Privacy Policy

1. Introduction

A1 Investment Group LLC ("Company", "we", "us", or "our") is committed to protecting the privacy of users of the A1 Tools application. This Privacy Policy describes how we collect, use, store, and protect information when you use A1 Tools across Desktop (Windows), Android, and iOS platforms.

A1 Tools is a business and social media management platform provided by A1 Investment Group LLC to field-service businesses. Organizations that use A1 Tools connect their own accounts (including social media accounts such as Facebook Pages, Instagram Business accounts, and Threads profiles, and lead-generation accounts such as Thumbtack Pro profiles) to manage their operations, respond to customers, publish content, and view analytics from a single dashboard.

2. Information We Collect

Account Information:

• Name, email address, and employee or contractor identification
• Login credentials (passwords are stored using industry-standard hashing)
• Role and department assignment
• Device information for push notification delivery

Work Activity Data:

• Clock-in and clock-out times for time tracking
• Work schedules and attendance records
• Inspection reports, photos, and related documentation
• Task assignments, job progress, and board activity
• Training completion records and certification status

Screen Monitoring Data (Desktop only):

• Periodic screenshots captured at intervals during work hours
• Active window titles and application usage
• Live screen monitoring by authorized management during work hours
• Screen monitoring occurs only when you are clocked in on company devices

Location Data (Mobile only — Android and iOS):

The A1 Tools mobile application collects precise device GPS location data from technicians while they are clocked in for a work shift. Location data is collected continuously during a shift, including while the application is in the foreground, in the background, and when the operating system has suspended or terminated the application (headless mode) — this is required to provide reliable route tracking even if the technician's phone enters a low-power state during the day. The specific data points collected per location sample are:

• Latitude and longitude coordinates
• Reported accuracy radius, altitude, speed, and heading
• UTC timestamp the sample was captured by the device
• Battery level and charging state of the device at the time of capture
• Movement state reported by the operating system (moving / stationary)
• Device model identifier, OS version, and the A1 Tools application version (collected once per shift, not per sample)

Location data is used solely for the following business purposes:

• Showing the technician's current position on the dispatcher Field Map so the office can coordinate live job assignments and emergency response
• Reconstructing the technician's daily route for after-the-fact review in the Route History screen, used for time-and-materials disputes, customer-arrival verification, and routing optimization
• Detecting entry into and exit from assigned job-site geofences for automatic arrival / departure logging
• Generating mileage and on-site dwell-time analytics tied to specific jobs for payroll, billing, and reporting
• Triggering shift-cap and overtime warnings when a technician's recorded movement indicates they are still on a job past scheduled cutoff times

When location is and is not collected:

• Location collection begins when a technician successfully clocks in for a shift through the A1 Tools application, and only after the technician has accepted the in-app prominent disclosure dialog and granted “Always” location permission to the operating system.
• Location collection stops the moment a technician clocks out. The per-shift authorization token issued by our server is revoked at that instant, and the application halts the operating system's location service so no further GPS samples are gathered or transmitted until the next clock-in.
• Location is never collected outside an active shift, on weekends or days off, for non-technician roles (dispatchers, managers, marketing, administrators, developers), or while the user is using the application solely for non-field features.

Storage, retention, and access:

• Location samples are transmitted over HTTPS to A1 Investment Group servers and stored in a private database accessible only to authorized company personnel.
• Raw GPS samples are retained for 30 days, after which they are permanently deleted by an automated daily prune. Aggregated route summaries (start/end coordinates, mileage, jobs visited) may be retained for the lifetime of the related work record for payroll and billing audit purposes.
• Location data is not sold, shared with advertising networks, or made available to any third party. It is used only for the business purposes listed above.

Your control: You may revoke location permission at any time through your device's system settings. Doing so during an active shift will pause GPS collection until permission is restored or the shift is closed. If you decline the in-app prominent disclosure or deny location permission at clock-in, you will not be able to clock in for a field shift, but all other application features remain available.

Communication Data:

• Messages sent and received within the application
• Email and SMS campaign activity related to business operations

3. Privacy Exclusions

To protect employee privacy, certain applications are excluded from screen monitoring. When privacy-excluded applications (such as personal banking, healthcare portals, or other designated private applications) are in the foreground:

• Their content is hidden from live monitoring viewers
• They are not captured in periodic screenshots
• The list of excluded applications is maintained by company administrators and can be viewed within the app

4. How We Use Your Information

We use collected information solely for legitimate business purposes:

• Providing and maintaining the A1 Tools application
• Managing employee schedules, assignments, and time records
• Facilitating inspections, reporting, and customer communications
• Monitoring work productivity and compliance during work hours
• Training, quality assurance, and performance evaluation
• Route optimization and job site coordination
• Business analytics, marketing campaigns, and operational improvements
• Ensuring security and preventing unauthorized access

5. Data Storage & Security

We implement industry-standard security measures to protect your data:

• All data is transmitted using HTTPS/TLS encryption
• Sensitive credentials and tokens are encrypted at rest using AES-256
• Access to data is role-based and restricted to authorized personnel
• Regular security audits and monitoring are performed
• Data is stored on secure, managed hosting infrastructure

6. Data Sharing

We do not sell or rent your personal information. Data may be shared only in the following circumstances:

