We act as a service provider for the business that builds the app (our customer). The customer decides what its app shows and is responsible to its own clients.
Our customers' account and billing details; for each app, the client names, contact details, project stages, appointments and invoice titles and amounts that the customer's CRM returns when a client opens their link; app settings and uploaded logos or photos; and basic usage counts.
Our storage holds: app settings and the app page; encrypted access tokens; for each client, only their CRM id (a code, not a name), a link-version marker that lets us switch old links off, when they last opened the app, an activity marker (about five weeks), their notification subscription if they turned notifications on, and daily counters; short-lived copies of public data lookups that a customer switches on (up to a day); the customer's plan and billing status; an audit trail of account actions (90 days); and a count of failed admin sign-in attempts by network address (about ten minutes). Client names, contact details, appointments and invoices are read from the CRM each time and are not saved in our storage. Photos a client uploads go to the customer's CRM media library, not to us. A client's own phone keeps a copy of their screens so the app works offline until they sign out.
We do not sell data, use client data for advertising, or share it except with the providers below to run the service.
Cloudflare (hosting and storage), HighLevel (the source system) and, only if a customer turns them on, Google and data services.
On uninstall or request, tokens, app settings and activity records are deleted. Requests are answered within 30 days. See the deletion page.
Tokens are encrypted, links are signed and limits apply. No system is perfectly secure.
California and EU/UK rights are honored through the customer. Contact us at group@hhmcustomhome.com.
HHM Core, 7013 Broughton Ln, Indian Land, SC 29707 · group@hhmcustomhome.com · Terms · Privacy · Support · Data safety · Delete data