Privacy Policy

Last updated: September 21, 2026

Core Development Systems, LLC (“CoreDev,” “we,” “us”) builds websites and operates a field-service software platform, an AI receptionist and a digital-signage service (together, the “Service”) for business customers (“Customers”). This Privacy Policy explains what information we collect, how we use it, and how we handle data accessed through services a Customer chooses to connect, including QuickBooks Online (Intuit) and Stripe.

Who this covers

Customers: the businesses that subscribe to the Service.
Users: the owners, staff, technicians and sales representatives a Customer gives access to its account.
End customers: the people who book, request quotes from, pay, or message a Customer through a website or Platform we operate for that Customer.
Visitors: anyone visiting coredev.systems.

For end-customer data, the Customer is the business you are dealing with and decides how that data is used. CoreDev processes it on the Customer’s behalf to provide the Service. Contact the business directly for questions about your relationship with it; contact us if you cannot reach them.

Information we collect

Account data: business name, contact name, email, phone, address, login credentials, and the users a Customer invites.
Operational data a Customer enters: records about its end customers (names, phone numbers, emails, service addresses, notes), and its quotes, jobs, invoices, contracts, signatures and schedules.
End-customer data collected through a Customer’s website or portal: name, phone, email, service address, the answers given in a booking or quote request, appointment choices, uploaded photos, and electronic signatures on quotes or contracts.
Payment data: processed by Stripe on the Customer’s own Stripe account. We store payment status, references and the last four digits and card brand of a saved payment method, never full card numbers. Where an end customer pays online, the card is saved with Stripe so the Customer can charge it for later work on that job, as the Customer’s own terms allow.
Messages: text messages and emails sent to end customers through the Platform (quote links, appointment confirmations and reminders, invoices, review requests) and replies to them; conversations handled by the AI Receptionist on channels a Customer enables (for example Yelp and website chat).
Connected-service data: when a Customer connects QuickBooks Online or Stripe, or imports from another system, we access and process data from those accounts as the Customer directs.
Signage data: the content a Customer schedules, controller status (online, temperature, storage, software version), playback logs, and screenshots of what a screen is currently displaying, captured on request or on a schedule so the Customer can check its screens. Screenshots show the signage content, not people.
Technical data: log, device, browser and network information needed to operate and secure the Service, including the network address, time and device recorded when someone signs a document electronically.

How we use information

To provide, host, secure and support the Service and the websites we build.
To send end customers the transactional messages their request or appointment calls for, on the Customer’s behalf.
To operate the AI Receptionist for a Customer. Conversations it handles are stored and may be used, along with de-identified data derived from them, to configure, tune and improve the assistant for that Customer and the Service generally.
To bill Customers and collect amounts due.
To monitor and improve the Service, using aggregated, de-identified usage data.
To comply with law and enforce our agreements.

We do not sell personal information, and we do not use Customer or end-customer data for advertising.

How we access and use QuickBooks data

With a Customer’s authorization via Intuit’s OAuth flow, we access its QuickBooks Online company to create and update customers, items, invoices and payments that originate in the Platform.
We use QuickBooks data solely to provide the accounting-sync feature the Customer enabled, not for advertising, and we do not sell it.
We do not share QuickBooks data with third parties except sub-processors that help operate the Service, or as required by law.
OAuth access and refresh tokens are encrypted at rest. A Customer can disconnect at any time from its account settings, which revokes our access.

Sub-processors

We use service providers to operate the Service, each processing data only to provide its function:

Stripe — payment processing, saved payment methods and payouts, on the Customer’s own Stripe account.
Intuit / QuickBooks Online — accounting sync, when connected.
Twilio — sending and receiving text messages and phone calls.
Email delivery providers — sending email on the Customer’s behalf, via the Customer’s own mailbox where configured.
Google — maps, address lookup, service-area geography, and Google Business Profile where connected.
Yelp — receiving and replying to Yelp inquiries, when the AI Receptionist or Yelp inbox is enabled.
AI model providers — generating AI Receptionist replies and drafting content. Conversation text is sent to the provider to produce a reply; providers are contractually restricted from using it to train their models.
Cloud hosting and storage providers — running the Service, storing files, media and backups.
Wisetack — consumer financing, only when a Customer enables it and an end customer applies.

How we share information

We share data only with the sub-processors above, at the Customer’s direction (for example, when it connects a service or sends a document), with a successor to our business, or when required by law. Customers are responsible for their own end customers’ data and for any consents their use of it requires. We may show a Customer’s name, logo and website as an example of our work unless the Customer asks us in writing not to.

Data security

We protect data with encryption in transit, encryption of secrets and access tokens at rest, role-based access controls within each Customer account, tenant isolation between Customers, and regular backups. Signage controllers connect outbound only and accept commands only from our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Retention and export

We retain Customer and end-customer data while the Customer’s account is active.
When the Service ends, the Customer may request an export of its business data (customers, jobs, quotes, invoices, payment history) in a standard format (CSV/JSON) within 30 days, at no charge. After 30 days we may delete the account’s data, subject to legal and accounting obligations.
Signage screenshots and controller health data are kept only as long as needed to display them to the Customer.
Signed documents and their signature records are retained for as long as the Customer’s account is active and as the law requires.

Your rights

You may request access to, correction of, or deletion of your personal information by contacting us. If you are an end customer, we will forward your request to the business you dealt with, since it controls that data, and assist it in responding. Disconnecting a service (for example QuickBooks) stops further data exchange with that service. To stop receiving text messages from a business that uses the Platform, reply STOP to any message.

Cookies and analytics

The Service uses cookies and similar storage for login sessions, security and remembering your settings. Customer websites may use analytics (for example Google Analytics) if the Customer enables it. We do not use advertising cookies.

Children

The Service is for businesses and is not directed to children under 13. We do not knowingly collect their information.

Changes

We may update this policy; material changes will be posted here with a new “Last updated” date.

Contact

Core Development Systems, LLC — Las Vegas, NV.
For privacy questions or requests, reach us through the contact form on our website. Our Terms of Service apply to your use of the Service.