Privacy Policy

Appreciate Engine (“we,” “our,” or “us”) operates the Appreciate Engine platform. This Privacy Policy describes how we collect, use, store, and share information about you when you use our service.

Information we collect

We collect information in two ways:

• Information you provide directly, your name, email address, and business name when you create an account, and billing information when you start a paid subscription. (No payment details are collected to start your free trial.)
• Customer data you add, names, phone numbers, email addresses, dates (birthdays, anniversaries), job history, and notes you enter about your own customers, or that you import from a tool you connect (see Connected integrations below). This data belongs to you.
• Usage data, pages visited, features used, and actions taken within the app, collected to improve the product and troubleshoot issues.

How we use your information

• To operate and improve the Appreciate Engine platform
• To process payments and manage your subscription
• To send you product updates and support communications
• To surface moments and suggested messages based on your customer data

Data isolation

Each business account is completely isolated. Your customer data is never visible to other businesses on the platform. We enforce this at the database level using row-level security, it is not simply an application-layer check.

Connected integrations (importing customers)

You can connect Appreciate Engine to tools you already use, currently Jobber and QuickBooks (Intuit), to bring your existing customer list in. When you connect one of these tools:

• We access only the customer information needed to keep your people appreciated, their names, contact information (phone and email), and addresses. Access is read-only, and we never write anything back to the connected tool.
• For QuickBooks specifically, we access only your customer records. We do not access your QuickBooks accounting or financial data, no invoices, payments, or bank or tax information.
• Nothing is imported automatically. New customers and changes pulled from a connected tool are shown to you for review, and are only added or updated in Appreciate Engine after you approve them.
• The secure access tokens that authorize the connection are stored encrypted and are readable only by your own account; other businesses can never see or use them.
• You can disconnect a tool at any time from Settings → Integrations. Disconnecting immediately revokes our access, deletes the stored access tokens, and stops all future syncing. Customer records you already reviewed and imported remain your data in Appreciate Engine, you can delete them like any other customer, and you can ask us to delete all data sourced from a connected tool by emailing us.

Our use of data received from Intuit’s APIs adheres to Intuit’s developer and data-stewardship requirements. We do not use data from any connected tool for advertising, and we never sell it.

Your use of a connected tool is also governed by that tool’s own terms and privacy policy. Appreciate Engine is not affiliated with, endorsed by, or sponsored by the tools we integrate with.

Sending e-cards from your own email

You can connect your own Gmail or Microsoft 365 / Outlook mailbox to send Outreach e-cards. We request send-only access, we can never read your mailbox, and you can remove the connection at any time from Settings → Integrations, which deletes the stored access tokens. When you send an e-card, the recipient’s email address and the card you designed are transmitted through your own email provider to deliver the message; the message comes from your address and lands in your Sent folder.

Appreciate Engine’s use of and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers (subprocessors)

We do not sell your data or your customers’ data, and we never share it for advertising or marketing. We share data only with the service providers that help us operate Appreciate Engine, each contractually bound to protect it:

• Supabase, database and authentication, storing your data on infrastructure hosted on AWS.
• Stripe, payment processing. Card details are entered directly with Stripe and are never stored on our servers. Stripe is certified PCI-DSS Level 1, the most stringent level of payment-security certification.
• Vercel, application hosting and content delivery.
• Resend, sending transactional email (welcome, account, and support messages).
• Cloudflare, bot protection on our sign-up and login forms.

We may add or change subprocessors as the product evolves. We’ll keep this list current and, for material changes, notify you by email or in-app notice.

Data retention

We retain your data for as long as your account is active. If you cancel your account, your data is retained for 30 days before permanent deletion, giving you time to export anything you need.

Security

Data is encrypted in transit (TLS) and at rest. We use industry-standard security practices including row-level security at the database layer and regular dependency audits.

Your rights

You can request a copy of your data, corrections to inaccurate data, or deletion of your account at any time by contacting us at support@appreciateengine.com.

Changes to this policy

We’ll notify you by email and with an in-app notice if we make material changes to this Privacy Policy. Continued use of the service after that notice constitutes acceptance of the changes.

Contact

Questions about this policy? Email us at support@appreciateengine.com.