Your information

Privacy Policy

How we handle your information and the choices you have.

Effective and last updated:

PocketMSP (“PocketMSP,” “we,” “us,” or “our”) provides business intelligence, AI assistance, peer groups, and mentorship for managed service provider owners. This policy explains how we collect, use, disclose, retain, and protect personal information through pocketmsp.com, the PocketMSP mobile application, and our related services (together, the “Services”). It covers visitors, prospective customers, members, and people who contact us.

For privacy questions or requests, including deletion requests, email contact@pocketmsp.com. PocketMSP is responsible for personal information we use to operate our business. Where we process information on behalf of a business customer, that customer controls its use and we act under its instructions and applicable agreements.

1. Information we collect

The information we process depends on how you use the Services and which features you enable.

  • Contact and trial requests: information you enter in our forms or send by email, including your name, work email address, company, optional company website, inquiry type, message, and requested membership. We store website submissions in a database and send them to our team through our email service.
  • Account and membership information: details you provide to create or manage an account, your business profile, authentication information, membership level, preferences, and support communications.
  • Content and participation: questions, prompts, conversation history, files, feedback, and business information you submit; and forum posts, direct or group messages, meeting details, and information you choose to share with peers or mentors. Circle applications also collect your role, annual revenue, and location entered as text; this is not GPS location.
  • Connected business systems: information from integrations you authorize, which may include customer and company records, tickets, time entries, agreements, assets, device status, subscriptions, financial records, and documentation, depending on the connector and permissions you grant.
  • Billing information: billing contact details, subscription and transaction identifiers, payment status, invoices, and limited payment-method details provided by our payment processor. See Stripe and payments.
  • Technical information: our servers receive connection and request information, such as IP address, requested pages, request times, browser or device information, and error or security logs. The website also uses a session identifier to support forms and prevent misuse.

Please provide only information needed for the feature you use. Do not submit passwords, payment card details, sensitive personal information, or another person’s information unless you are authorized and it is necessary for the requested service.

2. How we use information

We use information to respond to inquiries; arrange trials and demos; create and authenticate accounts; deliver AI assistance and business insights; preserve conversation context; facilitate requested peer groups and mentorship; operate authorized integrations; manage memberships, payments, refunds, and billing; provide support and service notices; maintain and improve reliability and functionality; prevent fraud and abuse; and meet legal obligations.

Where applicable law requires a legal basis, we rely on performing a contract or taking steps you request before a contract, our legitimate interests in operating and securing the Services, compliance with law, or your consent. Where consent is required for optional processing or marketing, we obtain it separately. You may withdraw it at any time without affecting processing that occurred before withdrawal.

3. AI and connected services

When you use PocketAdvisor, we send your prompts and relevant saved conversation context to OpenRouter, which routes requests to the provider hosting the selected AI model to generate a response. Our AI platforms include OpenRouter, Anthropic (Claude), OpenAI (GPT), Google (Gemini), and Meta (Llama models). Models may be hosted by the model developer or another inference provider through OpenRouter; selecting a Meta model does not necessarily send data directly to Meta. The recipient depends on the selected model, automatic model selection, provider availability, and fallback routing. Content sent for processing may include personal or business information you put in a conversation. Share only information you are authorized to use for this purpose.

Business integrations access data only when you or your organization authorize a connection. Available data depends on the integration and its permissions. You may stop future access by revoking authorization in the connected provider’s settings or contacting us for assistance. Disconnecting does not automatically erase information already imported; you can separately request deletion as described below.

You can stop future AI processing by not sending further messages to PocketAdvisor. You can request deletion of saved conversations and account data by contacting us. Retention and any use of inputs or outputs by an AI provider depend on the applicable provider terms and configured data controls; we do not represent that every model or endpoint has zero retention. OpenRouter describes its routing and data controls in its data collection documentation. Contact us for information about the providers and controls applicable to your account.

4. How we share information

  • Service providers: hosting, database storage, email delivery, authentication, AI processing, payment processing, and technical support providers receive the information needed to perform their services. We require providers handling personal information on our behalf to protect it to the same or an equivalent standard described in this policy and required by applicable law, and to use it only for authorized purposes.
  • Your organization, peers, and mentors: account administrators may receive information needed to manage an organization’s membership. Participants and mentors receive the profile details, messages, or business information you choose to share in their group or session. Other participants can retain what you share, so consider what you disclose.
  • At your direction: we share information with connected services or other recipients when you authorize or request it.
  • Legal and business purposes: we may disclose information to comply with law or lawful requests, protect rights and safety, investigate fraud, or in connection with a merger, acquisition, financing, or sale of business assets, subject to appropriate confidentiality and privacy protections.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use personal information to track you across other companies’ apps or websites for targeted advertising.

