Privacy Policy

Who We Are

Marathon Simplicity is a CRM and marketing-automation software platform based in Arlington, TX. We help trade businesses — HVAC, plumbing, electrical, roofing, and landscaping companies — generate more leads and automate their follow-up. This policy covers our website, our client portal, and our mobile app.

Information We Collect

We collect information that is necessary to provide our services:

• Business information — company name, owner name, trade, address, phone, and email provided when you onboard.
• Lead and contact data — names, phone numbers, and emails of your customers that flow through our system via missed calls, inbound texts, or manual entry.
• Appointment data — scheduled estimates or service calls managed through the platform.
• Communication records — SMS and campaign messages sent through your Twilio number via our platform, and transactional emails sent on your behalf.
• Photos and files — images uploaded to job records, accounting entries, or your business website through the client portal.
• Billing information — your subscription plan and payment method (card or, where enabled, bank account via ACH), processed securely through Stripe. We do not store full card or bank-account numbers — Stripe handles all payment data.
• Account credentials — your login email and a securely hashed password managed by Supabase Auth.
• Device and push data — when you use our mobile app, we store a push-notification token to send you alerts (such as new booking requests) and basic device information needed to deliver them.
• Technical data — we log IP addresses and request metadata to secure the platform and prevent abuse, such as rate limiting.
• Location data — addresses you or your customers enter are converted to map coordinates (geocoded) to power scheduling and map views.

How We Use Your Information

• To operate your client dashboard and display your leads, appointments, and reviews.
• To send automated SMS follow-ups on your behalf via Twilio.
• To send transactional email notifications (e.g., new lead alerts) via Resend.
• To generate performance reports and ROI calculations for your account.
• To contact you about your account, billing, or service updates.
• To send mobile push notifications about account activity (such as new booking requests), if you enable them.

Third-Party Services

We use a small number of trusted services to operate the platform. Each handles data under their own privacy policies:

• Supabase — database and authentication (supabase.com)
• Stripe — payment processing and subscription billing. Stripe stores your payment method and billing details under their own PCI-compliant systems (stripe.com)
• Twilio — SMS messaging on your behalf (twilio.com)
• Resend — transactional email delivery (resend.com)
• Anthropic — AI-powered features such as review reply generation and the CRM assistant use Anthropic's Claude API. Data sent to Claude is used only to generate the requested output and is not used to train Anthropic's models (anthropic.com/privacy)
• Vercel — web hosting and deployment (vercel.com)
• Railway — Twilio relay server hosting (railway.app)
• Upstash — rate limiting, caching, and background job processing (Redis + QStash) to keep the platform fast and reliable (upstash.com)
• Sentry — error monitoring to detect and fix problems. Configured not to capture personal information by default, though diagnostic context may include identifiers such as an account ID or email (sentry.io)
• Expo — push-notification delivery for our mobile app (expo.dev)
• OpenStreetMap / Nominatim — converts addresses to map coordinates for scheduling and maps (openstreetmap.org)

We do not share your data with these services beyond what is required to provide the service you signed up for.

SMS Messaging & TCPA Compliance

Marathon Simplicity sends automated SMS messages on behalf of our clients to their customers (e.g., missed call text-backs, appointment reminders, and follow-up sequences). These messages are sent only to individuals who have a prior business relationship with the client or who have opted in to receive communications.

Every automated SMS we send includes or is preceded by a clear opt-out mechanism. Recipients can reply STOP at any time to stop receiving messages. Reply HELP for assistance. Message and data rates may apply.

We comply with the Telephone Consumer Protection Act (TCPA) and all applicable carrier guidelines. We do not send unsolicited bulk SMS and do not send messages to numbers on the National Do Not Call Registry.

Website Hosting for Clients

You may publish a single-page business website through our platform. This site is hosted on our infrastructure and is publicly accessible. Any business information, services, pricing, and photos you add to your website will be visible to anyone with the link. You are responsible for ensuring the content you publish is accurate and that you have the rights to any photos you upload.

Our Mobile App

We offer a mobile app for managing your account on the go. To keep you signed in, the app stores your login session in your device's secure storage (the iOS Keychain or Android Keystore), not in plain text. With your permission, the app can send push notifications, access your photos to upload job images, and use your location to power the daily schedule map. You can revoke these permissions at any time in your device settings. Account signup and billing are handled on the web, not through in-app purchases.

Billing & Subscriptions

Marathon Simplicity is a monthly subscription billed through Stripe, and includes a 14-day free trial. You can pay by card or, where enabled, by bank transfer (ACH). Your payment method is stored securely by Stripe — we never see or store your full card or bank-account number.

You can manage, upgrade, or cancel your subscription at any time from the Account page inside your portal. If you cancel, your access continues until the end of the current billing period, after which your portal account will be paused.

AI-Powered Features

Some features use Anthropic's Claude AI model, including the CRM assistant chat and automated review reply suggestions. When you use these features, relevant data (such as review text, business name, or CRM context) is sent to Anthropic's API to generate a response.

Anthropic does not use this data to train their models. All AI-generated content is suggestions only — you review and control what is published or sent. See Anthropic's privacy policy at anthropic.com/privacy.

Data Security

All data is stored in Supabase (PostgreSQL) with Row Level Security (RLS) enabled. This means your account can only access your own data — no other client can see your leads, contacts, or reports. Connections are encrypted in transit (HTTPS/TLS). Passwords are never stored in plain text.

Cookies

Our web portal uses essential cookies to keep you securely signed in and to remember your preferences (such as light or dark mode). We do not use third-party advertising or cross-site tracking cookies.

Data Retention

We retain your data for the duration of your engagement with Marathon Simplicity. If you end your service, you may request deletion of your data and we will remove it within 30 days, except where retention is required by law.

Your Rights

You have the right to:

• Access the data we hold about your business.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Ask what data we have collected and how it is used.

Children's Privacy

Marathon Simplicity is a tool for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Contact Us

If you have any questions about this Privacy Policy or want to make a data request, contact us at:

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top. Continued use of the platform after changes means you accept the updated policy.