Privacy policy

MitigateOS is operations software for water, fire, and mold mitigation companies. This policy explains what we store when a shop uses the product, including information about homeowners and insurance claims.

Who this covers

It applies to shop owners, office staff, and field techs who create a MitigateOS workspace, and to the people whose loss files those shops put in the system. Harborline and other practice sandboxes are sample shops for product evaluation. They use fictional names unless a visitor types their own.

What we collect

A workspace typically holds:

• Shop account data: names, work emails, phone numbers, roles, and hashed passwords.
• Homeowner and property data: names, phones, emails, street addresses, and photos of the loss or the curb.
• Claim data: job and claim numbers, carriers, adjusters, public adjusters, attorneys, notes, drying logs, equipment on site, invoices, and signed work authorizations.
• Connection data: if a shop connects Gmail, Google Calendar, CompanyCam, or HurrySign, we store the tokens or keys needed to talk to those services on the shop’s behalf. Those secrets stay on the server.
• Product-evaluation leads: name, email, company, and notes from the public demo or contact forms.

How we use it

We use this information to run the shop’s board — dispatch, drying, invoicing, and follow-up — and to operate MitigateOS itself (sign-in, support, security, and product demonstrations). We do not sell homeowner or claim files. We do not use claim contents for advertising.

Who can see a file

People in the shop’s workspace see the jobs that shop stored. A shop may send claim details to a carrier, adjuster, or signer because the shop chose to. MitigateOS staff may access a workspace to fix an outage, honor a legal request, or operate a sandbox the visitor opened. Practice sandboxes expire and are deleted after idle time.

Retention

Shop data stays until the shop asks us to delete the workspace or an account. Sandbox shops are removed when they expire. Backups exist for a limited time for disaster recovery. You can email hello@mitigateos.com to request deletion of a workspace or a product-evaluation lead.

Security

Passwords are hashed. Session cookies are scoped to the signed-in shop. Integration tokens are stored on the server, not in the browser. No internet service is perfectly secure. Shops remain responsible for who they invite and what they upload.

Contact

Privacy questions: hello@mitigateos.com. MitigateOS, Cape Coral, Florida.