Privacy policy

1. Who we are

LockCommand is software for locksmith businesses in the United States. It's made by JANZAY LLC, a Wyoming limited liability company ("we", "us"), 30 N Gould St Ste R, Sheridan, WY 82801. This policy covers the LockCommand app on phones and the web, this website (lockcommand.com), the texts and calls that run through LockCommand, and our emails and support.

It doesn't cover services a shop connects on its own, such as QuickBooks Online, Stripe, Square or PayPal, or the app stores. They have their own privacy policies.

2. Shops, their customers and us

Two groups of people use LockCommand, and our role is different for each.

• Shop users are the owners, admins, dispatchers, technicians and accountants who sign in. For their account details, and for visitors to this website, we decide how the data is used. In privacy law terms, we're the controller (some state laws say "business").
• Shop customers are the people who call, text or hire a shop that uses LockCommand. They're the shop's customers. The shop decides what to collect about them and is responsible for it. We process that data for the shop, on its instructions, as its service provider (some state laws say "processor"). We don't use it for anything else.

If you're a shop customer and want to see, change or delete your information, the quickest route is to ask the shop. You can also email us and we'll pass your request to the shop and help it respond.

3. What we collect

The shop's account

• Business name, business phone, address, time zone, license number, logo, tax rate, invoice footer and review link.
• Settings: price book, AI greeting, languages, hours and service area notes, the cell number calls transfer to, dispatch settings and text settings.
• Pay-link details the shop enters, such as its PayPal.me, Venmo or Cash App handle and Zelle email or phone.
• Plan, purchase status, AI minutes used, wallet balance, spending limits and charges.

Shop users and team members

• Name, email address, phone number, role and any permission changes made for that person.
• Password. It's stored only in scrambled form (a one-way hash), so no one can read it, including us.
• Invite codes, skills tags, shift start and end times, and work status (for example on the way or on site).

Technician location

• Precise location from a technician's phone, only while they're on shift or on a job, including when the app is in the background. It's used to rank techs by drive time, show the dispatch map and give customers an arrival time. Going off shift stops it and removes the shared location. A tech can also turn off location in the phone's settings, but dispatch by drive time won't work for them.

Calls, recordings and transcripts

• For calls to a shop's AI number: the caller's number, the number called, when the call started and ended, and how it ended.
• A recording and a transcript of the call. Calls are recorded and transcribed for the shop, so it can check what was said. By default, every AI call starts with a short notice, in the caller's language, saying the call is recorded. A shop can turn that notice off, and then it must tell callers itself where the law requires it.
• What the caller tells the AI, such as their name, address, what they need and their car's year, make, model and color.

AI notes and drafts

• AI call notes: a short summary, what the caller needs, how urgent it is, the next step and a suggested text.
• AI reply drafts for a job's text thread, and which AI model wrote them.

Text messages

• Phone numbers, message content, time and delivery status for texts sent and received on a shop's LockCommand number.
• Opt-out status when someone replies STOP.

Customer and job details

• Customer name, phone number, email, address and notes.
• Job details: what's needed, vehicle details for car jobs, quoted price range, prices, status, the assigned tech and the job's history.

ID, proof of ownership and signatures

• When a tech checks ID on a job: a photo of the ID, a photo of the proof of ownership or residence, the document type, the name on the ID and the customer's signature.
• When it was recorded, who recorded it, and where (unless the tech turns the place off).

Job photos

• Before and after photos a tech takes on a job, and any caption.

Invoices and payments

• Invoice lines, tax, totals, discounts, tips, payment method, amount and status.
• Card payments are handled by the shop's own payment provider. We never receive full card numbers. The provider tells us when a payment has landed.

QuickBooks Online, when connected

• The QuickBooks company name, the shop's customers by name and its Service items, and the IDs of the records we create. Section 8 has the details.

Device and app data

• Push notification token, phone type and app version.
• Sign-in activity and error logs, used for security and to fix problems.

This website and your messages to us

• This website runs no analytics and sets no tracking or advertising cookies. Our hosting provider keeps standard request logs, such as IP address, browser type and the page asked for.
• Anything you send us by email, such as an early access request or a support question.

We don't ask for health information, financial account numbers or Social Security numbers. ID photos can show a driver's license or passport number; they're stored with the job for the shop and used for nothing else.