5. Stripe and payments

For payments processed through Stripe, payment details are collected by Stripe through its payment interface. Stripe processes payment-method details, billing contact information, transaction information, and device or connection information to complete payments, authenticate transactions, prevent fraud, and meet financial and legal obligations.

We provide Stripe with information needed to manage your purchase or subscription and receive transaction and subscription records, payment status, and limited payment-method information such as card brand and last four digits. We do not store full payment card numbers or card security codes on our servers. Please do not send those details through our contact forms or email.

For Apple in-app purchases, Apple handles payment details under its own privacy policy. We receive and verify signed transaction records, including product and transaction identifiers, purchase and expiration dates, subscription status, and account-linking identifiers, to provide access, restore purchases, and process subscription updates. We do not receive your full payment card details from Apple. You can manage Apple subscriptions through the app’s subscription management option or your Apple account settings.

Stripe acts as our service provider for some activities and as an independent controller for others, including certain fraud prevention and compliance activities. Its handling of information is described in the Stripe Privacy Policy. Stripe or other payment providers may retain records required by financial laws even after you delete your PocketMSP account.

6. Cookies and device choices

Our website uses a session cookie for form security, submission handling, and confirmation messages. You can block or delete cookies through your browser settings, although forms may stop working. The marketing website does not currently include third-party advertising or analytics scripts.

The current mobile app does not request access to your camera, microphone, GPS location, contacts, or photo library, and does not request notification or advertising-tracking permissions. Circle application locations are entered manually. The app uses network access to communicate with PocketMSP and related services, and Apple purchase authorization when you choose an in-app purchase. If a future feature needs access to a protected device resource, we will explain its purpose and request permission before access. You can manage device permissions in your device’s settings.

The app stores sign-in tokens on your device using secure storage where available, with a fallback to local application storage, and stores preferences such as dismissed credit warnings locally. Signing out clears stored sign-in tokens. Removing the app does not itself delete your account or information held by PocketMSP.

External websites and Stripe payment interfaces may use their own cookies and technologies under their own privacy policies.

7. Retention and deletion

We retain personal information for as long as needed for the purposes described in this policy. Retention depends on whether your account is active, the service or inquiry involved, contractual requirements, security needs, and applicable recordkeeping laws. Contact and trial records are retained while needed to handle your request and related follow-up; account, conversation, and integration data are retained while needed to provide your membership or until an applicable deletion request is completed.

To request deletion of your account or personal information, email contact@pocketmsp.com from the address associated with your account and describe your request. We may verify your identity and authority before acting. We will delete or de-identify information no longer needed and direct our service providers to do the same where applicable.

Some records may be retained for tax and accounting requirements, payment disputes, fraud prevention, security, legal claims, or other legal obligations. Retained information is restricted to those purposes. Backup copies may remain until overwritten in the normal backup cycle and are not used for ordinary service operations. We will explain any applicable exception when responding to your request. Deleting an account does not necessarily cancel a subscription managed by an external payment provider; manage that subscription with the provider as well.

8. Your privacy rights

Depending on your location and applicable law, you may have the right to access or obtain a copy of your personal information; correct inaccurate information; request deletion; receive information in a portable format; restrict or object to processing; withdraw consent; and appeal a denied request. You may also lodge a complaint with your local data protection authority. We do not discriminate against people for exercising applicable privacy rights.

Send requests or appeals to contact@pocketmsp.com. We respond within the period required by applicable law and may request information reasonably necessary to verify your identity. An authorized agent may submit a request where permitted by law, subject to verification of authority. If your organization controls the information, we may refer the request to its administrator and assist it in responding.

You can withdraw optional consent by contacting us, revoking device permissions, or disconnecting an integration, as appropriate. To stop promotional emails, use the unsubscribe option where provided or contact us. Necessary account, security, and billing messages may still be sent.

9. Security and international transfers

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or loss. No method of transmission or storage is completely secure.

PocketMSP and its providers may process information in the United States and other countries where they operate. Privacy laws may differ from those in your location. Where applicable law requires safeguards for international transfers, we use legally recognized transfer mechanisms, such as standard contractual clauses, or another permitted basis. Contact us for information about safeguards relevant to your information.

10. Children’s privacy

The Services are intended for adult business users and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.

11. Changes to this policy

We may update this policy as our Services or legal obligations change. We will post the updated policy here and change the date above. For material changes, we will provide additional notice where required and obtain consent when applicable law requires it.

12. Contact us

For questions, privacy requests, consent withdrawal, or deletion requests, contact PocketMSP at contact@pocketmsp.com. You may also use our contact form. Include enough information to identify your account or inquiry, but do not send passwords or payment card details.