Archived version effective October 19, 2026 (version 2026-10-19). This copy never changes; agreements that incorporate version 2026-10-19 are governed by it. The current version is at northreeve.com/privacy. All versions: northreeve.com/legal/archive.

← Back to NorthReeve

Privacy Policy

Last updated: October 15, 2026

Related: Terms of Service Trust and Commitments Data Processing Addendum Refund Policy

NorthReeve Software LLC ("NorthReeve", "we", "us", or "our") operates the websites www.northreeve.com, serviceaven.com, getlibrepbx.com, and the other websites that link to this Policy (together, the "Site") and provides software products and services (the "Services"). The Services include the hosted products described in the Product Schedules of our Terms of Service, currently ServiceAven (formerly Glide by Blade), a white-label field-service platform, and GetLibre PBX, a hosted business phone system, as well as custom software developed for specific clients under a statement of work. This Privacy Policy explains what personal information we collect, how we use, share, and protect it, and the choices and rights you have.

Two very different roles. First, we act as a business (controller) for the marketing Site, its lead form, and our own dealings with prospects and customers. Second, when a customer uses one of our products, we act only as a service provider (processor) that handles data on that customer's behalf and under its instructions. This Policy covers our controller role in full. Our processor role is summarized in the section "How we handle customer data in our products" and governed in detail by the Terms of Service and Data Processing Addendum that each customer accepts. If you are a customer of a business that uses software NorthReeve provides, that business (not NorthReeve) controls your data; please direct privacy requests to that business.

1. Personal information we collect

We collect the information you choose to give us, a small amount of technical information created automatically when any website is used, and, in our processor role, the information customers put into our products.

Information you provide through the Site

When you submit our contact or walkthrough form, we collect the fields you enter, which may include:

Information collected automatically

When you submit the form, our form server records the date and time of the submission and the IP address the request came from, so we can process the lead and guard against abuse. Our web server and hosting provider keep standard server logs (for example, requested URLs, IP address, and browser user-agent) for security and reliability. Each of our websites uses Google Analytics, with a separate Analytics property for each website, to help us understand Site traffic. Google Analytics sets cookies and collects usage data such as pages viewed, approximate location derived from IP address, device and browser type, and referring URLs. On www.northreeve.com we also use the Google Ads tag to count walkthrough requests that come from our ads. Google collects this information directly from your browser. See "Cookies, analytics, and third parties" and "Your privacy rights" below.

Information collected in our processor role (data in our products)

When a customer uses one of our products, we process data the customer and its users enter or generate. What that includes depends on the product:

We process this data only to provide the Services, as described below.

2. How we use personal information

As a controller, we use the information above to:

We do not sell your personal information. We have turned off Google signals and ad personalization for the Google tags on our websites, so we do not use them to build advertising profiles about you or to target ads to you on other websites. Third parties whose services run on our websites, such as Google, may still collect information about your visit directly from your browser and use it as described in their own privacy policies; see "Cookies, analytics, and third parties." We do not use sensitive personal information for the purpose of inferring characteristics about you.

3. How we share personal information

We share information only as needed to run our business and only with providers who are bound to protect it and to use it solely to perform services for us. The categories of recipients are:

Category of recipientPurpose
Cloud hosting providerRuns the Site, the form server, and product infrastructure
Email delivery providerDelivers lead notifications, account email, and, within our products, customer email features
Analytics and ad measurement provider (Google)Measures Site traffic and usage, and counts walkthrough requests that come from our ads
Telephony and messaging providersProvides phone and two-way SMS features of our products under the customer's own account
Payment processor and accounting integrationProcesses card and ACH payments and syncs with QuickBooks Online for customers who enable it
Professional advisors and authoritiesLegal, accounting, and compliance needs; disclosures required by law or to protect rights, safety, and property

If NorthReeve is ever involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy. We do not disclose personal information to third parties for their own independent marketing. Separately, the third-party services that run on our websites collect information directly from your browser, as described in "Cookies, analytics, and third parties."

