Privacy Notice

• Operational and staff records entered by Alpine personnel in the course of business (e.g. customer, scheduling, employee, and supply records).
• Financial transaction data from Alpine’s own company credit cards, retrieved through Plaid, used to prepare and reconcile internal expense reports. This may include account identifiers, transaction dates, amounts, merchant names, and categories.

• To operate Alpine’s business and internal workflows.
• To generate, review, and reconcile internal expense reports from company-card activity.

We do not sell personal or financial information, and we do not use it for advertising or share it with third parties except the service providers described below.

Alpine sends SMS text messages to customers and staff who provide a mobile number and opt in — including schedule and shift notifications, service-request updates, crew arrival notices, and one-time login/verification codes. These messages are transactional and account-related, not marketing. Consent to receive texts is not a condition of any purchase or of employment.

Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for help. See our Text Messaging Terms & Conditions for details.

We do not sell or share your mobile phone number or SMS consent with any third parties or affiliates for marketing or promotional purposes. Mobile information is used solely to deliver the messages described above and is shared only with our SMS provider (Twilio) strictly to operate the messaging service on our behalf.

We use Plaid Inc. to securely connect Alpine’s company credit-card accounts and retrieve transaction data. When an account is connected, the cardholder consents to the connection through Plaid’s secure Link flow. Plaid’s handling of information is governed by the Plaid End User Privacy Policy.

We rely on established providers that process data on our behalf under their own security and privacy programs:

• Plaid — financial account connectivity and transaction data.
• Supabase — managed database and authentication.
• Vercel — application hosting.
• Twilio — SMS/text message delivery.

• Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), with additional application-level encryption on selected sensitive fields.
• Access is limited to authenticated Alpine personnel on a least-privilege, role-based basis, and administrative access to critical systems requires multi-factor authentication.
• Changes to sensitive records are recorded in an audit log.

We retain information only as long as needed for legitimate business purposes and apply automated retention controls where appropriate (for example, applicant records are purged after 24 months). You may request deletion of, or ask questions about, information Alpine holds by contacting admin@alpinemaintenance.com; we will respond consistent with applicable law and our record-keeping obligations.

We may update this notice as our systems or obligations change. The effective date above reflects the most recent revision.

Questions about this notice or Alpine’s data practices: admin@alpinemaintenance.com.