---
title: "Privacy policy · LockCommand"
description: "What LockCommand collects from locksmith shops and their customers, why, who helps us run the service, how deletion works and your US state privacy rights."
url: https://lockcommand.com/legal/privacy
---

Legal

# Privacy policy

Effective October 18, 2026. Applies to LockCommand, made by JANZAY LLC.

## The short version

- We collect what LockCommand needs to answer calls, dispatch techs, text customers and get shops paid.
- A shop's customer data belongs to the shop. We handle it for the shop.
- We don't sell personal information or use it for ad tracking.
- Calls to a shop's AI number are recorded and transcribed for the shop. Callers hear a recording notice by default.
- Deleting data is instant and permanent. We keep only records the law requires.

### On this page

## 1. Who we are

LockCommand is software for locksmith businesses in the United States. It's made by JANZAY LLC, a Wyoming limited liability company ("we", "us"), 30 N Gould St Ste R, Sheridan, WY 82801. This policy covers the LockCommand app on phones and the web, this website (lockcommand.com), the texts and calls that run through LockCommand, and our emails and support.

It doesn't cover services a shop connects on its own, such as QuickBooks Online, Stripe, Square or PayPal, or the app stores. They have their own privacy policies.

## 2. Shops, their customers and us

Two groups of people use LockCommand, and our role is different for each.

- **Shop users** are the owners, admins, dispatchers, technicians and accountants who sign in. For their account details, and for visitors to this website, we decide how the data is used. In privacy law terms, we're the **controller** (some state laws say "business").
- **Shop customers** are the people who call, text or hire a shop that uses LockCommand. They're the shop's customers. The shop decides what to collect about them and is responsible for it. We process that data **for the shop** , on its instructions, as its service provider (some state laws say "processor"). We don't use it for anything else.

If you're a shop customer and want to see, change or delete your information, the quickest route is to ask the shop. You can also email us and we'll pass your request to the shop and help it respond.

## 3. What we collect

### The shop's account

- Business name, business phone, address, time zone, license number, logo, tax rate, invoice footer and review link.
- Settings: price book, AI greeting, languages, hours and service area notes, the cell number calls transfer to, dispatch settings and text settings.
- Pay-link details the shop enters, such as its PayPal.me, Venmo or Cash App handle and Zelle email or phone.
- Plan, purchase status, AI minutes used, wallet balance, spending limits and charges.

### Shop users and team members

- Name, email address, phone number, role and any permission changes made for that person.
- Password. It's stored only in scrambled form (a one-way hash), so no one can read it, including us.
- Invite codes, skills tags, shift start and end times, and work status (for example on the way or on site).

### Technician location

- Precise location from a technician's phone, **only while they're on shift or on a job** , including when the app is in the background. It's used to rank techs by drive time, show the dispatch map and give customers an arrival time. Going off shift stops it and removes the shared location. A tech can also turn off location in the phone's settings, but dispatch by drive time won't work for them.

### Calls, recordings and transcripts

- For calls to a shop's AI number: the caller's number, the number called, when the call started and ended, and how it ended.
- **A recording and a transcript of the call.** Calls are recorded and transcribed for the shop, so it can check what was said. By default, every AI call starts with a short notice, in the caller's language, saying the call is recorded. A shop can turn that notice off, and then it must tell callers itself where the law requires it.
- What the caller tells the AI, such as their name, address, what they need and their car's year, make, model and color.

### AI notes and drafts

- AI call notes: a short summary, what the caller needs, how urgent it is, the next step and a suggested text.
- AI reply drafts for a job's text thread, and which AI model wrote them.

### Text messages

- Phone numbers, message content, time and delivery status for texts sent and received on a shop's LockCommand number.
- Opt-out status when someone replies STOP.

### Customer and job details

- Customer name, phone number, email, address and notes.
- Job details: what's needed, vehicle details for car jobs, quoted price range, prices, status, the assigned tech and the job's history.

### ID, proof of ownership and signatures

- When a tech checks ID on a job: a photo of the ID, a photo of the proof of ownership or residence, the document type, the name on the ID and the customer's signature.
- When it was recorded, who recorded it, and where (unless the tech turns the place off).

### Job photos

- Before and after photos a tech takes on a job, and any caption.

### Invoices and payments

- Invoice lines, tax, totals, discounts, tips, payment method, amount and status.
- Card payments are handled by the shop's own payment provider. **We never receive full card numbers.** The provider tells us when a payment has landed.

### QuickBooks Online, when connected

- The QuickBooks company name, the shop's customers by name and its Service items, and the IDs of the records we create. Section 8 has the details.

### Device and app data

- Push notification token, phone type and app version.
- Sign-in activity and error logs, used for security and to fix problems.

