OwnerFreed is a fictitious business name (DBA) of SANMO HOME CARE SERVICE, INC., which operates OwnerFreed. In this Policy, "OwnerFreed", "we" and "us" mean SANMO HOME CARE SERVICE, INC., doing business as OwnerFreed.
Two kinds of information
- Information about you and your business - you are an OwnerFreed customer. We decide how this is used, as described here.
- Information about your own customers or contacts - handled by an automation you bought. We handle it only to provide the service to you and as you direct (Section 4).
What we receive and why
For our own customers: your name, business name, email, and phone; what you bought and your billing history; messages you send us (including support and cancellation requests); information you give us to set up your automation; a record of which versions of our documents you accepted and when; and basic technical information (such as device, browser, and IP-derived information) used for security and to run the service. We use it to provide and manage your service, take payment, communicate with you about your account (and about offers only if you agree), keep records of what you agreed to, prevent fraud and abuse, and meet legal obligations.
Payments. Card and payment details are collected and processed by our payment processor. OwnerFreed does not store full card numbers. If your Order includes a recurring fee, your payment method is saved with our payment processor so the fee can be charged when monthly billing starts.
Connected tools. If you connect a tool (for example a calendar, a scheduling system, or a mailbox), we use the information from it only as needed to run the service you bought. Ending the connection stops further collection from that tool. If the tool is a Google account, see "Google User Data".
Website visitors
We do not use advertising or remarketing technologies, and we do not track visitors across other websites. Our website does not currently respond to "Do Not Track" signals.
What you type or choose in our discovery tools. When you use the business-type box, Browse, Describe, the Automation Finder, or a preview, we receive what you choose or type: the kind of business you describe, the needs and workflows you pick, and any text you enter, including in "Other" boxes. We use it to show you relevant automations and to learn what kinds of businesses and needs our visitors have, so we can improve the service.
- Your choices are kept as anonymous usage information tied to a random visit code that lives in your browser tab (not in a cookie). If you later become a customer, we link that visit to your account so we can see which choices led to a purchase.
- Text you type is screened automatically to remove contact details, payment card numbers, and similar identifiers before it is kept, and text that looks highly sensitive is not kept. The screened text is deleted automatically after 7 days; afterwards we keep only a categorized summary of what you asked for.
- Please do not type personal or sensitive information into these boxes: the screening is automatic and may miss something.
- We do not use this information for advertising, and we do not sell it.
Requests you send us. If you choose to send a request through our website (for example the request form in Describe), we receive the name, business name, email address, and description you enter. We use them to review your request and reply to you, and we keep them as communications records (see Retention).
Your customers' information and messages
When an automation messages or exchanges information with your customers (for example an appointment reminder), we handle that person's information only for that service and as you instruct. They are your customer, not ours, and you are responsible for having the right to contact them and for your own notices to them. We keep message content and delivery status as needed to run and support the service and to show that opt-outs were honored. For a connected Gmail or Google Workspace mailbox, the subject and text of an incoming message are not stored in our records; messages the automation sends in reply (an answer you approved, or an acknowledgment) are kept with their delivery status as communications records, as described under "Google User Data". If one of your customers contacts us about their information, we will generally direct them to you, except where we must respond ourselves (for example an opt-out we received).
Google User Data
This section applies only if you choose to connect a Google account to an automation you bought. It adds to the rest of this Policy. For information we receive from Google, this section controls where it is stricter.
Google account connections
You can connect a Gmail or Google Workspace mailbox, or a Google Calendar, to an automation you bought. We access Google information only after you press Connect in your OwnerFreed setup and approve the request on Google's own sign-in page. We never receive or store your Google password. The access we ask for is read-only: it does not let us send, change, or delete anything in your Google account, and we do not do so. Each connection is separate: connecting a mailbox does not give us access to your calendar, and connecting a calendar does not give us access to your mailbox.
Gmail data we access
Permission: https://www.googleapis.com/auth/gmail.readonly.
- When you connect, we make one check that the mailbox can be reached: we read the mailbox profile (the mailbox address and message counts). This check does not list, open, or read any message, and the mailbox address is not stored.
- Reading messages is a separate step and does not begin when you connect. The service starts checking your inbox for new mail only after the mailbox is connected and you have approved your inquiry-handling rules; until then no message is listed or read.
- For each new message in your inbox it reads Google's identifier for the message, the time it arrived, its labels, and these header fields: who sent it (From), Reply-To, and the standard fields that mark automated or mailing-list mail.
- For a message it recognizes as a new inquiry written by a person, it also reads the subject and the text of that message, so the inquiry can be understood and handled the way you approved.
- We do not intentionally access or process mail that arrived before you connected the mailbox, mail outside your inbox, or mail you sent.
- We do not intentionally access or process attachments. We never request an attachment. If Google delivers an attachment together with a message, it is skipped and discarded without being opened.
