing of Information

We do not sell your personal information. We do not share mobile phone numbers with third parties or affiliates for marketing or promotional purposes. We may share data with service providers that help us run our platform (e.g. hosting, storage, SMS delivery, and analytics if applicable), under contracts that require them to protect your data. We may also disclose information when required by law or to protect our rights, safety, or property.

8. Your Rights and Choices

You may access, update, or correct your account information through the web platform (e.g. account page) or the mobile app (e.g. profile) where available. You may request deletion of your personal data or a copy of the data we hold about you by contacting us at the email address provided below. We will respond to such requests in accordance with applicable law. You can sign out at any time from the web or the mobile app; this will remove session tokens from your browser or device, but some data may remain on our systems as needed for legal or operational purposes. For SMS opt-out, reply STOP to our messages.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide you services, and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Form submissions, uploads, and communication logs (including SMS) may be retained in line with our business and legal requirements.

10. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. If changes are significant, we may notify you by email or through the web platform or mobile app. Your continued use of either the web application or the mobile app after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, SMS communications, or your personal data, please contact us at: joseph.loch12@gmail.com. You can also contact your organization’s administrator for questions about how your data is used within the platform. See also our Terms and Conditions.