### This website and your messages to us

- This website runs no analytics and sets no tracking or advertising cookies. Our hosting provider keeps standard request logs, such as IP address, browser type and the page asked for.
- Anything you send us by email, such as an early access request or a support question.

We don't ask for health information, financial account numbers or Social Security numbers. ID photos can show a driver's license or passport number; they're stored with the job for the shop and used for nothing else.

## 4. Where it comes from

- **From shop users:** what you enter when you sign up, set up your shop, add your team, create jobs, take photos and record payments.
- **From shop customers:** what callers say on a call to the shop's AI number, texts they send, and details they give the shop or the tech on the job.
- **From technicians' phones:** location while on shift, photos, signatures, and the push token.
- **From accounts a shop connects:** payment status from Stripe, Square or PayPal, and the names we need from QuickBooks Online.
- **From the app stores:** whether a LockCommand plan or top-up was bought, renewed or cancelled.
- **From our service providers:** recordings and transcripts of calls, text delivery status, map points and drive times.

## 5. How we use it

We use data only to run LockCommand, and for the purposes below.

| What we do | Data it uses |
| --- | --- |
| Answer calls, quote from the price book, book jobs and take messages | Shop settings, price book, caller number, call audio, recordings, transcripts, customer and job details |
| Dispatch: rank techs, send job offers, show the live map and arrival times | Job addresses, technician location while on shift, skills, workload and shift status |
| Send job texts and keep each job's text thread | Customer phone numbers, message content, delivery status, shop name and number |
| Write AI call notes and reply drafts | Call transcripts and the job's text thread |
| Record ID and proof of ownership | ID and proof photos, name on the ID, signature, time, who checked it and the place |
| Create invoices, pay links and receipts, and record payments | Invoice lines, amounts, tax, tips, payment status and the shop's payment handles |
| Copy records to QuickBooks Online, when a shop connects it | Customers, invoices and payments |
| Run plans, AI minutes and wallet credit, and show usage | Plan, purchase status, minutes used, wallet balance and charges |
| Send push notifications and account emails, such as password reset codes | Push token, email address, notification text |
| Support you and answer your questions | What you send us and the account details needed to help |
| Keep accounts safe, prevent fraud and abuse, and fix problems | Sign-in activity, device and app details, error logs |
| Improve LockCommand | Combined statistics that don't identify anyone |
| Meet our legal duties | Billing and tax records, and anything a valid legal request covers |

We don't use shop customers' information for our own marketing, and we don't combine one shop's customer data with another's. A small number of LockCommand staff can see a shop's data when it's needed for support, billing, security or a legal duty.

## 6. AI features

- **The AI receptionist** listens to callers and answers them. Call audio is processed by our voice AI provider and by the AI model the shop picks (models from the OpenAI, Claude or Gemini families). This produces the recording and transcript.
- **AI call notes and reply drafts** send the call transcript or the job's text thread to an AI model. We set these requests to go only to AI providers that don't keep the content or train on it.
- We don't train AI models of our own on shops' or customers' information.
- The AI quotes only from the shop's own price book. It never sends a text by itself: a person sends every AI draft.
- Dispatch ranks techs automatically by drive time, skills and workload. That ranking is a work tool for the shop, not a decision about anyone's rights. A person can always assign jobs by hand.
- AI can mishear or make mistakes, so shops check notes, bookings and drafts before relying on them.

## 7. Service providers

We use other companies to run parts of LockCommand. Each gets only the data it needs for its job, and we require them to protect it and use it only to provide their service to us.

| Kind of provider | What for | What they receive |
| --- | --- | --- |
| **Cloud hosting and database** | Stores the service data and runs the app's servers | All service data |
| **Phone and text message provider** | Phone numbers, sending and receiving texts, call routing | Phone numbers, message content, delivery status |
| **Voice AI provider** | Answers calls, records and transcribes them | Call audio, caller number, recordings, transcripts, and the shop details the AI needs (greeting, price book, hours) |
| **AI model providers** | Understanding callers and writing call notes and reply drafts | Call audio or transcripts, and job text threads |
| **Mapping and routing** | Turning addresses into map points and working out drive times | Job addresses and technician locations |
| **Email delivery** | Account emails, such as password reset codes | Email address and the message |
| **Phone notification services** | Delivering push notifications to iPhone and Android phones | Push token and the notification text |
| **Subscription management** | Tracking LockCommand plans bought in Google Play or the App Store | Purchase status, plan and store transaction IDs |
| **Website hosting and security** | Serving this website and protecting it from attacks | Standard request data, such as IP address and browser type |

If you want to know more about a provider, email [support@lockcommand.com](mailto:support@lockcommand.com?subject=Privacy%20request).

