Privacy policy

1. Who we are

CIDSync is operated by Last Mile Strategies LLC, a Georgia-based company. CIDSync helps home-service and field-service businesses organize branded-caller-ID operations by reviewing numbers from approved source systems such as ServiceTitan and preparing controlled updates to Hiya Connect.

Privacy questions can be sent to privacy@cidsync.com. Security reports can be sent to security@cidsync.com.

2. What this policy covers

This policy covers the CIDSync marketing site, dashboard, connection setup, dry-run previews, sync history, notifications, and support interactions. It does not cover your own ServiceTitan, Housecall Pro, Hiya, carrier, payment, or other third-party accounts; those providers maintain their own terms and privacy practices.

3. Information we collect

Account and billing information

• Your email address, company name, sign-in records, and basic profile details.
• Subscription status and billing identifiers from Stripe. CIDSync does not store full card numbers.

Connection credentials and configuration

• ServiceTitan connection values needed for the approved integration path, such as client ID, client secret, app key, tenant ID, and environment when you provide them.
• Hiya Connect credentials needed to read registration state and perform approved live syncs.
• Connection fingerprints, timestamps, and status metadata. We show fingerprints, not plaintext secrets.

Operational sync data

• Active campaign or hosted business phone numbers, source campaign labels, and related caller-ID fields.
• Hiya registration state for those numbers, including planned create, update, disable, or no-op outcomes.
• Dry-run previews, sync run status, record-level results, errors, notifications, and audit timestamps.
• Back-office mapping data used to align ServiceTitan sources with Hiya brand profiles and approved defaults.

Support and site information

• Messages you send us, support context, and troubleshooting details you choose to provide.
• Basic security and operational logs used to prevent abuse, debug errors, and operate the service.

4. Information we deliberately do not collect

• Call recordings, call transcripts, text-message content, emails to your customers, or job notes.
• Customer records, invoices, estimates, payments, payroll, dispatch board content, or technician location data.
• Banking credentials, payment card numbers, or credentials for unrelated business systems.
• Plaintext ServiceTitan or Hiya secrets after save. Stored credentials are encrypted and never re-displayed.

5. How we use information

• Operate CIDSync, authenticate users, verify connections, and display connection health.
• Read approved source phone-number/campaign data and compare it to Hiya registration state.
• Prepare dry-run previews before live changes are applied.
• Apply approved Hiya sync actions when live mode is enabled for your account.
• Maintain sync history, notifications, support records, and billing status.
• Protect the service from abuse, debug failures, and comply with legal obligations.

We do not sell personal information. We do not share data with third-party advertisers. We do not use CIDSync customer data to train AI models or build unrelated data products.

6. ServiceTitan data handling

CIDSync is designed around ServiceTitan’s published integration expectations: documented data flows, least-privilege access, no credential tunneling, and clear separation between source systems and downstream sync actions. ServiceTitan access is read-only and uses per-tenant credentials that you issue inside your own ServiceTitan account; fixture-backed flows are used for development and demonstration.

• We use ServiceTitan access only to retrieve the limited phone-number and campaign data needed for branded-caller-ID review and sync preparation.
• We do not use ServiceTitan credentials to impersonate a customer outside approved integration paths.
• We do not ask customers to share unapproved third-party app keys for prohibited tunneling.
• We do not write jobs, invoices, estimates, dispatch records, customer records, or accounting data back to ServiceTitan.

7. Who we share information with

We share information only with service providers needed to operate CIDSync or complete actions you approve.

We may disclose information if required by law, to protect CIDSync or customers from abuse, or as part of a merger, acquisition, or sale of substantially all assets, subject to appropriate protections.

8. How we protect information

• TLS encryption for data in transit.
• AES-GCM envelope encryption for provider credentials before storage.
• Credential encryption keys stored separately as runtime secrets, not in the database or repository.
• Postgres Row-Level Security so tenant records are isolated at the database layer.
• Service-role-only writes for credentials, sync results, worker telemetry, and billing webhooks.
• Masked phone numbers and sanitized logs; provider secrets and authorization headers are not logged.
• Dry-run previews by default; live syncs run only under an active subscription and can be paused at any time.

9. Data retention and deletion

We keep account, tenant, connection, sync, and billing records while your CIDSync account is active. If you disconnect an integration, we delete the associated encrypted credentials and stop using that provider connection. If you close your account or submit a verified deletion request, we delete identifiable account and tenant data within 30 days unless a longer period is required for legal, billing, fraud-prevention, or security reasons.

Limited security logs, billing records, and backup snapshots may persist for their normal retention windows and are protected by the same access controls and encryption controls. Disconnecting CIDSync does not delete or modify data inside ServiceTitan, Hiya, Housecall Pro, Stripe, or any other third-party account.

10. Your choices

• Disconnect ServiceTitan, Hiya, or another provider from the Connections page.
• Keep syncs in dry-run until you approve live mode.
• Cancel your subscription from Billing.
• Request access, correction, export, or deletion by emailing privacy@cidsync.com.

11. Cookies and tracking

CIDSync uses authentication/session cookies needed to keep you signed in and protect dashboard access. We do not use advertising cookies or cross-context behavioral advertising. If privacy-preserving analytics are added, they will be used only to understand product performance and improve the service.

12. Changes to this policy

We may update this policy as CIDSync evolves, including when new source systems, carriers, or registration providers are added. Material changes will be reflected by updating the date above and, when appropriate, notifying customers through the product or by email.

13. Contact

Privacy requests: privacy@cidsync.com
Security reports: security@cidsync.com
General questions: hello@cidsync.com

CIDSync is an independent product and is not affiliated with, endorsed by, or sponsored by ServiceTitan, Housecall Pro, Hiya, or other named vendors. ServiceTitan, Hiya, Housecall Pro, and Stripe are trademarks of their respective owners. Branded calling is delivered through Hiya Connect under your own Hiya agreement.