Commercial Dishwasher

Back Office

Privacy Policy

Effective date: September 18, 2026

This Privacy Policy explains how Commercial Dishwasher (“Company,” “we,” “us,” or “our”) handles information in the Commercial Dishwasher Back Office (the “Application”). The Application is an invite-only staff tool. It is not a consumer product and is not available to the public.

1. Who this policy covers

This policy applies to authorized employees, contractors, and other parties who sign in to the Application. Restaurant customers and other service locations do not have Back Office accounts. Their business information appears here because staff enter and manage it as part of our work.

2. Who owns the software and the data

Null Harbor LLC owns the Application source code and related software intellectual property. Commercial Dishwasher has a perpetual license to use the Application for its business.

Commercial Dishwasher owns the data in the Application. That includes staff accounts, customer and site records, invoices, photos, signatures, location history, audit logs, and any other information entered, uploaded, or generated through the Application. Null Harbor LLC does not own that data.

3. Information we handle

Staff account information. When an administrator creates your account, we store your name, work email address, role (such as office, manager, technician, or admin), and a hashed password. We also keep session cookies and records of your activity in the Application’s audit log.

Customer and operations information. Staff enter and view information needed to run the service business, which may include:

  • customer legal names, contacts, phone numbers, email addresses, and site addresses;
  • tax identifiers and billing details;
  • leases, work orders, invoices, and payment status;
  • visit photos and customer signatures captured in the field;
  • technician location while the field app is in use, which the live map displays to authorized staff;
  • QuickBooks customer, invoice, and payment metadata when that integration is connected.

4. How we use information

We use this information to:

  • authenticate staff and enforce role-based access;
  • dispatch, schedule, and complete service work;
  • prepare invoices, collect payment, and keep accounts receivable;
  • maintain an audit trail for compliance and internal review;
  • operate, secure, and improve the Application.

We do not sell personal information and we do not use the Application for advertising or cross-context behavioral advertising.

5. How we share information

We share information with service providers that help us run the Application, including:

  • Vercel, which hosts the Application and stores uploaded files;
  • PlanetScale, which hosts the application database;
  • Resend, when invoice or other operational email is enabled;
  • Intuit QuickBooks Online, when an administrator connects billing and payments;
  • a map-tile provider, when an administrator configures the live map.

We may also share information with our professional advisors, or when the law requires it. Invoice emails and payment links may be sent to the customer contacts staff designate.

6. Cookies and sessions

The Application uses functional cookies only: an access token cookie (dw_access_token) and a refresh token cookie (dw_refresh_token). These cookies keep you signed in. We do not use marketing, analytics, or advertising cookies.

7. Retention

Staff accounts remain until an administrator deactivates them. Customer records, invoices, photos, signatures, audit events, and technician location history are kept as needed to operate the business, meet legal and accounting requirements, and investigate issues. The Application does not automatically delete audit or location history.

8. Security

We use role-based access, hashed passwords, and private storage for photos and signatures. No method of transmission or storage is completely secure. You must protect your password and sign out on shared devices.

9. Your choices

Because this is an employer-issued tool, most account changes are made by an office administrator. If your information is incorrect, or you have a question about records associated with your account, contact your administrator. When your authorization ends, your sign-in access is revoked.

10. Children

The Application is not directed to children and is not intended for anyone under 18. We do not knowingly collect information from children.

11. Changes

We may update this Privacy Policy from time to time. The effective date at the top of this page is the current version. We will ask you to accept the current policy when you sign in.

12. Contact

Privacy questions should go to your office administrator or to:

Commercial Dishwasher
12814 NE HWY 99, Vancouver, WA 98686
(503) 408-0744
www.commercialdishwasher.net