Privacy Policy

Last updated October 15, 2026

Shim is software that small service businesses use to manage clients, estimates, invoices, and scheduling, and to send their clients estimates, invoices, and appointment messages. This policy explains what information Shim holds, how it is used, who it is shared with, and the choices you have.

Who we are

Shim is operated by Trailbound Holdings LLC, a Colorado limited liability company (“we” or “us”). You can reach us at travis@highlandhandy.com.

This policy covers two groups of people:

• Business users: the service businesses that sign up for Shim, and the people who sign in to Shim for them.
• Clients: the customers of those businesses. A business enters its clients’ details into Shim, and we hold and use those details on the business’s behalf.

What we collect

• Business users’ account details: your name, email address, and sign-in details, and your business’s name, phone number, and email address.
• Client details that businesses enter: client names, phone numbers, email addresses, and service addresses.
• Job records, estimates, and invoices: the work a business records, including line items, prices, notes, appointment times, and photos taken on the job.
• Message logs: the texts and emails Shim sends for a business, who they went to, when they were sent, and whether they were delivered. We also record texts sent to Shim’s texting number, including STOP and HELP requests.
• Technical information: when you use the Shim app, our hosting providers keep standard service logs, which can include your IP address, browser type, and the time of a request. We use these only to keep Shim running and secure.

This website does not use cookies, analytics, or advertising trackers. The Shim app stores a sign-in token in your browser so you stay signed in.

How we use it

We use information only to provide the Shim service. That includes:

• storing and showing each business its own clients, jobs, estimates, invoices, and schedule;
• sending clients the estimates, invoices, and appointment messages their service business asked Shim to send;
• telling a business when a client accepts an estimate, asks a question, or a message could not be delivered;
• honoring opt-out requests, such as a reply of STOP to a text;
• keeping Shim secure, fixing problems, and answering support requests; and
• meeting our legal obligations.

We do not use client information to market to clients, and Shim does not send marketing or promotional texts.

Sharing

We share information only with the service providers we need to run Shim, and only so they can perform that service for us:

• Amazon Web Services, for hosting, file storage, and email delivery;
• Supabase, for our database and sign-in; and
• Twilio, for text message delivery.

We never sell information, rent it, or share it with anyone for their own marketing. A business’s information is visible only to that business, not to other businesses that use Shim.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We may also disclose information when the law requires it, such as in response to a valid court order.

Retention

We keep a business’s account details and the client records, jobs, estimates, invoices, and message logs it creates for as long as the business’s account is open, so the business can look back at past work. Opt-out records are kept so that we keep honoring them.

When a business closes its account, we delete its information within 90 days, unless we must keep some of it longer to meet a legal obligation or resolve a dispute. Copies in our providers’ backups are removed as those backups expire.

Security

Information is encrypted in transit with HTTPS and encrypted at rest by our hosting providers. Each business’s records are kept separate, and only people signed in to that business’s account can see them. No system is perfectly secure, but if a breach affects your information, we will notify you as the law requires.

Your choices and requests

• Business users can see and correct most of their information in the Shim app. To ask for a copy of your information, or to have your account and its information deleted, email us.
• Clients: your service business decides what it records about you, so you can ask the business directly to see, correct, or delete it. You can also email us, and we will work with the business to respond.
• Texts: reply STOP to any text from Shim’s number to stop receiving texts. See the SMS Terms.

We answer requests within 30 days and may need to confirm your identity first.

Children

Shim is for businesses and is not directed to children under 13. We do not knowingly collect information from children.

Changes

If we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will also email business users.

Contact

Trailbound Holdings LLC
Colorado
travis@highlandhandy.com