## 8. Accounts a shop connects

A shop can choose to connect its own accounts. Nothing is connected unless an owner, admin or accountant does it. Once connected, those companies handle the data they receive under their own terms and privacy policies.

### QuickBooks Online

- **What we send:** the shop's customers, invoices (including voided invoices) and payments, so the shop doesn't type them twice. The sync goes one way, from LockCommand to QuickBooks.
- **What we read:** only what the sync needs: the company name, customers by name (to avoid duplicates), the shop's Service items, and the records we're updating. We don't read other accounting data, bank data or reports, and we never move money.
- **Access:** the shop approves access on Intuit's own page, using the accounting permission. The access keys are stored encrypted.
- **Disconnecting:** choose Disconnect in Payments and accounting in the app. We tell Intuit to cancel our access and delete the stored keys right away. You can also remove LockCommand from the connected apps in your Intuit account.
- **After you disconnect:** syncing stops. What we already sent stays in your QuickBooks company, under your control.
- **Help:** email [support@lockcommand.com](mailto:support@lockcommand.com) .

### Stripe, Square and PayPal

- We use these accounts to create pay links and checkout pages for the shop's invoices, and to learn when a payment has landed.
- For Square we keep the access the shop grants, encrypted. For Stripe and PayPal we keep only the account ID.
- When a shop sets up Stripe from the app, Stripe collects the business details it needs directly from the shop, under Stripe's own terms.
- Customer payments go straight to the shop's own account. They never pass through LockCommand.
- When a shop disconnects or deletes its account, we delete the link on our side. To fully remove our access, the shop also removes LockCommand in its Stripe or PayPal dashboard.

### PayPal.me, Venmo, Cash App and Zelle

We store only the handle, email or phone the shop enters, and show it on the shop's invoices. These apps don't report payments back to us, so the shop marks those payments as paid.

### Google Play and the App Store

LockCommand plans are sold through Google Play and the Apple App Store. The store takes payment and keeps the payment details. We receive the plan, the purchase status and store transaction IDs.

## 9. Other times we share data

- **Inside the shop:** team members see the data their role allows. See [Security and privacy](https://lockcommand.com//security-and-privacy) for who sees what.
- **The law and safety:** when a valid legal request requires it, or when we believe in good faith it's needed to protect someone's safety, to stop fraud or abuse, or to protect our rights. Where the law allows, we tell the shop first.
- **A sale or merger:** if JANZAY LLC or LockCommand is sold or merged, data may move to the new owner, and this policy keeps applying to it. We'll tell shop owners before their data falls under a different policy.
- **With your permission:** when you ask us to share something.

## 10. No selling, no ad tracking

**We don't sell personal information.** We don't share it for targeted or cross-context behavioral advertising, and we don't let anyone use LockCommand data to show ads. That's true for shop users, shop customers and website visitors.

## 11. Text messages

Shops use LockCommand to text their customers about jobs. Those texts aren't marketing. Anyone can reply STOP to stop them.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties. See our [SMS terms](https://lockcommand.com//legal/sms).

## 12. How long we keep it

**Deletion is instant and permanent.** When a shop deletes a record or its account, it's gone right away, including the copies our service providers hold for us, such as call recordings. It can't be undone or recovered, so export anything you need first.

| Data | How long |
| --- | --- |
| A shop's account and records: jobs, customers, invoices, payments, photos, ID and proof, signatures, texts, call recordings, transcripts and AI notes | While the account is open. Deleted at once and for good when the shop deletes them or the account. |
| Technician location | Only the latest point is kept. It's removed when the tech goes off shift. Shift start and end times stay with the shop's records. |
| Links to a connected QuickBooks Online or payment account | Until the shop disconnects it or deletes the account. The link is deleted right away. For QuickBooks Online and Square we also cancel our access with the provider; for Stripe and PayPal, the shop removes our access in its own dashboard. |
| Push notification tokens | Until they're replaced or the account is deleted. |
| Support emails | As long as we need them to help you and keep a record of your request. |
| Website request logs kept by our hosting provider | A limited time, for security and troubleshooting. |
| Records of what a shop paid LockCommand (subscriptions, wallet and billing history), and a closed shop record holding only the shop's name | For the period tax law requires. They're set aside and used for nothing else. |
| Statistics that don't identify anyone | May be kept. |

Data the shop sent to its own QuickBooks Online or payment accounts stays there, under the shop's control. Texts already delivered stay on the recipient's phone. See [Delete your account](https://lockcommand.com//legal/delete-account) for how to ask.