The specific services we use today

For full transparency, these are the external services the Site and our products actually send data to, what goes to each, and why, organized by product. One point of direction matters here: we do not hand your data to these companies as a business arrangement of ours. Data reaches a provider only when you use a feature that provider powers, and only the data that feature needs to work, passing through on your behalf to perform it: a payment processor sees payment details because you took a payment, a telephone carrier sees dialing information because you placed a call. If you do not use the feature, the provider gets nothing. None of these providers may use the data for their own purposes, and we never sell your data or your customers' data to anyone. Our websites are the one place where a provider receives information simply because you visit: Google receives information about your visit, as described in "Cookies, analytics, and third parties."

Site-wide and company-wide services

ServiceWhat is sharedWhy
Vultr (cloud hosting)All Site and product data, on servers we control; each customer runs on isolated infrastructureHosting the Site and our products
Google AnalyticsUsage events from each of our websites, each sent to its own Analytics property (website visits only, never data from inside our products)Measuring website traffic
Google Ads (www.northreeve.com only)When you send a walkthrough request, the tag reports it to Google with Google's advertising cookie identifiers, so Google can tell us whether it came from one of our ads; never loaded when your browser sends Global Privacy ControlMeasuring which ads lead to walkthrough requests
SMTP2GOEmail addresses and message content for mail we send, including lead notifications and account emailEmail delivery

ServiceAven (formerly Glide by Blade)

ServiceWhat is sharedWhy
Google Maps PlatformService addresses and coordinatesMaps, routing, address lookup, lawn measurement imagery, and local weather for job records
Intuit (QuickBooks)Payment card and bank details entered by customers go directly to Intuit; we store only a reference token. Invoice and payment records sync when a customer enables itPayment processing and bookkeeping
SMTP2GOEmail addresses and message content for tenant email campaignsEmail delivery
Telecommunications carrier (the customer's own carrier account)Phone numbers, call routing, and text message contentBusiness phone and text message service
DeepgramCall recordings and voicemail audio, where the customer enables transcriptionSpeech to text and generated voice prompts
OpenAIShort text excerpts needed for a requested AI feature (for example drafting a letter or planning a route); their API terms prohibit training on this dataOptional AI assistance features
Wasabi (object storage)Documents, photos, and recordings, encrypted, in per-customer bucketsFile and recording storage

GetLibre PBX

ServiceWhat is sharedWhy
Telecommunications carrier (the customer's own carrier account)Phone numbers, call signaling and audio, text message content, and registered 911 locationsCalls, texts, and 911 service
DeepgramCall recordings and voicemail audio, where the customer enables transcription; text of voice promptsSpeech to text and generated voice prompts
AnthropicCall transcript text, where the customer enables call summaries or call screeningOptional AI call summaries and screening
OpenAIShort audio or text excerpts needed for a requested AI feature, used as a backup speech service; their API terms prohibit training on this dataOptional AI assistance features
Wasabi (object storage)Call recordings and voicemail, encryptedRecording and voicemail storage
SMTP2GOEmail addresses and message content for voicemail-to-email, 911 notifications, and account emailEmail delivery

Custom software built under contract for a specific client uses only the services agreed with that client, which are documented in that client's own agreement rather than on this page. Optional integrations a customer connects themselves (for example Stripe, Authorize.net, or Braintree as an alternative payment processor) receive data only when that customer enables them. We will keep these lists current as services are added or removed.

4. How we handle customer data in our products (our processor role)

Our products are business software. Any data that a customer and its users create inside a NorthReeve product belongs to the customer. For that data, NorthReeve acts as a service provider or processor on the customer's behalf, and we handle it only to provide and support the Services and according to the customer's agreement and instructions, not for our own marketing and not to build our own profiles. We do not retain, use, or disclose that personal information for any purpose other than the specific business purposes set out in the customer's agreement, and we do not sell it or combine it with data from other sources except as permitted by law to provide the service. Where a product is white-label, such as ServiceAven, the people a customer serves see the customer's brand, not ours. The full terms of this relationship, including sub-processors, security measures, breach notification, and assistance with data-subject requests, are in the Data Processing Addendum.

