Privacy policy

About this policy

Goliath Marketing operates Simple PDF, a PDF editing add-on for the ServiceM8 Online Dashboard. This policy explains how the add-on handles information. It is separate from the policies for our marketing website and other tools.

Contact michael@goliathmarketing.io with privacy questions. The business using the add-on is responsible for the information it chooses to include in documents and for authorising its staff to use that information.

The add-on is currently in private testing. Publishing this policy does not mean that the add-on is approved for the ServiceM8 Add-on Store.

Information we handle

When a business connects its ServiceM8 account, the add-on receives OAuth credentials and uses the authorised account identity. When a staff member opens the editor from a job, it receives account, staff and job identifiers needed to open that job's workspace. It retrieves job details and PDF attachment metadata as needed, downloads a selected attachment when requested, and uploads a finished PDF when a user chooses to save it to the job.

The add-on stores reusable templates, working drafts, document names, revision information and delivery records. PDFs may contain customer names, addresses, contact details, photographs, signatures or other information included by the business. Please include only information needed for your work.

We use session identifiers, installation records, request timing and limited diagnostics to maintain connections, check access and investigate failures. Hosting providers may process network information such as IP addresses while operating the infrastructure. Support messages contain information you choose to send us. Do not send passwords or authentication secrets in a support email.

How information is used

Information is used to operate the editor, retain working copies, reuse templates, save PDFs to the selected job, maintain authorised access, protect the service and provide support.

The current add-on does not use document content for advertising, AI model training or an AI editing service. We do not sell document content or use it to build marketing audiences.

Service providers and overseas processing

ServiceM8 processes account and job information under its own policies. Railway provides hosting and persistent storage for this add-on. Documents are also processed on your device when you open and edit them.

The current application and persistent volume use Railway's us-west2 region in the United States. Information may therefore be stored or processed outside your country. ServiceM8 and infrastructure providers may operate in additional locations under their own service arrangements. Contact us if you need details before using the add-on for documents subject to location restrictions.

Authorised Goliath Marketing personnel may access information where needed for operation, support or security. Information may also need to be disclosed where required by applicable law.

Storage and security

Saved documents and associated records are stored in the add-on's server database. The application checks account and job access. OAuth credentials are encrypted by the application, and connections to the hosted application use HTTPS.

The backup utility encrypts an archive when a backup is created. This does not mean that each PDF is individually encrypted by the application or that backups run automatically. No system can guarantee absolute security.

Retention and disconnection

Working drafts, reusable templates and delivery records remain stored so that a business can return to its work. The current private release does not have an automatic document-expiry schedule. Archiving a template hides it from normal selection; it is not permanent deletion.

Disconnecting or removing the add-on does not, by itself, delete copies already attached to jobs in ServiceM8. Those copies remain subject to the business's ServiceM8 account and ServiceM8's data-handling arrangements. Do not assume that disconnecting automatically deletes the add-on's separately stored drafts or templates.

If you want stored information removed or exported, contact michael@goliathmarketing.io. We will verify the request and explain the applicable process, including any information that needs to be retained for legal or security reasons and any relevant backup limitations. The current private release does not provide a self-service account deletion screen or a fixed automatic backup-expiry schedule.

Your requests and privacy concerns

Contact michael@goliathmarketing.io to request access, correction, export or deletion, or to raise a privacy concern. Tell us which business and information the request concerns, without including passwords or unnecessary customer documents.

We will verify that a requester is authorised to act for the relevant business before disclosing or changing its information. We will review privacy concerns and respond through the contact details provided. Rights and obligations depend on applicable law. If you remain concerned after our response, you may be able to contact the privacy regulator in your jurisdiction.

Payments

The PDF editor does not collect card details. Any subscription offered through ServiceM8 is handled through ServiceM8's billing arrangements. We may use subscription status and billing-related support information where needed to operate and support the add-on. The add-on is not used to collect payments from your customers.

Changes to this policy

This policy is effective from 17 October 2026. We will update it when the add-on's data handling changes and communicate material changes as required.