## 13. Security

- Data is encrypted in transit between the app, this website and our servers.
- Access keys for connected accounts are encrypted at rest.
- Access is role-based: each person sees the screens their role needs, and only members of a shop can see that shop's data.
- Our own staff get access only when they need it for support, billing, security or a legal duty.

Members of a shop can open its job records, including ID photos, so invite only people you trust and remove anyone who leaves. No system is perfectly secure. Use a strong password, and tell us right away if you think something is wrong. If a breach affects your personal information, we'll tell you and the authorities as the law requires. To report a security problem, email [support@lockcommand.com](mailto:support@lockcommand.com?subject=Security%20report) with "Security report" in the subject.

## 14. Your choices

- You can see and change most of your information in the app.
- Shops can export jobs, customers and payments to CSV, and delete job photos and some records in the app.
- Technicians can turn off location and notifications in the phone's settings. Dispatch by drive time and job offers need them.
- Shops can turn off automatic texts and AI call notes in the app.
- Anyone can stop job texts by replying STOP.
- You can ask for a copy of your data, a correction or deletion at [support@lockcommand.com](mailto:support@lockcommand.com?subject=Privacy%20request) .

## 15. US state privacy rights

California and a growing number of other states (including Colorado, Connecticut, Virginia, Utah, Texas and Oregon) give residents privacy rights. We give these rights to every user in the US, wherever they live.

### Your rights

- **Know and access:** ask what personal information we hold about you, where it came from, why we use it and who we share it with, and get a copy.
- **Correct:** ask us to fix information that's wrong.
- **Delete:** ask us to delete your information. Deletion is instant and permanent, apart from records the law makes us keep.
- **Portability:** get your information in a common format, such as CSV, that you can take elsewhere.
- **Opt out:** of the sale of personal information, sharing for targeted advertising, and profiling that has legal or similarly big effects. We don't do any of these, so there's nothing to switch off, but you can still ask and we'll confirm it in writing.
- **Limit sensitive information:** we use sensitive information (precise location of techs on shift, ID images, account passwords) only to provide the service you asked for.
- **Appeal:** if we turn down a request, reply to our answer to appeal. If we still say no, you can contact your state attorney general.
- **No discrimination:** we won't charge you more, give you a worse service or deny you service for using these rights.

### How to make a request

- Email [support@lockcommand.com](mailto:support@lockcommand.com?subject=Privacy%20request) with "Privacy request" in the subject. Send it from the email address you sign in with, if you have an account.
- We'll check it's you before acting, using details we already have. We answer within 45 days, and tell you if we need more time.
- **Authorized agents:** someone can make a request for you if you give them written permission. We may ask you to confirm your identity with us directly.
- **Global Privacy Control:** if your browser sends this signal, we treat it as a request to opt out of sale and sharing. We don't sell or share in the first place.
- If you're a shop customer, your information belongs to the shop. We'll pass your request to the shop and help it respond.

### What we collected in the last 12 months

Using the categories in California law, we collected:

- **Identifiers:** name, email, phone number, address, IP address, account and device IDs.
- **Customer records:** job, invoice and payment details, and signatures.
- **Commercial information:** plans, purchases, wallet credit and usage.
- **Audio and visual information:** call recordings, job photos, ID and proof photos.
- **Geolocation:** technicians' precise location while on shift, and where an ID check took place.
- **Professional information:** a shop's license number, and each user's role and skills.
- **Internet activity:** app activity and website request logs.
- **Sensitive information:** account passwords, ID images and precise location.

These come from the sources in section 4, are used for the purposes in section 5, are shared only as described in sections 7 to 9, and are kept as described in section 12. We don't sell any of them or share them for targeted advertising.

## 16. Children

LockCommand is for businesses and people 18 or older. It isn't meant for children, and we don't knowingly collect information from anyone under 18. If you think a child gave us information, contact us and we'll delete it.

## 17. Where we operate

LockCommand is offered only to businesses in the United States, and phone numbers are US only. We and our service providers store and process data in the United States. Some providers may also process data in other countries, and we require them to protect it the same way.

## 18. Cookies

This website sets no tracking or advertising cookies and runs no analytics that identify you. The LockCommand app stores only what it needs to keep you signed in. If we ever add analytics, we'll update this policy first and ask for your consent before anything is set. See our [Cookie policy](https://lockcommand.com//legal/cookies).

## 19. Changes to this policy

When we change this policy, we update the date at the top. If a change is important, we tell shop owners in the app or by email before it takes effect.

## Contact

Questions about this policy, or a request about your data, go to [support@lockcommand.com](mailto:support@lockcommand.com). A person reads every message.

JANZAY LLC, 30 N Gould St Ste R, Sheridan, WY 82801