Privacy Policy

Effective Date: October 7, 2026

B&L Labor Services LLC and BOSS CRM Systems LLC ("BOSS," "we," "us," or "our") respect your privacy and are committed to protecting information collected through our websites, applications, customer portals, business management systems, and integrations with third-party services.

This Privacy Policy explains what information we collect, how we use and protect it, when information may be shared, and the choices available to users.

Information We Collect

Depending on how you interact with BOSS or B&L Labor Services, we may collect information such as your name, business name, email address, telephone number, service address, billing information, estimates, invoices, jobs, appointments, messages, photographs, documents, signatures, payment records, and other information necessary to provide or manage services.

We may also collect technical information associated with use of our systems, including device and browser information, authentication and session information, timestamps, application activity, security logs, and diagnostic information.

Payment card information may be processed by third-party payment processors. We do not intentionally store complete payment-card numbers unless expressly provided through a system designed and authorized to process such information.

How We Use Information

We may use information to:

• Provide, schedule, manage, and document services;

• Create and manage estimates, jobs, work orders, invoices, payments, and customer records;

• Operate customer, employee, vendor, and administrative portals;

• Communicate regarding services, appointments, transactions, and account activity;

• Authenticate users and protect accounts;

• Maintain business records;

• Improve application functionality and reliability;

• Diagnose technical problems and prevent fraud or unauthorized access;

• Integrate with third-party services authorized by the user; and

• Comply with applicable legal and regulatory obligations.

Google Business Profile and Google API Data

BOSS may allow an authorized business user to connect a Google account or Google Business Profile using Google's OAuth authorization process.

When a user authorizes this connection, BOSS may access Google Business Profile information permitted by the scopes approved by the user. Depending upon the functionality enabled, this information may include Business Profile account and location information, business details, customer reviews, ratings, review dates, reviewer information made available through the applicable Google API, review replies, and Business Profile performance information.

BOSS may use this information to display and manage connected Google Business Profile information within BOSS, monitor and organize reviews, identify reviews awaiting a response, display ratings and review activity, allow authorized users to prepare or publish review replies, provide business-performance information, and support other Business Profile management functions requested by the authorized user.

BOSS will only request Google permissions reasonably necessary to provide the Google-connected functionality offered by the application.

Google OAuth Credentials

BOSS does not receive or store a user's Google password through the Google OAuth connection.

Google OAuth access and refresh credentials may be securely stored on BOSS-controlled server infrastructure when necessary to maintain an authorized connection to Google services without requiring the user to reconnect each time.

OAuth credentials are intended to be accessible only by authorized server-side application components and are not intentionally exposed to ordinary users or public client-side application code.

Users may disconnect their Google integration from BOSS when that functionality is available and may also revoke BOSS access through their Google Account permissions.

Use of Google User Data

Information received from Google APIs is used only to provide or improve user-facing functionality that is appropriate to the user's interaction with BOSS.

We do not sell Google user data.

We do not use Google user data for advertising purposes.

We do not transfer Google user data to third parties except when necessary to provide or improve requested application functionality, for security purposes, to comply with applicable law, or when expressly authorized by the user.

Human access to Google user data is limited to circumstances where it is necessary for security, support, troubleshooting, legal compliance, or when the user has expressly authorized such access.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Review Management

When a connected Google Business Profile permits review management, BOSS may retrieve reviews and existing responses and display them to authorized users.

If an authorized user chooses to publish, modify, or remove a review reply through BOSS, BOSS may transmit that requested action to Google through the applicable Google Business Profile API.

BOSS does not guarantee that Google will accept, publish, retain, or display a particular response. Google's own policies and systems govern content appearing on Google services.

Information Sharing

We may share information with service providers and technology vendors when reasonably necessary to operate BOSS and provide requested services. These may include cloud hosting, authentication, communications, payment processing, mapping, document processing, analytics, and other operational providers.

We may also disclose information when reasonably necessary to comply with law, court orders, legal process, protect our rights or property, investigate fraud or security incidents, or protect users and others from harm.

We do not sell personal information as part of our ordinary business operations.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

No electronic storage or transmission system can be guaranteed to be completely secure, and therefore we cannot guarantee absolute security.

Data Retention

We retain information for as long as reasonably necessary to provide services, maintain legitimate business and transaction records, meet contractual requirements, resolve disputes, enforce agreements, maintain security, and satisfy applicable legal obligations.

Google-connected information and authorization credentials may be retained while an integration remains connected or as otherwise reasonably necessary for security, recordkeeping, or legal obligations.

Disconnecting Google and Revoking Access

Users may revoke BOSS's access to their Google account through Google's account security and third-party access controls.

Revoking Google authorization prevents BOSS from making future authorized Google API requests after the applicable authorization is revoked or expires.

A user may also contact us to request assistance disconnecting a Google Business Profile integration.

Data Access and Deletion Requests

Users may contact us to request access to, correction of, or deletion of personal information associated with their account, subject to applicable law and legitimate record-retention requirements.

A request to delete information may not require us to delete records that we are legally permitted or required to retain, including certain transaction, accounting, security, contractual, dispute, and legal records.

Requests concerning Google-connected data or disconnection of a Google integration may be submitted using the contact information below.

Children's Privacy

BOSS and our business-management services are not intended for children under 13, and we do not knowingly collect personal information from children under 13 through BOSS business accounts.

Third-Party Services

BOSS may contain links to or integrations with services operated by third parties, including Google and payment, communications, mapping, hosting, and other technology providers. Those services may maintain their own privacy policies and terms, and their handling of information is governed by their respective policies.

Changes to This Privacy Policy

We may update this Privacy Policy as our services, integrations, legal requirements, or business practices change. The updated policy will be posted on this page with a revised effective date.

Contact Us

Questions, privacy requests, Google integration questions, and data-deletion requests may be directed to:

B&L Labor Services LLC / BOSS CRM Systems LLC
Email: bllaborservices@gmail.com
Website: www.bllaborservices.com

Last Updated: October 7, 2026