5. Cookies, analytics, and third parties

Our websites use Google Analytics, and www.northreeve.com also uses the Google Ads tag. These are third-party services. When you visit, Google may set cookies or use similar technologies and collect information about your visit directly from your browser, such as the pages you view, your IP address and approximate location, your device and browser type, the page that referred you, and, on www.northreeve.com, whether you sent a walkthrough request, so Google can tell us whether it came from one of our ads. Google uses that information to provide these services to us and handles it under Google's Privacy Policy (see also how Google uses information from sites that use its services).

We have set these tags to limit what is done with that information: Google signals and ad personalization are off, so we do not use them to build advertising profiles about you or to target ads to you on other websites. We do not sell your personal information to Google or to anyone else.

Your choices: you can block or delete cookies in your browser settings, and you can opt out of Google Analytics on all websites with Google's browser add-on. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of sale and sharing: the Google Ads tag does not load and advertising cookies are not set. Basic website analytics continue.

6. Retention

We keep lead and account information for as long as we reasonably need it to respond to you, to serve you if you become a customer, and to meet legal, tax, and accounting obligations, after which we delete or de-identify it. Server logs and analytics data are kept for a limited period for security, reliability, and measurement. Data inside our products is retained for the term of the customer's agreement and then returned or deleted as described in the Terms of Service and Data Processing Addendum.

7. Your privacy rights (US state residents)

A growing number of US states have comprehensive consumer privacy laws. Depending on your state of residence, you may have some or all of the following rights with respect to the personal information we hold as a controller:

These rights are available, subject to each law's specifics and exceptions, to residents of states including California (CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Nebraska, Indiana, Tennessee, Minnesota, Maryland, Rhode Island, Kentucky, and Florida, and residents of other states as their laws take effect. Where we act only as a service provider or processor for data inside a customer's product, we will refer your request to that customer and assist them in responding.

Do Not Sell or Share, and Global Privacy Control

We do not sell your personal information, and we do not use the Google tags on our websites for cross-context behavioral advertising (ad personalization is off). Google may still collect information about your visit as described in "Cookies, analytics, and third parties." We recognize the Global Privacy Control (GPC) browser signal as a valid opt-out of sale and sharing: when your browser sends it, the Google Ads tag does not load. You can also opt out by email, as described under "How to exercise your rights." If our practices change, we will update this Policy and provide a clear "Do Not Sell or Share My Personal Information" link.

Sensitive information and profiling

We do not collect Social Security numbers, financial account login credentials, precise geolocation of visitors, or other sensitive categories through the Site, and we do not use personal information for automated profiling that produces legal or similarly significant effects about you. Any GPS or live-location data in our products relates to a customer's own on-duty crews, where the product includes that feature, and is processed for that customer under its control.

How to exercise your rights

To exercise any right, email forms@northreeve.com or sales@northreeve.com with your request and the state you reside in. We will verify your request, usually by confirming information we already hold, and respond within the time your state's law requires (generally 45 days, extendable where permitted). You may use an authorized agent where the law allows; we may require proof of the agent's authority. We will not discriminate against you for exercising your rights. If you are an end user of a business that uses our software, please contact the business you do business with, since that business controls its own data.

8. Security

Traffic to the Site and our products is encrypted in transit with HTTPS and TLS. Data inside our products is protected with access controls, role-based access, and nightly encrypted backups. Access to lead and account information is restricted to people who need it to do their jobs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable and appropriate measures to protect personal information.

9. Children

The Site and our products are business tools intended for use by companies and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

10. International visitors

We operate in the United States, and our providers may process information in the United States. If you contact us from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where the GDPR or similar laws apply to our controller activities, we rely on your consent, on our legitimate interest in responding to your request and running our business, and, once you become a customer, on performance of our contract with you; where we rely on consent, you can withdraw it at any time.

11. Changes to this policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date above, and material changes will be reflected on this page. Continued use of the Site after an update means you accept the revised Policy.

12. Contact

Questions or requests about this Policy or your information: forms@northreeve.com or sales@northreeve.com. NorthReeve Software LLC is based in the Commonwealth of Massachusetts, USA.