MEPflow Privacy Policy
MEPflow, a product of JoCo Plumbing LLC · Effective August 18, 2026
MEPflow is field-service software for plumbing, electrical and HVAC contractors. This policy covers the MEPflow mobile app and website.
1. Two different relationships
We hold data in two ways, and your rights differ depending on which applies:
- Contractors and their staff — you create a MEPflow account and we are responsible for that data directly.
- A contractor's customers — if a contractor you hired uses MEPflow, your details are in their account. They decide what is stored and for how long; we process it on their behalf. Contact the contractor first, and we will help them act on your request.
2. What we collect from app users
| Data | Why |
|---|---|
| Name, email, phone, role, trade | Your login and what you can see in the app |
| Company name and address | Invoices, estimates and your public booking page |
| Location, while you are clocked in | The crew map and drive-time estimates. Alongside the position we record how accurate the reading is, your speed and heading, whether the phone judges you to be moving, and the battery level. Every position is deleted after 30 days. |
| Photos you take or choose | Job documentation and licence records |
| Push notification token | Job and message alerts |
| What you say to Flow, the in-app assistant | Understanding and answering you. On a phone your voice is sent to our speech provider, Vapi, which turns it into words, answers, and keeps a recording and transcript of the call. On the desktop app your browser does the same job on your own machine and no audio leaves it. |
| IP address and browser, on text-consent forms only | Proof of consent, which federal rules require us to keep |
Location is collected only while you are clocked in. Clock out and it stops — that is a real check, not a side effect of closing the app. MEPflow does not track you in the background, and the app does not request background location permission.
Your voice goes off the phone; the recording of it is not ours to keep forever. Talking to Flow sends audio to Vapi, our speech provider, so it can be understood and answered. Typing to Flow instead sends no audio at all, and on older app versions Flow is typed-only.
The microphone is only live while you are holding a conversation with Flow. Speech is turned into text on your own phone. No recording is made, nothing is written to storage, and no audio leaves the handset — not to us, not to Apple, not to Google. Phones that cannot do that on their own simply do not offer the microphone, and you type instead.
3. What contractors put into MEPflow
Contractors store their customers' names, phone numbers, email addresses, service addresses, job notes, photographs of work, estimates, invoices and text message history. We do not buy contact lists, and we do not use this data to market to anyone.
4. Text messaging
MEPflow sends texts on a contractor's behalf — appointment confirmations, arrival windows, invoice links. Reply STOP to opt out and HELP for help. Message and data rates may apply.
Messages are not sent between 9pm and 8am in the recipient's local time; they are held and released the next morning.
No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with, sold to, or rented to any third party.
5. Automated calls and messages
Contractors can enable an AI assistant that answers their phone and replies to texts. Calls to a number with the assistant enabled may be transcribed so the assistant can respond and so the contractor has a record. The assistant books jobs and answers questions; it does not make decisions about credit, employment or anything with a legal effect.
6. Payments
Card payments are handled by Stripe. Card numbers are entered directly into Stripe and never reach our servers or our database. We store the invoice, the amount, and whether it was paid.
7. Who we share data with
Only the service providers needed to run the product, each with the minimum they need:
- Neon — database hosting
- Railway — application hosting
- Stripe — payments and subscription billing
- Twilio — text messages and phone numbers
- Resend — email delivery
- Vapi and Anthropic — the AI voice and text assistants
- Google Maps Platform — addresses, maps and drive times
- Expo — app delivery and push notifications
We do not sell personal information. We use no analytics, advertising or tracking software of any kind — no Google Analytics, no advertising pixels, no session recording.
We disclose data otherwise only when required by law, or to protect someone's safety.
8. How long we keep it
We keep your account data for as long as the account exists. Individual records — jobs, invoices, messages — are not deleted on a timer; they stay until you delete them or delete the account.
When an account is deleted, access ends immediately and the data is permanently erased 30 days later. Two exceptions:
- Text-consent records are kept with the phone number scrambled so they no longer identify anyone. Federal rules require us to show that someone agreed to be texted, or asked us to stop.
- Payment records held by Stripe follow Stripe's own retention rules and applicable tax law.
9. Deleting your account
In the app: Settings → Delete account. Deleting an owner account deletes the whole company, including every team member's login and all customer records. Full details, and what to do if you cannot get into the app, are at mepflow.app/delete-account.
10. Your rights
You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Depending on where you live you may also have the right to opt out of sale or sharing — we do neither.
Email support@mepflow.app or call (479) 228-4400. We answer within 45 days. We will not treat you differently for asking.
11. Security
Traffic is encrypted in transit. Passwords are stored hashed, never in plain text. Each company's data is isolated from every other company's, and access is limited by role — a field technician does not see what the office sees.
12. Children
MEPflow is business software. It is not directed at children and we do not knowingly collect data from anyone under 13.
13. Changes
If this policy changes materially we will update the date above and notify account owners by email before the change takes effect.
14. Contact
MEPflow, a product of JoCo Plumbing LLC
11374 Sugar Creek Rd, Rogers, AR 72756, United States
support@mepflow.app ·
(479) 228-4400