Legal
Privacy Policy
Last updated: July 28, 2026
Pharos (“Pharos,” “we,” “us,” or “our”) is operated by ProFusion Home Solutions. Pharos is an operating system for home-efficiency installers — providing pipeline, appointments, dispatch, messaging, calling, and territory management. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. This policy applies to gopharos.io, www.gopharos.io, portal.gopharos.io, login.gopharos.io, and related Pharos services (the “Service”).
1. Who we are and how to contact us
Pharos is provided by ProFusion Home Solutions. For any privacy question, or to exercise the rights described below, contact us at legal@profusion.solutions.
2. Who uses Pharos
Pharos is a business-to-business platform provisioned by an administrator at an installer organization (“Customer”). Its Users are that Customer's owners, reps, dispatchers, and technicians. Pharos also stores information about the homeowners and prospects those installers serve (“Contacts”). Where Pharos processes data on a Customer's behalf, the Customer is the controller and Pharos acts as a processor under the Customer's instructions.
3. Information we collect
- Account and profile data. Name, work email, phone number, role, organization, and authentication data.
- Customer CRM data. Leads and Contacts (names, addresses, phone numbers, emails), appointments, notes, tasks, pipeline stages, territory and job data.
- Communications data. SMS/MMS and call metadata and content sent or received through the Service, and transactional email sent on a Customer's behalf.
- Usage and device data. Log data, IP address, browser and device type, and product-interaction events used to operate, secure, and improve the Service.
- Google user data. If a User connects their Google account, we access the data described in Section 4.
We do not knowingly collect information from children. The Service is not directed to individuals under 18.
4. Google user data (Calendar and Drive)
Connecting a Google account is optional and User-initiated. A User can disconnect at any time (Section 8).
Scopes we request and why:
| Google scope | What it allows | Why Pharos uses it |
|---|---|---|
| openid, email | Confirm the User's Google identity and email | Associate the connection with the correct Pharos User account |
| .../auth/calendar | Read and write events on the User's Google Calendar | Two-way appointment sync: Pharos writes scheduled jobs to the User's calendar and reads existing events to avoid double-booking |
| .../auth/drive.file | Access only files the User opens with or creates in Pharos | Store and retrieve Pharos-generated documents in the User's Drive; never touches other Drive files |
How we use Google user data. Calendar data is used solely to synchronize appointments and check availability. Drive access is limited to files created or opened through Pharos. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized AI/ML models.
How we store it. OAuth tokens are stored encrypted and accessible only to the systems that perform the sync. Calendar and Drive data are processed to provide the feature and not retained beyond what is necessary to operate it.
Limited Use disclosure. Pharos's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use access to Google user data to provide or improve user-facing features that are prominent in the Pharos interface; we do not transfer or sell this data except as necessary to provide those features, comply with applicable law, or as part of a merger or acquisition; and we do not use it for serving advertisements or for training AI/ML models.
5. How we use information
To operate, maintain, and secure the Service; authenticate Users and enforce role-based access; deliver features (pipeline, scheduling, calendar sync, messaging, calling, dispatch); provide support and onboarding; detect and prevent fraud, abuse, and security incidents; comply with legal obligations; and improve the Service. We process Customer CRM data and Google user data only to provide the Service to the relevant Customer.
6. How we share information
We do not sell personal information. We share only as follows:
Service sub-processors (each under contractual confidentiality and data-protection obligations): Supabase (database/backend hosting, US), Vercel (application hosting), Twilio (SMS/MMS and voice), Resend (transactional email), Google (calendar/file sync when connected), Sentry (error monitoring), Stripe (billing, where applicable).
Within the Customer's organization, per User role. Legal and safety, when required by law or to protect rights and safety. Business transfers, in a merger/acquisition/financing/sale, subject to this policy.
7. Data retention
We retain personal information as long as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce agreements. Google OAuth tokens are retained only while the connection is active and deleted upon disconnection or revocation. When a Customer's account is closed, we delete or de-identify associated data within a commercially reasonable period, except where retention is legally required.
8. Your choices and controls
Disconnecting Google. A User can disconnect from within Pharos (Settings/Integrations), revoking Pharos's token and deleting the stored connection, or revoke directly at myaccount.google.com/permissions.
Access, correction, deletion. Contact legal@profusion.solutions. As a processor for Customer data, we may route certain requests to the relevant Customer.
Regional rights. Under laws such as GDPR, UK GDPR, and U.S. state laws (e.g., CCPA/CPRA), you may have rights to access, correct, delete, port, and restrict processing, and to object or complain to a regulator. We honor these as applicable.
9. Security
Encryption in transit (TLS 1.2+) and at rest (AES-256), tenant isolation at the database layer, role-based access controls, and least-privilege production access. Data is hosted in the United States. No method is perfectly secure, but we work continuously to protect your information and maintain SOC 2 controls.
10. International data transfers
Pharos hosts data in the United States. If you access the Service from outside the U.S., your information will be processed in the U.S., where data-protection laws may differ. Where required, we rely on appropriate safeguards for cross-border transfers.
11. Changes to this policy
We may update this policy from time to time. On material changes we update the “Last updated” date and, where appropriate, provide additional notice. Continued use after an update constitutes acceptance.
12. Contact
Questions? Contact ProFusion Home Solutions at legal@profusion.solutions.