mypros+

Privacy Policy

Last updated: October 23, 2026

Sections 1.2, 3.2, 3.7, 5 and 6 were updated on October 3, 2026. The changes take effect November 5, 2026.

Section 8.1 was updated on October 5, 2026.

Sections 1.2, 3.1, 3.6, 4, 5, 6 and 8.4 were updated on October 17, 2026. The changes take effect November 16, 2026.

Sections 3.2 and 6 were updated on October 19, 2026. The changes take effect November 19, 2026.

Sections 1.2 and 6 were updated on October 21, 2026. The changes take effect November 5, 2026.

Section 4 was updated on October 21, 2026.

Section 14 was updated on October 22, 2026.

Section 3.1 was updated on October 22, 2026.

Section 1.3 was added and Sections 1.2, 3.1 and 6 were updated on October 23, 2026.

Sections 3.2, 6 and 14 were updated again on October 23, 2026. These changes take effect on that date.

Darwin & Rose, LLC (“Company,” “we,” “us,” or “our”) operates the MyPros+ platform (“Service”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Service.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, do not use the Service.

1. Information We Collect

1.1. Information You Provide

Account Information: Name, email address, phone number, company name, ZIP code, business type, and trade categories when you create an account or complete onboarding.

Payment Information: Billing details are collected and processed by our third-party payment processor (Stripe, Inc.). We do not store complete credit card numbers, CVVs, or full payment account numbers on our servers. We may store the last four digits of your card number and expiration date for display in your account settings.

Communications: Information you provide when contacting us via our contact form, submitting feedback, or requesting support.

User Content: Diagnostic queries, annotations, notes, and other content you voluntarily submit through the Service.

1.2. Information Collected Automatically

Usage Data: Features used, searches performed, diagnostic queries submitted, pages viewed, documents accessed, and interactions with the Service.

Device Information: Browser type and version, operating system, device type, screen resolution, and device identifiers.

Log Data: IP address, access times, referring URLs, and pages visited.

Location Data: Approximate location based on your IP address. We collect your device's precise location only when you use Check right here in Territory and allow it in your browser, and only for that check (see Section 1.3).

Cookies and Similar Technologies: See Section 8 (Cookies and Tracking) below.

Camera and Image Data: If you use the camera feature to photograph model tags, wiring diagrams, or other appliance documentation, these images are transmitted to our AI provider, Anthropic, for processing. Photos taken to read a model tag or scan a barcode are processed in real time and are not stored on our servers. Photos you attach to a chat are stored with that chat so you can see them when you reopen it, until you clear your chat history or delete your account. If you are on a team, photos in a chat your team administrator can view stay with that chat for the administrator when you clear your history, until you delete your account (see Section 6).

1.3. Territory

Territory is an optional tool that shows where your business ranks in Google Maps searches in the ZIP codes you serve. If you use it, we collect and use the following:

  • Your business: the Google listing you confirm (its name, its address if Google shows one, its Google listing ID, map location, category, rating and number of reviews), the ZIP codes you serve, up to 5 searches, and your Territory settings. To find your listing, we use the company name and ZIP code in your MyPros+ profile, or the name, ZIP code or Google Maps link you enter.
  • Search suggestions: we suggest searches from the brands and appliance types you looked up in MyPros+ in the last 90 days. Only you see them.
  • Scans: our data provider, DataForSEO, runs your searches on Google Maps from points in each ZIP code you serve, when you set up Territory, when you tap Scan now, and every week while Scan every week is on. We keep the results: which businesses show, in what order, and the public details from their Google listings.
  • Check right here: when you tap Check right here, your browser asks whether to share your device's location. If you allow it, we send that location to DataForSEO, which runs one search from that spot. We use the exact location only for that check. We keep the check's ZIP code, town and results, not the exact location.
  • AI card: once a month, DataForSEO asks ChatGPT, Gemini, Claude, Perplexity and Google's AI answers a question such as “Who is the best appliance repair company in Burbank, CA?”, built from your main search and your listing's city and state. Google's AI answers also gets your listing's map location. The question never includes your name, your business name or your contact details. We keep the answers.
  • Points: a record of the points each scan and check uses.
  • Weekly email: if you turn on Weekly email in Territory Settings, we email you a short summary of your ranks each week through Resend.
  • Other businesses: Territory shows details that other businesses publish in their Google listings, such as their name, rating, number of reviews, address and phone number.

We use this information only to run Territory for you and to keep its costs and use within limits. DataForSEO does not receive your name, email address or phone number. Your browser loads Territory's maps from CARTO (see Section 3.1).