4. Where it comes from

• From shop users: what you enter when you sign up, set up your shop, add your team, create jobs, take photos and record payments.
• From shop customers: what callers say on a call to the shop's AI number, texts they send, and details they give the shop or the tech on the job.
• From technicians' phones: location while on shift, photos, signatures, and the push token.
• From accounts a shop connects: payment status from Stripe, Square or PayPal, and the names we need from QuickBooks Online.
• From the app stores: whether a LockCommand plan or top-up was bought, renewed or cancelled.
• From our service providers: recordings and transcripts of calls, text delivery status, map points and drive times.

5. How we use it

We use data only to run LockCommand, and for the purposes below.

We don't use shop customers' information for our own marketing, and we don't combine one shop's customer data with another's. A small number of LockCommand staff can see a shop's data when it's needed for support, billing, security or a legal duty.

6. AI features

• The AI receptionist listens to callers and answers them. Call audio is processed by our voice AI provider and by the AI model the shop picks (models from the OpenAI, Claude or Gemini families). This produces the recording and transcript.
• AI call notes and reply drafts send the call transcript or the job's text thread to an AI model. We set these requests to go only to AI providers that don't keep the content or train on it.
• We don't train AI models of our own on shops' or customers' information.
• The AI quotes only from the shop's own price book. It never sends a text by itself: a person sends every AI draft.
• Dispatch ranks techs automatically by drive time, skills and workload. That ranking is a work tool for the shop, not a decision about anyone's rights. A person can always assign jobs by hand.
• AI can mishear or make mistakes, so shops check notes, bookings and drafts before relying on them.

7. Service providers

We use other companies to run parts of LockCommand. Each gets only the data it needs for its job, and we require them to protect it and use it only to provide their service to us.

If you want to know more about a provider, email [email protected].

8. Accounts a shop connects

A shop can choose to connect its own accounts. Nothing is connected unless an owner, admin or accountant does it. Once connected, those companies handle the data they receive under their own terms and privacy policies.

QuickBooks Online

• What we send: the shop's customers, invoices (including voided invoices) and payments, so the shop doesn't type them twice. The sync goes one way, from LockCommand to QuickBooks.
• What we read: only what the sync needs: the company name, customers by name (to avoid duplicates), the shop's Service items, and the records we're updating. We don't read other accounting data, bank data or reports, and we never move money.
• Access: the shop approves access on Intuit's own page, using the accounting permission. The access keys are stored encrypted.
• Disconnecting: choose Disconnect in Payments and accounting in the app. We tell Intuit to cancel our access and delete the stored keys right away. You can also remove LockCommand from the connected apps in your Intuit account.
• After you disconnect: syncing stops. What we already sent stays in your QuickBooks company, under your control.
• Help: email [email protected].

Stripe, Square and PayPal

• We use these accounts to create pay links and checkout pages for the shop's invoices, and to learn when a payment has landed.
• For Square we keep the access the shop grants, encrypted. For Stripe and PayPal we keep only the account ID.
• When a shop sets up Stripe from the app, Stripe collects the business details it needs directly from the shop, under Stripe's own terms.
• Customer payments go straight to the shop's own account. They never pass through LockCommand.
• When a shop disconnects or deletes its account, we delete the link on our side. To fully remove our access, the shop also removes LockCommand in its Stripe or PayPal dashboard.

PayPal.me, Venmo, Cash App and Zelle

We store only the handle, email or phone the shop enters, and show it on the shop's invoices. These apps don't report payments back to us, so the shop marks those payments as paid.

Google Play and the App Store

LockCommand plans are sold through Google Play and the Apple App Store. The store takes payment and keeps the payment details. We receive the plan, the purchase status and store transaction IDs.

9. Other times we share data

• Inside the shop: team members see the data their role allows. See Security and privacy for who sees what.
• The law and safety: when a valid legal request requires it, or when we believe in good faith it's needed to protect someone's safety, to stop fraud or abuse, or to protect our rights. Where the law allows, we tell the shop first.
• A sale or merger: if JANZAY LLC or LockCommand is sold or merged, data may move to the new owner, and this policy keeps applying to it. We'll tell shop owners before their data falls under a different policy.
• With your permission: when you ask us to share something.

10. No selling, no ad tracking

We don't sell personal information. We don't share it for targeted or cross-context behavioral advertising, and we don't let anyone use LockCommand data to show ads. That's true for shop users, shop customers and website visitors.

11. Text messages

Shops use LockCommand to text their customers about jobs. Those texts aren't marketing. Anyone can reply STOP to stop them.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties. See our SMS terms.

12. How long we keep it

Deletion is instant and permanent. When a shop deletes a record or its account, it's gone right away, including the copies our service providers hold for us, such as call recordings. It can't be undone or recovered, so export anything you need first.