Google Calendar data we access
Permission: https://www.googleapis.com/auth/calendar.calendarlist.readonly (read-only access to your list of calendars).
When you connect a Google Calendar, we read your list of calendars once to confirm that the connection works. This permission does not give us access to your events, and we do not read the contents of your calendar events through the Google Calendar API. We never change your calendar. Calendar information is not sent to an AI service provider or to any other third party. For a calendar connection we store only the authorization and the connection status; nothing of your list of calendars is kept.
How we use Google data
We use Google information only to provide the automation you bought and connected:
- Gmail: to notice that a new inquiry has arrived; to work out which of the kinds of inquiry you defined it belongs to; to act on it according to the rules you approved (send the exact answer you approved, send a short acknowledgment, or send nothing); and to tell you when an inquiry is left for you.
- Google Calendar: to confirm that your calendar connection works.
- Both: to see when a connection has stopped working, so we can tell you to reconnect.
We do not use Google information for any other purpose.
AI and third-party processing
To work out what kind of inquiry a new message is, we send limited content from that message to an external AI service provider that processes it on our instructions. What is sent: the subject of the message; the text of the message; the names and descriptions of the inquiry types you defined; and your list of situations that must not be answered automatically. We do not send that provider your mailbox address, your identity, Google's identifier for the message, the sender's address as a separate item, attachments, or the answer texts you approved. We do not remove anything from the message text: whatever the sender wrote in it (for example a name or a phone number) is included.
We ask the provider not to store these requests for later retrieval. We use the provider's business API service and have not opted in to sharing this content for the improvement of the provider's models; under the provider's published terms for that service, content sent through it is not used to train the provider's models unless the customer opts in. We do not operate the provider's systems. How long the provider keeps a request for its own security and abuse monitoring, and how it protects it, is governed by the provider's own terms and policies; we do not control that period.
The provider's answer is only a suggestion. Your approved rules decide what happens, and an answer is sent automatically only with text you approved.
Google information is otherwise processed on the systems of the hosting and database provider that runs OwnerFreed, which acts on our instructions, and messages we send pass through our email delivery provider (see "Operational notifications"). We may disclose Google information where the law requires. We do not share it with anyone else.
What OwnerFreed stores
- The authorization that keeps a connection working (a refresh token issued by Google), in an encrypted secrets store that is separate from ordinary account records. It is never shown in your account or sent to your browser. Short-lived access tokens are used for the request in progress and are not stored.
- Connection status: that a Google account is connected, when it was last checked, the result of a failed attempt, and counts of messages checked. This does not include your mailbox address or your list of calendars.
- A record of each inquiry that was handled: Google's identifier for the message, the address to reply to, the time the message arrived, which of your inquiry types it was matched to, what was done and a reason code, a confidence score, the name of the AI service that was used, and the version of your rules.
- Records of what we sent: the address an answer or an acknowledgment was sent to and the text we sent; and the notification we sent you.
The subject and the text of a message are processed only for the moment it takes to handle that inquiry and are not stored in OwnerFreed's records. We do not keep attachments, and we do not create or keep a summary of a message. We keep nothing about messages that are not recognized as new inquiries.
How long we keep Google data
- The stored authorization is kept only while the connection is in use.
- Records of handled inquiries are deleted automatically after no more than 30 days.
- Records of what we sent are kept as communications records (see Retention). The address of the person who wrote to you is removed from our copy of a notification when the inquiry record is deleted.
Deleting data and disconnecting
You can end a Google connection at any time, in any of these ways:
- In your OwnerFreed setup page, choose Disconnect next to the connected account. We delete the stored authorization immediately and stop accessing that Google account. This does not remove OwnerFreed from the list of connected apps in your Google Account; to remove it there as well, use your Google Account's settings (myaccount.google.com/permissions).
- In your Google Account, remove OwnerFreed's access. From that moment Google refuses our requests. For a connected mailbox, the service notices this at its next check and deletes the stored authorization.
- Email [email protected] and ask us to disconnect the account or to delete the records that came from it. We handle the request as described under Privacy requests; we may keep records we are required or reasonably need to keep.
The stored authorization is also deleted when your service for that automation ends. After a connection ends we make no further requests to that Google account, and the automation that depends on it stops until you connect again. Records of handled inquiries that already exist are not removed at the moment you disconnect; they are deleted automatically within 30 days. Records of what we sent are communications records and are not deleted by disconnecting.
No advertising, sale, unrelated profiling or model training
We do not sell Google information. We do not use it for advertising, including personalized or interest-based advertising. We do not use it to build profiles of you or of the people who write to you for any purpose unrelated to the automation. We do not use it to develop, improve, or train generalized artificial intelligence or machine learning models, and we do not authorize our service providers to do so.
Limited Use. OwnerFreed's use of information received from Google APIs, and any transfer of it to another app or service, adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Operational notifications
When an inquiry is left for you to answer, or needs your attention at once, we send a notification email to the address of your OwnerFreed account, through our email delivery provider. It contains the email address of the person who wrote to you, the kind of inquiry as you named it, the time it arrived, and whether that person received an acknowledgment. It does not contain the subject or the text of their message, and it does not contain an AI-generated summary.