We keep Territory data while your account is active. Remove business in Territory Settings deletes that business with its service area, searches, maps, history, AI card answers, Check right here results and tasks. It keeps the record of points you used, so points used this month still count, and our record of each request we sent to DataForSEO, such as the search and its cost, which we keep for our cost records. These request records do not hold your Check right here location. Deleting your account deletes all your Territory data, except that the DataForSEO request records are kept without your account (see Section 6).

2. How We Use Your Information

We use your information to:

  • Provide, operate, maintain, and improve the Service
  • Process subscriptions and payments
  • Verify your account via email and SMS
  • Send transactional communications (account confirmations, billing receipts, trial notifications, service updates, security alerts)
  • Respond to your inquiries and support requests
  • Monitor and analyze usage patterns to improve the Service
  • Detect, prevent, and address fraud, abuse, or security issues
  • Enforce our Terms of Service
  • Comply with legal obligations

We do NOT use your personal information to:

  • Sell or rent your data to third parties
  • Serve targeted or behavioral advertising
  • Build advertising profiles
  • Share your diagnostic queries or repair history with third parties for their independent use
  • Send unsolicited marketing emails (unless you opt in)

3. How We Share Your Information

We may share your information only in the following circumstances:

3.1. Service Providers

We use the following third-party services to operate the platform:

  • Stripe: Payment processing. Stripe collects and processes your payment information directly. See Stripe's Privacy Policy.
  • Supabase: Database hosting and authentication. Your account data and usage data are stored on Supabase infrastructure.
  • Anthropic: AI processing. Your diagnostic queries, uploaded images (model tags, wiring diagrams), and relevant model context are sent to Anthropic's Claude API to generate diagnostic responses. This data is used solely for generating your response and is not used to train AI models. See Anthropic's Privacy Policy.
  • OpenAI: Search and voice input. The text of your chat messages, and of searches that describe a problem, is sent to OpenAI to find the matching pages in service documentation and repair videos. If you use voice input, your recording is sent to OpenAI to be converted to text.
  • Vercel: Application hosting and content delivery.
  • Sentry: Error monitoring. When something in the Service fails, Sentry receives technical details about the error, such as the page, your browser and device type, and your IP address. Sentry also receives screen recordings of some sessions, with on-screen text, form entries, and images hidden, to help us find and fix problems.
  • Resend: Transactional email delivery (account confirmations, billing receipts, trial notifications). We also use Resend to receive email sent to hello@mypros.com so we can handle some requests automatically, such as unsubscribing you from our marketing emails.
  • Twilio: Text messages. Twilio receives your phone number to send your sign-up verification code. If you redeem a trial code, Twilio also receives your phone number to check what type of phone line it is.
  • Microsoft Clarity: Session recording, heatmaps, and behavioral analytics to improve the Service. See the Microsoft Privacy Statement.
  • DataForSEO: Territory search data. DataForSEO runs Territory's Google Maps searches, finds your Google listing, and asks the AI card's monthly question for us. It receives your searches, where they run from, your business name and Google listing ID, and the location you share for Check right here. It does not receive your name, email address or phone number. See Section 1.3.
  • CARTO: Territory maps. Your browser loads Territory's maps from CARTO, which receives your IP address and the part of the map you view.

These providers access your data only as necessary to perform their services and are bound by contractual obligations to protect your information.

3.2. Team Accounts

If you are part of a team account, your team administrator may have access to limited aggregate usage statistics (such as number of searches performed). Until November 5, 2026, your specific diagnostic queries and chat content are not shared with team administrators. Beginning November 5, 2026, if you join a team and agree to it when you accept the invitation, your team administrator can view the diagnostic chats you create on or after that date while you are part of that team, including your questions, any photos you attach, and Max's answers. Chats you created before joining the team, before November 5, 2026, or after leaving the team are not shared with the administrator. The administrator may keep access to the chats you created while on the team after you leave. If you are not part of a team, your chats are not shared with any team administrator.

Jobs. If you are on a team, the jobs you make or are assigned to while on that team (the model number, the complaint, the job brief, who made it, who went and how each visit went) can be seen by the team administrator and the other members of that team. A team administrator's jobs, including ones made before the team had other members, can be seen by the members of the team. Jobs you made before joining someone else's team stay private to you. When you leave the team, jobs made for that team stay with it. A Max chat started from a job is not part of the job and follows the chat rules in this section.

3.3. Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, safety, or property of the Company, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect against legal liability.

3.4. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Service of any change in ownership or uses of your personal information.

3.5. With Your Consent

We may share information with your explicit consent for purposes not described in this policy.