Data the shop sent to its own QuickBooks Online or payment accounts stays there, under the shop's control. Texts already delivered stay on the recipient's phone. See Delete your account for how to ask.

13. Security

• Data is encrypted in transit between the app, this website and our servers.
• Access keys for connected accounts are encrypted at rest.
• Access is role-based: each person sees the screens their role needs, and only members of a shop can see that shop's data.
• Our own staff get access only when they need it for support, billing, security or a legal duty.

Members of a shop can open its job records, including ID photos, so invite only people you trust and remove anyone who leaves. No system is perfectly secure. Use a strong password, and tell us right away if you think something is wrong. If a breach affects your personal information, we'll tell you and the authorities as the law requires. To report a security problem, email [email protected] with "Security report" in the subject.

14. Your choices

• You can see and change most of your information in the app.
• Shops can export jobs, customers and payments to CSV, and delete job photos and some records in the app.
• Technicians can turn off location and notifications in the phone's settings. Dispatch by drive time and job offers need them.
• Shops can turn off automatic texts and AI call notes in the app.
• Anyone can stop job texts by replying STOP.
• You can ask for a copy of your data, a correction or deletion at [email protected].

15. US state privacy rights

California and a growing number of other states (including Colorado, Connecticut, Virginia, Utah, Texas and Oregon) give residents privacy rights. We give these rights to every user in the US, wherever they live.

Your rights

• Know and access: ask what personal information we hold about you, where it came from, why we use it and who we share it with, and get a copy.
• Correct: ask us to fix information that's wrong.
• Delete: ask us to delete your information. Deletion is instant and permanent, apart from records the law makes us keep.
• Portability: get your information in a common format, such as CSV, that you can take elsewhere.
• Opt out: of the sale of personal information, sharing for targeted advertising, and profiling that has legal or similarly big effects. We don't do any of these, so there's nothing to switch off, but you can still ask and we'll confirm it in writing.
• Limit sensitive information: we use sensitive information (precise location of techs on shift, ID images, account passwords) only to provide the service you asked for.
• Appeal: if we turn down a request, reply to our answer to appeal. If we still say no, you can contact your state attorney general.
• No discrimination: we won't charge you more, give you a worse service or deny you service for using these rights.

How to make a request

• Email [email protected] with "Privacy request" in the subject. Send it from the email address you sign in with, if you have an account.
• We'll check it's you before acting, using details we already have. We answer within 45 days, and tell you if we need more time.
• Authorized agents: someone can make a request for you if you give them written permission. We may ask you to confirm your identity with us directly.
• Global Privacy Control: if your browser sends this signal, we treat it as a request to opt out of sale and sharing. We don't sell or share in the first place.
• If you're a shop customer, your information belongs to the shop. We'll pass your request to the shop and help it respond.

What we collected in the last 12 months

Using the categories in California law, we collected:

• Identifiers: name, email, phone number, address, IP address, account and device IDs.
• Customer records: job, invoice and payment details, and signatures.
• Commercial information: plans, purchases, wallet credit and usage.
• Audio and visual information: call recordings, job photos, ID and proof photos.
• Geolocation: technicians' precise location while on shift, and where an ID check took place.
• Professional information: a shop's license number, and each user's role and skills.
• Internet activity: app activity and website request logs.
• Sensitive information: account passwords, ID images and precise location.

These come from the sources in section 4, are used for the purposes in section 5, are shared only as described in sections 7 to 9, and are kept as described in section 12. We don't sell any of them or share them for targeted advertising.

16. Children

LockCommand is for businesses and people 18 or older. It isn't meant for children, and we don't knowingly collect information from anyone under 18. If you think a child gave us information, contact us and we'll delete it.

17. Where we operate

LockCommand is offered only to businesses in the United States, and phone numbers are US only. We and our service providers store and process data in the United States. Some providers may also process data in other countries, and we require them to protect it the same way.

18. Cookies

This website sets no tracking or advertising cookies and runs no analytics that identify you. The LockCommand app stores only what it needs to keep you signed in. If we ever add analytics, we'll update this policy first and ask for your consent before anything is set. See our Cookie policy.

19. Changes to this policy

When we change this policy, we update the date at the top. If a change is important, we tell shop owners in the app or by email before it takes effect.

Contact

Questions about this policy, or a request about your data, go to [email protected]. A person reads every message.

JANZAY LLC, 30 N Gould St Ste R, Sheridan, WY 82801