Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how Totaly ("Totaly", "we", "us") collects, uses, stores, shares, and protects information when you use the Totaly application at totaly.ai (the "Service").

Totaly is an AI-powered operations dashboard for field service businesses. It is operated by Branson Workman (sole proprietor), located in Peoria, Arizona, United States.

1. Information we collect

Account and authentication information

When you sign in to Totaly using Google, we receive a limited set of information from your Google Account, based on the permissions you grant:

Your email address
Your basic profile information (name and profile picture)
A unique Google account identifier

We request only the email, profile, and openid scopes. We do not request access to your Gmail messages, Google Drive files, Calendar, or Contacts.

Business and operational data

Totaly processes business data that you or your organization connect to or enter into the Service, which may include customer records, service appointments, sales and retention metrics, technician and representative activity, and financial performance figures. This data belongs to you or your organization.

Technical and usage information

We automatically collect limited technical information necessary to operate and secure the Service, including IP address, browser and device type, pages accessed, timestamps, and error logs.

2. How we use information

Purpose	What it covers
Authentication	Verifying your identity and maintaining your signed-in session
Service delivery	Displaying dashboards, analytics, and reporting on your business data
Support	Responding to your questions and troubleshooting issues
Security	Detecting and preventing fraud, abuse, and unauthorized access
Reliability	Diagnosing errors and improving performance of the Service

We do not sell your personal information. We do not use your data to serve advertising, and we do not share it with data brokers.

3. Google user data

Totaly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We use Google user data only to provide and improve user-facing features of Totaly.
We do not transfer Google user data to third parties except as necessary to provide the Service, for security purposes, or to comply with applicable law.
We do not use Google user data for advertising purposes.
We do not allow humans to read Google user data unless we have your explicit consent, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and de-identified.

4. How information is stored and secured

Data is stored in managed cloud infrastructure operated by Supabase (PostgreSQL database and authentication) and Google Cloud Platform (application hosting), located in the United States. We rely on the following safeguards:

Encryption in transit using TLS
Encryption at rest on our database and storage layers
Row-level access controls scoping data to the authorized organization
Restricted administrative access on a least-privilege basis

No system is perfectly secure. We cannot guarantee absolute security, but we work to protect your information using commercially reasonable measures.

5. Sharing and disclosure

We share information only in the following circumstances:

Service providers. Infrastructure and processing vendors that operate the Service on our behalf, including Google Cloud Platform, Supabase, and Resend (transactional email). These providers are bound to use the data only to provide services to us.
Within your organization. Data you submit may be visible to other authorized users in your organization, according to their assigned roles.
Legal requirements. Where required by law, subpoena, or valid government request.
Business transfer. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention

We retain your account information for as long as your account is active. Business data is retained for the duration of your use of the Service. When you delete your account, we delete or de-identify associated personal information within 30 days, except where retention is required for legal, accounting, or security purposes.

7. Your rights and choices

Access and correction. You may request a copy of the personal information we hold about you, or ask us to correct it.
Deletion. You may request deletion of your account and associated personal data.
Revoking Google access. You may revoke Totaly's access to your Google Account at any time at myaccount.google.com/permissions.
State privacy rights. Depending on your location, you may have additional rights, including under the California Consumer Privacy Act. We honor these requests without discriminating against you for exercising them.

To make a request, email wecare@totaly.ai. We respond within 30 days.

8. Children's privacy

Totaly is a business tool and is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

9. International users

Totaly is operated from the United States, and information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the Service.

11. Contact

Questions about this Privacy Policy or your data:

Email: wecare@totaly.ai
Operator: Branson Workman, sole proprietor
Location: Peoria, Arizona, United States