Legal

WaterMark™ Privacy Policy

Last updated: September 4, 2026

WaterMark™, operated by Watermark App LLC (a New Jersey limited liability company; "we", "our"), provides pool-service field and office software to pool-service companies and their technicians. This policy explains what we collect, why, and who we share it with. We sell field tools to businesses; the people who use the app are business owners, office staff, and technicians, and the data they enter is about their own customers.

Information we collect

Account info: name, email, password (stored hashed), and your role and company.
Operational data you enter: your customers' names, addresses, phone numbers, gate codes, pool details, water-chemistry readings, service notes, photos and videos (including microphone audio recorded with a video), invoices, and payments.
Location (technicians): when a technician checks in to a job, we record approximate GPS coordinates to verify on-site arrival. When a technician has the app open and has turned location sharing on, their company's dispatcher can see their live position. That live sharing runs only while the app is active and stops when the app is closed. When the pool company enables homeowner tracking, an "on my way" message can include a temporary, job-bound link that shows the technician's shared location until arrival; the link then expires. Separately, a technician may opt in to background auto-arrival. That setting is off by default and is enabled only after an in-app disclosure and the device's background-location permission. The device then monitors geofences around that technician's assigned stops while the app is in the background or closed, and WaterMark records an arrival when the device reports entry. This geofence feature does not continuously share the technician's background position with the office or homeowner. Either location feature can be declined or turned off, and permission can be revoked in device settings. Customer addresses are also converted to map coordinates (geocoded) to place stops on the route map.
Device & usage: basic device information and in-app activity needed to operate the service.
Status-page email subscription: if you ask our public service status page to email you when we record an incident, we store that email address. It is not an account, and you do not need one: we mail a confirmation link first, so the address is only added by whoever can read it, and we use it for nothing but those incident notices. Every one of those emails carries a one-click link that stops them. Deleting a WaterMark account also deletes any status subscription that used one of that account's email addresses.

How we use it

To run the service: scheduling, routing, chemistry recommendations, invoicing, and reporting.
To send service notifications (e.g., "on my way", receipts) to your customers on your behalf.
To keep your company's data isolated from every other company's data.

We use trusted processors strictly to provide the service, under agreements that limit their use of the data to providing that service to us. We do not sell personal information. Our service providers include, but are not limited to, the following:

Stripe: payment processing and subscription billing (card data goes directly to Stripe; we never store full card numbers).
Twilio: sending and receiving SMS, and optional AI-receptionist phone calls, to and from your customers.
Resend and SendGrid: transactional email delivery (account and service notifications), depending on configuration.
Anthropic: optional AI features analyze photos, readings, and text to produce recommendations and translations; relevant content is sent to Anthropic to generate a response and is not used to train models.
Cloudinary: durable storage and delivery of job photos and videos (including their audio).
Apple (Maps Server API, Apple Maps): converting service addresses to map coordinates, and drawing the map inside the iPhone and iPad app. Data: the service address and its coordinates.
Google (Maps on Android; Google Business Profile): drawing the map inside the Android app, and the optional Business Profile connection if your company links it for reviews. Data: service coordinates for the map; for Business Profile, only the review and listing data you authorize.
US Census Bureau Geocoder and OpenStreetMap services (Nominatim, OSRM): converting service addresses to map coordinates and computing road routes. Data: service addresses and coordinates.
Mapbox: computing and drawing road routes when our own routing server is not available. Data: the coordinates of the stops on a route.
Expo (push notifications): delivering app notifications to technicians' devices; device push tokens and the notification's title and body are sent for that purpose.
Sentry (error monitoring): diagnosing application errors; error reports are tagged with a company id and request id so we can trace a fault, and do not include customer records.
PostHog (product analytics processor): counts how far companies get through setup, so we can find and fix the steps where the product stalls. It receives only a WaterMark-generated company identifier, a fixed list of setup-milestone events, and coarse product state - never names, email addresses, phone numbers, street addresses, notes, or customer records. Data it will receive: a WaterMark-generated company identifier, a fixed list of milestone events (for example, that a company created its first customer), and coarse product state such as plan and surface. We will not send names, email addresses, phone numbers, street addresses, notes, or customer records. No IP-based location will be sent.
Intuit QuickBooks: optional accounting sync, only if your company connects it.
Xero: optional accounting sync, only if your company connects it.
Render: application and database hosting.
Backblaze: encrypted off-site backups of the service database.

Geocoding is tried against Apple first, with the free US Census and OpenStreetMap chain as the fallback. Road routes are computed on our own OSRM server first, with Mapbox as the fallback when it is unavailable. Which providers are reached depends on our current configuration, so all of them are listed above.

If we engage a new category of service provider that processes personal data, we will update this page.

SMS / text-messaging privacy

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers and SMS opt-in consent collected for text messaging are used solely to deliver the service notifications described above (appointment reminders, on-the-way alerts, service recaps, booking confirmations, invoices/receipts, and review requests). Text-messaging originator opt-in data and consent are not sold or shared with any third party. Message frequency varies; message and data rates may apply. Every message includes the ability to opt out: reply STOP to stop receiving messages at any time, or HELP for help.

Access, download, or delete your data

You can access, download a copy of, correct, or delete your data at any time. Company owners can export or delete their account data themselves in-app (Settings → Your data & account), and homeowners can do the same from their portal (see Delete your account). You can also email support@watermarkapp.online and we'll respond promptly.

Cookies & browser storage. WaterMark uses two essential first-party cookies for the office login and CSRF protection. It also uses first-party local and session storage for security migration, transaction safety, active-workflow recovery, language, and interface preferences. Some convenience preferences are optional. We use no advertising pixels, cross-site tracking scripts, analytics cookies, or third-party browser-storage keys. See the code-censused Cookie & browser storage inventory for every current and legacy-cleanup key, its purpose, lifespan, and classification.

Data retention. We keep your data for as long as your account is active. When your account is deleted, we permanently erase your account and its data within 30 days (usually much sooner), with three exceptions: invoices, payments, and tax records are retained for up to 7 years as required by financial, accounting, and tax law, then permanently purged; anonymized or aggregated logs that contain no personal identifiers and cannot be tied back to you may be kept indefinitely for security and service integrity; and encrypted off-site backup snapshots, which are kept for disaster recovery, age out automatically within 30 days, and are never used to restore deleted data. Full details are on the Delete your account page. Where applicable law (such as the GDPR or CCPA) grants you rights to access, port, or delete personal information, we honor those requests.

Security

Passwords are hashed, access is authenticated with expiring tokens, and each company's data is scoped so it is never visible to another company. No system is perfectly secure, but we work to protect your information.

Children

WaterMark is a business tool and is not directed to children under 13.

Contact

Watermark App LLC · 151 Ledgewood Ave., Netcong, NJ 07857 · Questions or data requests: support@watermarkapp.online.