Privacy Policy

Effective / last updated: August 2026

Legal Center · Service Terms · Privacy Policy · California Privacy · Refunds & Cancellations · Cookies & Local Storage · Electronic Communications

1. Scope

This Privacy Policy explains how Rinaldi Services LLC collects, uses, discloses, stores, and protects personal information through its website, customer and staff accounts, booking and service tools, communications, payment-related features, and related business operations. A separate California Privacy Notice provides California-specific disclosures.

2. Information we collect

Depending on how you interact with Rinaldi Services LLC, we may collect:

• Identity and contact information: name, email address, phone number, account identifier, and service or mailing address information you provide.
• Account and security information: account role/status, authentication/session information, MFA status, recognized-device information, security events, and account activity needed to protect the service.
• Service information: service selections, booking answers, appointment details, quotes, estimates, work orders, recurring-service requests, waitlist requests, customer-visible job updates, service history, and customer instructions.
• Communications: contact requests, messages, support communications, reviews, agreement acceptances, signatures, and other information you choose to submit.
• Files and attachments: photographs, PDFs, text files, or other supported files you intentionally upload for a quote, work order, invoice, or service request.
• Payment and transaction information: amounts, invoice/payment status, limited payment-method display information, provider transaction references, refund records, and receipt information. Full card details are processed by Square rather than intentionally stored in the Rinaldi Services LLC website database.
• Technical information: browser/device information, IP/network information available to hosting/authentication/security providers, local storage, service-worker/cache information, and diagnostic/security data generated when the site is used.
• Staff/business information: staff role, permissions, schedules, activity logs, team profile information, and operational records for authorized staff accounts.

3. Sources of information

We collect information directly from you; automatically from your browser/device and the systems that operate the website; from authorized staff who create or manage business records; and from service providers when needed to confirm a payment, email delivery, authentication event, or other requested function.

4. How we use information

• Provide, schedule, quote, perform, document, bill, and support services.
• Create and maintain customer or staff accounts.
• Communicate confirmations, reminders, quote/work-order/invoice updates, security notices, and other transactional messages.
• Process, reconcile, document, and refund payments.
• Provide customer support, message-center functions, uploaded-file access, agreements, and business documents.
• Protect accounts, investigate suspected fraud or misuse, enforce access controls, and maintain security/audit records.
• Maintain accounting, tax, warranty, legal, dispute, and ordinary business records.
• Improve reliability, usability, accessibility, and operational performance.
• Comply with law, lawful process, and enforceable legal obligations.

5. Service providers and disclosures

Rinaldi Services LLC uses service providers to operate the website and requested services. Current or expected categories include:

• Netlify for website hosting and delivery.
• Supabase for authentication, database/storage, access controls, and server-side application functions.
• Square for eligible payment-card processing and saved payment methods selected by the customer.
• Resend for transactional email delivery when email delivery is enabled.
• Other infrastructure, security, domain, software, or professional providers reasonably necessary to operate the business.

We may also disclose information when required by law, to protect rights or safety, to investigate fraud/security incidents, in connection with a legitimate business transfer, or at your direction.

6. Sale, sharing, and advertising

Rinaldi Services LLC does not currently sell personal information for money and does not currently use the website to share personal information for cross-context behavioral advertising. The current website configuration does not intentionally include third-party behavioral advertising trackers. If those practices materially change, this Policy and any legally required privacy choices will be updated before or when required.

7. Payments and saved cards

When card payments are enabled, Square's payment components process the card information. Rinaldi Services LLC does not intentionally store full card numbers, CVV values, or magnetic-stripe data in its website database. If you choose to save an eligible card, Square stores the payment credential and Rinaldi Services LLC may retain a provider identifier and limited display information needed to show and manage that saved method.

8. Cookies, local storage, and offline features

Authentication and session technologies are used to keep signed-in features working. The site may also use browser local storage for preferences, recognized-device/security data, Maintenance Arcade settings/high scores, and similar local functions. The installable web app uses a service worker and browser cache to provide an offline shell and maintenance games. See the Cookie & Local Storage Notice.

9. Security

Rinaldi Services LLC uses measures designed to reduce unauthorized access, including HTTPS, security headers, Supabase Row Level Security, role/permission controls, MFA support, private storage where appropriate, server-side privileged functions, logging, validation, and account/session security controls. No online system can guarantee absolute security.

You are responsible for protecting your credentials and authenticator. Contact us promptly if you believe your account has been compromised.

10. Data retention

Information is retained for the period reasonably necessary for the purpose for which it was collected, to provide requested services, maintain security, resolve disputes, enforce agreements, and meet accounting, tax, warranty, legal, or recordkeeping obligations. Retention periods differ by record type.

When a customer requests account deletion through the website, the account is deactivated and ordinarily enters a 30-day deletion waiting period. Signing in during that period may cancel the request as described in the account interface. Certain transaction, service, security, accounting, tax, legal, fraud-prevention, or warranty records may be retained after login-account deletion when reasonably necessary or legally required.

11. Your choices and account controls

• Update available profile information through My Account.
• Manage supported security options such as MFA and recognized-device controls through the Security Center.
• Remove eligible saved payment methods through the customer payment interface when available.
• Request customer-account deletion through My Account.
• Contact Rinaldi Services LLC to request access, correction, deletion, or other privacy assistance that is not available through self-service tools.

12. Children's privacy

The website and services are not directed to children under 13, and Rinaldi Services LLC does not knowingly collect personal information online from a child under 13 without legally required authorization. If you believe a child has provided personal information improperly, contact us so the matter can be reviewed.

13. External links and third-party services

The website may link to or integrate third-party services. Their privacy practices are governed by their own policies, and Rinaldi Services LLC does not control their independent practices.

14. State privacy rights

Residents of some U.S. states may have rights concerning access, correction, deletion, portability, or certain disclosures/uses of personal information. Rights vary by jurisdiction and may depend on whether a law applies to Rinaldi Services LLC. We will respond to valid requests as required by applicable law. California residents should review the California Privacy Notice.

15. Changes to this Policy

We may update this Policy when practices, technology, services, or legal requirements change. The effective/last-updated date identifies the current version. Material changes will be presented as required by applicable law.

16. Contact and privacy requests

Email contact@rinaldiservices.com with the subject Privacy Request, or use the Contact page. We may need to verify identity before providing, correcting, or deleting information where verification is appropriate or legally required.

Privacy Request Center and vendor register

Signed-in customers may submit account-linked privacy requests through the Privacy Request Center. Rinaldi Services LLC may retain the request, identity-verification status, handling notes, completion status, and related audit information as reasonably necessary to process and document the request. The Trust Center may also publish a limited vendor or subprocessor disclosure register. Internal vendor-review notes and compliance records are not made public through that register.