3.6. AI-Specific Data Processing

When you use AI diagnostic features, the following data may be transmitted to our AI providers, Anthropic and OpenAI:

  • Your diagnostic query or symptom description (Anthropic and OpenAI)
  • Images you upload (model tags, wiring diagrams, data plates) (Anthropic)
  • The model number and appliance information for your current session (Anthropic; OpenAI may receive the appliance type with your symptom description)
  • Relevant excerpts from service documentation used to generate the response (Anthropic)
  • Your voice recording, if you use voice input (OpenAI)

This data is processed in real-time to generate your diagnostic response, to find the matching pages in service documentation and repair videos, and to convert voice input to text. We do not send your name, email address, phone number, or payment information to our AI providers. Your diagnostic queries and uploaded images are not used by Anthropic to train their AI models, per our contractual agreement.

We do not sell, share, or disclose your personal information to any third party for their own marketing, advertising, or commercial purposes.

3.7. Share Links

If you create a share link for an answer, the question and answer on that page can be seen by anyone who has the link until you remove the link, clear your chat history, or delete your account.

4. SMS & Phone Number Policy

MyPros+ collects your phone number during account registration for identity verification purposes only. When you tap “Send Code” during signup, we send a one-time SMS verification code to the phone number you provided. The code is sent through our text message provider, Twilio. We do not send marketing, promotional, or recurring messages via SMS. Your mobile phone number and SMS opt-in data will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP. For assistance, reply HELP or contact us at hello@mypros.com.

5. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Row-level security on database access
  • Secure authentication with hashed passwords
  • Access controls limiting employee access to personal data
  • Regular security assessments

MyPros+ staff can read your diagnostic chats. Our admin panel shows staff the messages you send and Max's replies, with your name, and your account details, including your email address, phone number, and company name. Staff read chats to check and improve the quality of Max's answers and to see which problems members ask about most.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law (including California Civil Code § 1798.82, which requires notification without unreasonable delay, and in no event later than required by law).

6. Data Retention

We retain your personal information as follows:

  • Account information (name, email, phone): Retained while your account is active. Account deletion is immediate and cannot be undone; there is no recovery period. Deleting your account deletes your account details, chats and chat photos, share links, saved manuals and notes, manual requests, search history, usage analytics, Territory data and the password reset requests for your account. Some records carry only your email address, not your account: invitations from our staff, contact and military access requests, password reset requests that did not match an account, marketing email records, and records of emails we sent or staff actions about that address. We delete these, or remove the address from them, only if you have shown the address is yours: you sign in with Google or Apple, or you accepted an invitation sent to that address. Otherwise they stay, so that no one can delete another person's records by putting that person's address on an account; contact us to have them deleted. We keep only the following, without your account:
    • Payment records, for tax and accounting (see Payment records below). Our payment processor, Stripe, keeps them with your name and email address.
    • Records that we sent your account an email or that our staff took an action on your account, with your email address removed.
    • Records that carry only an email address you have not shown is yours (see above).
    • If a company invited you to a seat: the company's record of that seat, with the email address the company entered.
    • The phone number you used to redeem a free trial code, so that each phone number gets one free trial.
    • A coded form of each email address on your account on our do-not-email list (the address cannot be read back from it), so that we never send you marketing email. If your address was already on that list (for example, because you unsubscribed from our marketing email): that entry, and the unsubscribe links in marketing emails we already sent you.
    • If you are a member of our staff: your email address on the records of actions you took, so that each action shows who took it.
    • If our security checks flagged unusual use by your account (for example, very heavy use of the manual library): that security record, with your name, email address and company, to protect the service from misuse.
    • Our records of the requests we sent to DataForSEO for Territory, such as the search and its cost (see Section 1.3).
    • Server logs, for up to 90 days (see Server logs below).
    Our service providers, such as Stripe, Resend, Twilio, Sentry and DataForSEO, keep their own records under their own policies.
  • Diagnostic chat history: Retained while your account is active. Deleted when you delete your account. If you are on a team, clearing your chat history removes every chat from your history, but a chat your team administrator can view (see Section 3.2) is kept for the administrator, with its photos, until you delete your account.
  • Jobs: kept while your account is active, including while your subscription is canceled. Deleting your account deletes your own jobs. If you administer a team, deleting your account deletes the team's jobs. If you are a team member, jobs made for your team stay with the team when you delete your account, and your name is removed from them.
  • Territory: kept while your account is active. Remove business deletes that business's Territory data, except the points record and our DataForSEO request records (see Section 1.3).
  • Photos attached to chats: Stored with the chat. Deleted when you clear your chat history or delete your account. If you are on a team, photos in a chat kept for your team administrator stay with that chat until you delete your account.
  • Photos taken to read a model tag or scan a barcode: Processed in real time and not stored.
  • Payment records: Retained for 7 years after the transaction date to comply with tax and accounting requirements.
  • Usage analytics: Anonymized and aggregated after 12 months. Anonymized data may be retained indefinitely to improve the Service.
  • Server logs (IP addresses, access times): Retained for 90 days for security and abuse prevention purposes.

