Privacy Notice

Who we are

Hoskins Travel LLC, operating the roofing contractor CRM under the trading name Gem State CRM, is the data controller for the account data of our customers and their team members. For the homeowner and job data our customers store in their own workspace, our customer is the controller and we act as a processor on their behalf.

Our contact details: Chris@HoskinsTravel.com · 3313 W Cherry Lane #1081, Meridian, ID 83642, USA.

What we collect and why

• Account data (name, email, phone, company, login credentials) — to create accounts, provide the service, and manage seats. Legal basis: performance of our contract.
• Workspace content (homeowner names and addresses, claim details, photos, documents, signatures) — to deliver CRM functionality you have asked for. Legal basis: contract performance, on our customer's instructions.
• Location data (device location when you use "Locate me", knock coordinates) — to power field mapping and canvassing. Legal basis: consent, which you can withdraw in your browser or device settings.
• Usage and device data (IP address, device identifiers, page and error logs) — for security, fraud prevention, troubleshooting, and product improvement. Legal basis: legitimate interests.
• Support messages — to answer your questions. Legal basis: legitimate interests and contract performance.

Who we share it with

• Service providers and subprocessors: cloud hosting and database, file storage, email delivery, error monitoring, mapping and geocoding (Google), and roof measurement providers (such as EagleView) when you order a report.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing, and tax compliance.
• Professional advisers (legal, accounting) where necessary.
• Authorities where we are legally required to disclose information.

We do not sell personal data.

Retention

We keep account and workspace data for as long as the account is active and for up to 90 days after it closes, so you can export it. After that we delete or anonymise it, except where we must keep records longer for tax or legal reasons. Security logs are kept for up to 12 months.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, per-company data isolation enforced at the database level, role-based access controls, and expiring tokens for homeowner and crew links.

Your rights

Depending on where you live, you may ask us to access, correct, delete, or export your personal data, to restrict or object to certain processing, or to withdraw consent. You can also ask us not to sell or share your data (we don't). Contact us and we will respond within one month. Homeowners should contact the roofing company they worked with, since that company controls its own workspace data.

Cookies

We use essential cookies and local storage to keep you signed in and to remember workspace preferences. We do not use advertising cookies. You can clear or block cookies in your browser, but sign-in will stop working.