Your controls
You decide whether to connect a Google account at all, and you can disconnect at any time. You define and approve the rules for your inquiries, and no mail in your mailbox is read until you have approved them; you can change them later, and a change applies only after you approve it. Our staff do not read your mailbox, and the subject and text of your messages are not stored where staff could read them. A person at OwnerFreed may look at the Google information we keep only with your permission (for example when you ask us to look into a problem with your automation), when it is needed for security (such as investigating abuse or a suspected breach), or when the law requires it.
Questions about Google data
Write to [email protected].
Text messages
What we keep. If a business owner adds your mobile number for OwnerFreed alerts, we keep the number, the name or label the owner gave it, your role, and the business it is for. When you confirm the number, we keep that it was confirmed and when (not the code). When you decide about alert texts, we keep your choice (agree or decline), the exact wording and its version, the language, the business name shown and the time. If you reply STOP, START or HELP, we keep that you did and when, not the text of your message. We keep a copy of each alert text we send you and its delivery status.
How we use it. Only to confirm that the number is yours, to send the alert texts you agreed to in the language you chose, to honour STOP, START and HELP, to show the business owner your choice, and to keep a record that proves your choice. If the business owner turns on urgent-call transfer and lists you as a contact, we may also connect urgent customer calls to your confirmed number (a phone call, not a text); that is separate from your choice about texts.
Who receives it. The business owner who added you (they see your number partly hidden, and your choice); our hosting and database provider, which stores it on our instructions; and our message delivery provider, which delivers the texts and calls and processes STOP, START and HELP on our instructions. We may also disclose it where the law requires.
No sharing of mobile opt-in information. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not sell, rent or share your mobile number, or your text-message opt-in and consent, with third parties or affiliates for their marketing or promotional purposes. The categories of sharing described elsewhere in this Policy exclude text-message originator opt-in data and consent; this information is not shared with any third party except the service providers above, acting on our instructions to run the alerts, and where the law requires.
How long. We keep this information while the business uses OwnerFreed alerts and afterwards only as long as reasonably needed to prove your choice, to keep honouring a STOP, and for the purposes in "Retention". You can make a request as described in "Privacy requests". The text-message program terms are at ownerfreed.com/text-alerts.
Service providers
We use service providers to help us run OwnerFreed, such as payment processing, message or email delivery, hosting, and, where an automation uses AI, an AI service provider. We disclose information to them as needed to operate our services. We do not authorize those providers to use customer information for their own independent advertising or marketing purposes. We do not sell personal information, and we do not share it with others for advertising based on activity across different businesses or websites. Information we receive from Google is disclosed only as described under "Google User Data".
Mobile numbers and text-message opt-in information are never shared for marketing (see "Text messages").
Security
We use reasonable administrative and technical safeguards, including limiting who can access data and encrypting data in transit. No system is perfectly secure and we cannot guarantee absolute security. We do not claim any security certification. If a security incident affects your personal information, we will notify you as required by applicable law.
Retention
We keep information only as long as reasonably necessary for the purposes in this Policy, including providing the service, keeping business and legal records, resolving disputes, and complying with applicable law. In practice:
- Account, order, and communications records are kept while you are a customer and afterward as long as they are reasonably needed for those purposes.
- Text typed into our discovery tools is deleted automatically after 7 days. The anonymous usage information described under Website visitors is kept as long as it is reasonably useful for improving the service.
- Payment records are kept as long as needed for accounting, tax, and dispute purposes; card details stay with our payment processor.
- Records of what you accepted at checkout are kept unchanged for as long as a claim about that agreement could reasonably be brought.
- Privacy requests and our responses are kept as long as needed to show we handled them.
- Google connection authorization, inquiry records (up to 30 days), and records of what we sent are kept and deleted as described under "Google User Data".
- After your service ends, your business data remains yours; you may ask us in writing (see the Terms of Service) for a copy of the business data you provided. We keep it only as long as reasonably needed, and we delete or de-identify information we no longer need, except records we are required or reasonably need to keep.
Privacy requests
Depending on where you live and the privacy laws that apply, you may be able to ask us to give you access to, correct, or delete your personal information, or to stop marketing messages. To ask, email [email protected]. We may need to verify who you are, and we will respond within the time the applicable law requires. If you are one of our customers' customers, we will direct your request to the business you dealt with, as described in Section 4.
Changes and contact
We may update this Policy. A new version starts on the date it states, and for a material change we will email you at least 30 days before it takes effect. Questions: [email protected].
Contact. OwnerFreed (SANMO HOME CARE SERVICE, INC.), 4128 West Commonwealth Avenue, Ste 201, Fullerton, CA 92833. Phone: +1 (818) 321-9582. Email: [email protected].