• Within the Company: Authorized management and supervisors for operational purposes
• Service Providers: Third-party platforms used for app functionality (e.g., Firebase for push notifications, Google Maps for routing) under strict data processing agreements
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of company assets

7. Data Retention

We retain data for as long as necessary to fulfill business and legal obligations:

• Active employee data is retained for the duration of employment
• Work records and inspection reports are retained per regulatory requirements
• Screen monitoring data is retained for a limited period as determined by company policy
• Upon termination of employment, personal account data is archived or deleted per company retention policies

8. Your Rights

As a user of A1 Tools, you have the right to:

• Access your personal data stored in the system
• Request correction of inaccurate information
• Understand what monitoring is active during your work sessions
• View the list of privacy-excluded applications
• Raise privacy concerns with your supervisor or HR department

9. Third-Party Integrations

A1 Tools integrates with third-party services to provide functionality. Each integration operates under its own privacy policy:

• Social Media Platforms: Facebook, Instagram, Twitter/X, TikTok, YouTube, Pinterest (for social media management features)
• Google Services: Maps API for routing, YouTube API for video management
• Firebase: Push notification delivery and analytics
• WordPress: Site content management
• Workiz: Job management integration
• Thumbtack: Lead and customer messaging management via the Thumbtack Partner API (see Section 10)

When you connect third-party accounts, you authorize A1 Tools to access and manage content on those platforms on behalf of the Company. You can disconnect third-party accounts at any time through the application settings.

10. Thumbtack Partner API Integration

A1 Investment Group LLC connects company-owned Thumbtack Pro profiles to A1 Tools through the Thumbtack Partner API using OAuth 2.0 authorization. This section describes specifically what Thumbtack data we access, why, and how long we keep it.

Authorization: A Thumbtack Pro profile is connected only when an authorized administrator of A1 Investment Group LLC completes Thumbtack's OAuth consent flow and explicitly grants access. We access only those Thumbtack profiles that A1 Investment Group LLC owns or is expressly authorized to manage. We never request or store Thumbtack account passwords — access is granted solely through OAuth tokens issued by Thumbtack.

Thumbtack data we receive:

• Business profile information for the connected Thumbtack Pro account, including business name, service categories, and service areas
• Lead and project records, including the requested service, job details, location or service area, and lead status
• Customer contact details supplied by Thumbtack with a lead, such as name, phone number, and email address
• Message and conversation history between the customer and the connected Pro profile
• Quote, negotiation, and booking or appointment details, including scheduled dates and times
• Event notifications for new leads, lead updates, customer messages, and bookings

How we use Thumbtack data:

• Displaying incoming leads and customer conversations in a centralized A1 Tools inbox
• Routing each lead to the correct business location, service area, and dispatch team
• Composing and sending authorized responses to customers through Thumbtack
• Updating lead status, quotes, and booking or appointment information on Thumbtack
• Synchronizing customer and appointment records with Workiz, our job management system, so that a job booked on Thumbtack is scheduled and dispatched correctly
• Generating internal response-time, conversion, and performance analytics

Automated and AI-assisted processing: A1 Tools uses automated classification and AI-assisted drafting to categorize incoming Thumbtack leads and to generate suggested reply drafts. These features assist our staff; they do not operate without oversight. Every automated action follows business-defined policies, is recorded in an auditable log, and can be reviewed, edited, or overridden by a human operator at any time. Authorized staff can take over any conversation immediately. Thumbtack customer data is not used to train any third-party or publicly available AI model.

Sharing and restrictions: We do not sell, rent, or license Thumbtack data. We do not use it for advertising, ad targeting, or audience building, and we do not disclose it to any other business, unaffiliated third party, or user who is not authorized by A1 Investment Group LLC. Thumbtack data is segregated by business location so that it is never exposed to an unauthorized business. Thumbtack data is shared only with our job management provider (Workiz) as needed to schedule and complete the customer's job, or where required by law.

Retention and deletion: An authorized administrator may disconnect a Thumbtack Pro profile at any time from A1 Tools settings, or revoke access directly from their Thumbtack account. When a profile is disconnected:

• The stored OAuth access and refresh tokens for that profile are deleted immediately and permanently, and A1 Tools stops retrieving any further Thumbtack data
• Thumbtack lead, project, conversation, and customer records previously received are deleted within 30 days, except where a record is attached to a completed job or transaction that we are required to retain for tax, accounting, warranty, or other legal obligations
• An administrator may request earlier deletion of Thumbtack-derived data by contacting us at the address in Section 13

Security: Thumbtack OAuth tokens are encrypted at rest using AES-256 and are accessible only to the authorized integration service and designated administrators. All communication with the Thumbtack Partner API occurs over HTTPS/TLS.

Thumbtack's own policies: Our use of Thumbtack data is additionally governed by the Thumbtack API Terms of Use and Thumbtack's developer policies, and we handle Thumbtack data in compliance with them. Thumbtack's own collection and use of personal information is governed by the Thumbtack Privacy Policy.

11. Children's Privacy

A1 Tools is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Users will be notified of significant changes through the application or company communications. Continued use of A1 Tools after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact:

A1 Investment Group LLC
Email: support@a-1chimney.com