Privacy Policy

Last Updated: October 2, 2026

Cicada Technologies LLC ("Cicada Technologies," "we," "us," or "our") operates the TwiceMark mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, phone number, business name, and address when you create an account
  • Business Data: Client information, job details, estimates, invoices, payment records, and parts catalogs you enter into the Service
  • Pricing and Cost Records: Rates, tax settings, catalog cost inputs, expenses, and receipt details you choose to enter
  • Media: Photos you upload for job documentation, business logos, and signature images
  • Communications: Messages you send to us via email or in-app support, client phone numbers, SMS consent records, and message content or delivery metadata when you use client messaging
  • Safety and Policy Records: The exact Terms/User Policy versions you accept; acceptance and revocation timestamps and request identifiers; workspace-member blocks; reports about shared content or members; report references, categories, details, status, and moderation outcomes
  • Beta Waitlist Information: Email address, trade, referral source, beta participation, and founding-member eligibility when you join the TwiceMark beta list

Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers, and mobile network information
  • Usage Data: Features used, screens viewed, actions taken, and interaction timestamps
  • Approximate Location: Mixpanel may derive coarse city or region information from your IP address for product analytics; TwiceMark does not request precise device location for this purpose
  • Push Notification Tokens: To deliver enabled appointment and Auto-Chase reminder notifications you configure
  • Crash & Performance Data: Error logs and performance metrics to improve app stability

Information from Third Parties

  • Payment Processors: Stripe processes payments on your behalf; we receive transaction confirmation details but do not store full credit card numbers
  • QuickBooks: If you connect QuickBooks, we sync invoice, customer, and payment data as you configure

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related notifications
  • Generate estimates, invoices, and operational job records
  • Store and display the pricing, expense, and payment records you enter
  • Send appointment reminders, payment reminders, and push notifications you've configured
  • Provide customer support
  • Monitor and analyze usage trends to improve user experience
  • Detect, prevent, and address technical issues and fraud
  • Enforce shared-content rules, prevent blocked direct interactions, investigate reports, take proportionate safety actions, handle appeals, and maintain an auditable record of policy acceptance and moderation
  • Send beta access, product education, launch updates, and founding-member offer emails when you opt into the beta list

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

  • Service Providers: We use trusted third-party services to operate the platform:
  • Supabase — Database hosting and authentication
  • Stripe — Payment processing
  • RevenueCat — Subscription management
  • Expo — Push notification routing and delivery
  • Google Firebase / Firebase Cloud Messaging (FCM) — Android push notification delivery and app configuration
  • Apple Push Notification service (APNs) — Apple-device push notification delivery
  • Resend — Email delivery
  • Twilio — SMS delivery
  • Sentry — Error monitoring and crash reporting
  • Mixpanel — Product analytics
  • Intuit QuickBooks — Accounting sync (if you connect it)
  • Your Clients: When you send estimates, invoices, or payment links, the recipient sees your business name, contact info, and job details
  • Legal Requirements: If required by law, subpoena, or legal process
  • Safety and Enforcement: We may share the minimum necessary information with an affected workspace, service provider, legal adviser, or authority when reasonably necessary to investigate or respond to abuse, a credible safety issue, illegal content, or a legal obligation. Ordinary workspace administrators do not receive private reporter details through TwiceMark's tenant APIs
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

4. SMS & Mobile Information

  • TwiceMark uses mobile numbers and SMS consent information only to deliver job-related messages requested or authorized by the recipient, such as estimates, invoices, payment reminders, job updates, review requests, and customer-care replies
  • Message frequency varies by active job and is typically no more than 8 messages per month per active job. Message and data rates may apply
  • Consent to receive SMS is not a condition of purchasing goods or services. Recipients may reply STOP to opt out or HELP for help
  • TwiceMark does not use purchased lists or third-party lead-generation lists for SMS
  • We do not sell, rent, or share mobile numbers or SMS consent information with third parties or affiliates for their marketing or promotional purposes
  • We may share mobile information with service providers such as Twilio only as needed to deliver messages, operate the Service, prevent fraud, provide support, or comply with law. Those providers may not use it for their own marketing

5. Data Storage & Security

  • Your data is stored securely on Supabase infrastructure (hosted on AWS) with encryption at rest and in transit
  • Authentication uses industry-standard methods via Supabase Auth
  • We implement access controls so team members only see data permitted by their role
  • Despite our efforts, no method of electronic transmission or storage is 100% secure

6. Your Rights & Choices

  • Access & Export: You can view all your data within the app at any time
  • Correction: You can update your profile and business information in Settings
  • Deletion: You can permanently delete your authentication account, personal profile, personal media that is not still referenced by a shared organization, and solely owned workspace data from Settings → Account → Delete Account. Shared organization records and media they reference may be retained for the organization and reassigned to its owner rather than erased
  • Push Notifications: You can disable push notifications in your device settings
  • SMS: Reply STOP to opt out of text messages or HELP for assistance. You may also contact support@twicemark.com
  • Beta & Marketing Email: If you join the beta list, we send beta access, product education, and launch or founding-member offer emails. You can unsubscribe at any time using the link in every email
  • Shared-content controls: Authenticated members can report content or another member and can block supported direct interactions. Withdrawing current policy acceptance disables shared-content features until the current Terms and User Policy are accepted again; it does not erase records that TwiceMark must retain for safety, security, disputes, or legal compliance

California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell your data).

European Residents (GDPR)

You have the right to access, rectify, erase, restrict processing, and port your data. Contact us to exercise these rights.

7. Data Retention

  • We retain account and workspace data while your account or organization is active
  • A completed account deletion removes your authentication account, personal profile, memberships, solely owned workspace data, and personal media that is not still referenced by a shared organization. Shared organization records and media they reference are retained for the organization and may be reassigned to its owner
  • Deletion is normally completed immediately after database, Storage, and payment-link cleanup succeeds. If Storage or authentication cleanup fails, the request remains incomplete and the app asks you to retry or contact support; TwiceMark does not report deletion as completed until that cleanup succeeds
  • Limited subscription, payment-provider, security, audit, fraud-prevention, and legal records may be retained for reconciliation, legal obligations, or dispute handling; service providers may also retain their own logs under their policies
  • Versioned policy-acceptance receipts, revocation events, member-block request receipts, moderation reports, and moderation action records may be retained after workspace or account changes when reasonably necessary to prove consent, enforce safety rules, investigate abuse, prevent retaliation or repeat misuse, resolve disputes, or comply with law
  • Anonymized, aggregated analytics data may be retained indefinitely

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: support@twicemark.com Website: https://www.twicemark.com