Privacy Policy

• Account & contact information you or your business provide: name, business name, contact person, service and billing address, email, and phone number.
• Service records created as we provide service: scheduled and completed collections and grease-trap services, quantities collected, manifests, documents, and account notes.
• Photos and signatures you submit to document service, inspections, deliveries, or expenses. Camera and photo access is used when you choose to capture or attach evidence.
• Employee information: job role, workplace, clock-in and clock-out times, meal and break records, and work or expense submissions. Access depends on the employee's assigned permissions.
• Billing & payment information: invoices, credits, and payments on your account. Online card payments are processed by our payment processor (Stripe); we do not store full card numbers on our systems.
• Portal usage & technical data: sign-in activity and basic technical information (such as browser and device type) needed to operate and secure the Service.

The mobile app connects to the same account records as the portals. Sign-in credentials are protected using the phone's secure storage. If offline route capture is enabled, downloaded routes and unsent service evidence are stored in an encrypted database on the phone until synchronized or removed through the app's controls.

Stripe collects card details on its payment pages. If you save a card for recurring service, Stripe stores the reusable payment method; Reyes Energy stores its reference, card brand, and last four digits. Our app and ERP do not store your full card number or security code.

We use the information to provide and schedule our services; create manifests, invoices, and other records; process billing and payments; communicate with you about your account and services; keep the Service secure; and comply with our legal, tax, and regulatory obligations.

We do not sell your personal information. We share it only with:

• Service providers who help us operate the business — such as Stripe (payment processing), Intuit QuickBooks (accounting), and our email delivery provider — each only to the extent needed to perform their function.
• Authorities or others when required by law, regulation, or legal process, or to protect our rights, safety, or property.
• A successor in connection with a merger, acquisition, or sale of assets.

We integrate with Intuit QuickBooks Online to maintain our accounting records. When enabled, customer, invoice, credit, and payment information is shared with Intuit to keep your account in our books. Intuit's handling of that data is governed by Intuit's own privacy policy.

We keep information for as long as needed to provide the Service and to meet our legal and regulatory obligations. Certain records — including service manifests for used cooking oil and grease — are retained for the periods required by applicable law (for example, California recordkeeping requirements).

Restaurant and vendor users can delete their personal app/portal login in Account settings or at Delete app account. We verify your password and confirmation, then remove your login details, password-reset links and app sessions. This removes access from all devices.

Your business service account is separate from your login. Invoices, manifests, payment records, service history and information needed for ongoing service, legal obligations, accounting or security may be retained. Deleting a login does not cancel scheduled or recurring services, remove the business's saved payment method, or discharge payment obligations. Other authorized users retain their access.

We record the deletion request for an administrator to review associated personal information and remove information no longer needed. Retained information remains subject to this policy and applicable retention requirements. Employee and office logins are company-managed; personnel-data requests can be made using the contact details below.

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted connections and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

You may request access to, or correction of, the account information we hold about you by contacting us. Depending on your location, you may have additional rights (for example, California residents under the CCPA/CPRA). To exercise any rights, contact us using the details below.

The Service is intended for businesses and is not directed to children under 13, and we do not knowingly collect their information.

We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date.

Reyes Energy Corporation
3400 Union Pacific Ave, Los Angeles, CA 90023
Email: info@reyesenergycorporation.com
Phone: 213-271-4101