Legal
Privacy Policy
Last updated: August 27, 2026
1. Who we are
Excern (operated by JMJ Crown Inc, “we,” “us,” or “our”) is an operations platform for dumpster rental, hauling, and waste-service businesses. This policy explains what information we collect through the Excern website and mobile app, how we use it, and the choices you have. It applies to business operators who use Excern to run their company and to their team members who sign in with operator-provisioned accounts.
2. Information we collect
Account information. Name, email address, phone number, company name, role, and login credentials (passwords are stored as one-way hashes, never in plain text).
Business records you enter. Customer contacts, jobsite addresses, work orders, quotes, invoices, hauler and vendor records, notes, and uploaded documents such as hauler invoices and scale tickets. This data belongs to your business — we process it to provide the service.
Communications. If your business uses Excern’s communication features, we process SMS messages, emails, call metadata, voice memos, voicemails, and, where your business enables connected calling, call audio recordings. These communications are sent, received, and stored with the related business record using providers such as Twilio and connected email services.
Photos and files. The mobile app can use your device camera and photo library only when you choose to attach a photo (for example, a scale ticket or jobsite photo). We never access your camera or library in the background.
Location. When you use an operations map or navigation feature, the mobile app may use your precise location while the app is open to show your position and help you navigate to an assigned jobsite. Excern also processes jobsite, truck, driver, facility, and asset coordinates that your business stores or receives from its connected fleet providers.
Payment information. Card payments are processed by Stripe. Full card numbers never touch Excern’s servers; we store only the last four digits, card brand, and Stripe’s tokens.
Usage and device data. Standard server logs (IP address, browser/device type, pages requested), push-notification tokens, app version, and limited diagnostic data used for security, notifications, debugging, and capacity planning.
3. How we use information
- To provide, maintain, and improve the Excern service
- To send and receive messages, calls, and emails your business initiates
- To process payments and generate invoices through Stripe
- To secure accounts, prevent abuse, and meet legal obligations
- To support you when you contact us
4. What we do NOT do
- We do not sell your data or your customers’ data — to anyone, ever
- We do not use your business records for advertising
- We do not share data across Excern customers — each business’s data is isolated
5. Service providers
We rely on a small set of processors to run the service: cloud hosting (Amazon Web Services), payments (Stripe), telephony and SMS (Twilio), transactional email (Postmark), and maps/geocoding (Google Maps, when enabled). Each receives only what it needs to perform its function under its own data-processing terms.
6. Data retention and deletion
We keep your data for as long as your account is active. If you close your account, we will delete or anonymize your business’s data within 90 days, except records we are legally required to retain (for example, payment and tax records). You can request export or deletion at any time by emailing us.
7. Security
All traffic is encrypted in transit (TLS). Passwords are hashed. Access to production systems is restricted and logged. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you promptly.
8. Your choices
You can update your account information in Settings; control camera, photo, microphone, location, and notification permissions in your device settings; and contact us to access, correct, export, or delete your data. Features that require a permission may be unavailable when that permission is disabled.
9. Children
Excern is a business tool and is not directed at children under 13. We do not knowingly collect information from children.
10. Changes and contact
We will post any changes to this policy on this page and update the date above. Questions or requests: [email protected].