After the applicable retention period, personal information is securely deleted or anonymized.

7. Your Rights

Depending on your location, you may have the following rights:

7.1. Access and Portability

You may request a copy of the personal information we hold about you in a commonly used, machine-readable format.

7.2. Correction

You may update your account information at any time through your account settings or by contacting us.

7.3. Deletion

You may request deletion of your account and personal information through your account settings or by contacting us. We will comply with deletion requests within 30 days, subject to legal retention requirements.

7.4. Opt-Out of Non-Essential Communications

You may opt out of non-essential communications at any time by using the unsubscribe link in any email or by contacting us.

7.5. Data Processing Objection

Where applicable, you may object to the processing of your personal data on grounds relating to your particular situation.

8. Cookies and Tracking Technologies

8.1. Essential Cookies

We use cookies that are strictly necessary for the operation of the Service, including session management and authentication. These cookies cannot be disabled without breaking core functionality. We also set a security cookie named mp_dev, which holds a random identifier for your browser and expires after 400 days; we use it only to detect and block abuse of the Service, such as automated scraping, fake sign-ups, and repeated free-trial claims, and never for advertising or analytics.

8.2. Analytics

We use Google Analytics 4 (GA4) to analyze usage patterns and improve the Service. GA4 collects anonymized usage data including pages visited, session duration, device information, and general geographic location. GA4 does not collect personally identifiable information. Google's privacy policy is available at https://policies.google.com/privacy.

8.3. Analytics and Session Recording

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

8.4. No Advertising Cookies

We do not use third-party advertising cookies, retargeting pixels, or cross-site behavioral tracking technologies.

Repair videos play from YouTube. A video loads from youtube.com only when you tap it to play. YouTube then receives your IP address and browser details, and may set its own cookies. See Google's Privacy Policy.

8.5. Do Not Track

We do not currently respond to “Do Not Track” (DNT) browser signals, as there is no industry-standard technology for recognizing and implementing DNT signals. However, we do not engage in cross-site tracking.

9. State Privacy Rights

9.1. California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide the Service.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Global Privacy Control: We honor Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out request.

To exercise these rights, contact us at hello@mypros.com or at the address below. We will verify your identity before processing any request. We will respond to verifiable requests within 45 days.

9.2. Other U.S. State Residents

If you are a resident of Virginia, Colorado, Connecticut, Texas, Oregon, Indiana, Kentucky, Tennessee, Montana, Iowa, or any other state with applicable consumer privacy legislation, you may have similar rights to access, correct, delete, and opt out of certain processing of your personal information. To exercise these rights, contact us at hello@mypros.com. We will process your request in accordance with applicable state law.

9.3. Do Not Sell or Share

We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. Because we do not engage in these practices, there is no need to submit an opt-out request, but you may contact us at any time to confirm.

10. European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

10.1. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: Processing necessary to provide the Service you requested (account management, diagnostics, document access).
  • Legitimate interest: Processing for analytics, security, fraud prevention, and service improvement, where our interests do not override your data protection rights.
  • Consent: Processing based on your explicit consent, which you may withdraw at any time (e.g., optional communications).
  • Legal obligation: Processing required to comply with applicable laws.

10.2. Your Rights Under GDPR

In addition to the rights described in Section 7, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Data portability: Receive your data in a structured, machine-readable format.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to processing based on legitimate interest.

10.3. International Data Transfers

Your personal data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for such transfers, ensuring that your data receives an adequate level of protection.

10.4. Contact for Data Protection Inquiries

For questions about GDPR compliance or to exercise your rights, contact us at hello@mypros.com or at the postal address in Section 15 below. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a person under 18, please contact us immediately and we will take steps to delete such information.

12. International Users

The Service is operated from the United States. If you access the Service from outside the United States, you acknowledge and consent to the transfer of your information to the United States for processing and storage. The data protection laws of the United States may differ from those of your jurisdiction.

13. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will tell you about material changes by email or in the app. A change takes effect when we post it, unless we give a later date. If a change affects information we already have about you in a way that needs your consent, we will ask first.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about our data practices, contact us at:

Darwin & Rose, LLC

2801 Ocean Park Blvd, Suite 1140

Santa Monica, CA 90405

Email: hello@mypros.com

Phone: 1-424-322-1712