BackPrivacy Policy
Last Updated: 11 March 2026
Vac OPS is a scheduling and dispatch management platform operated by Creme City Solutions LLC ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform and related services, including SMS notifications. By accessing or using Vac OPS, you acknowledge that you have read and understand this Privacy Policy. Where we rely on consent as a legal basis for specific processing activities (such as SMS messaging), we collect that consent separately at the point of collection.
1. Information We Collect
Personal Information You Provide:
- Name, email address, and phone number
- Company or organization name
- Job site addresses (typed street addresses you enter when creating or requesting jobs)
- Job request details, scope of work, and scheduling preferences
- Account credentials and authentication data
- Photos and files you upload (e.g., job attachments, tool photos, item request images)
Precise Geolocation (Sensitive Data):
Certain features, such as the "Near Me" location sorting and the interactive map view, request access to your device's GPS location through your browser. This data is used client-side only to calculate distances and center the map on your position. We do not transmit or store your precise device geolocation on our servers. Your browser will ask for your permission before sharing your location, and you can revoke this permission at any time through your browser settings. Under California (CCPA/CPRA), Virginia (VCDPA), and Colorado (CPA) privacy laws, precise geolocation is classified as sensitive personal information.
Operator Truck Location:
For field operators, truck location coordinates may be stored and displayed on the dispatch map to facilitate job assignment and routing. These coordinates are entered or updated by dispatchers and managers, not collected automatically from operator devices.
Information Collected Automatically:
- Login timestamps and session data
- Pages and features accessed within the platform
- Device type, browser information, and IP address
- Cookies and similar technologies for session management (see Section 7)
2. Categories of Sources
We collect personal information from the following categories of sources:
- Directly from you: When you create an account, submit job requests, provide phone numbers, upload files, or communicate with us.
- Authentication providers: When you sign in using Google or Microsoft, we receive your name, email address, and profile identifier from the identity provider.
- Your device and browser: Session data, IP address, device type, and (with your permission) precise geolocation.
- Third-party service APIs: Mapping and routing services (Google Maps, PC Miler) provide address geocoding and travel-time calculations based on addresses you enter. Weather services provide forecast data for job sites.
- Your employer or contracting company: If your account is created by an administrator on your behalf, they may provide your name, email, and phone number.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Process and manage your job requests and scheduling
- Send transactional SMS notifications about job status (confirmations, dispatch alerts, scheduling changes) when you have opted in
- Communicate about your account, services, and platform updates
- Coordinate between customers and field operators
- Calculate travel times and routes for dispatch optimization
- Improve the platform's functionality and user experience
- Maintain and monitor the security of the platform
- Comply with legal obligations
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contractual Necessity: To fulfill our obligations under our service agreement with you, including processing job requests, scheduling, and dispatch.
- Consent: Where you have provided specific, voluntary consent, such as opting in to SMS notifications. You may withdraw consent at any time (see Section 5).
- Legitimate Interest: To improve our services, maintain platform security, and communicate with you about your account.
- Legal Obligation: To comply with applicable laws, regulations, and legal processes.
5. SMS/Text Messaging
By providing your phone number and opting in via the Vac OPS Customer Portal, you consent to receive transactional SMS/text messages from Vac OPS (operated by Creme City Solutions LLC). Below are the details of our SMS program:
- Opt-In: You opt in to SMS notifications by accepting the SMS consent prompt in the Vac OPS Customer Portal. Consent is collected electronically and recorded with a timestamp. By opting in, you agree to our Privacy Policy and Terms and Conditions.
- Types of Messages: Job confirmations, truck dispatch notifications, and scheduling updates related to your active job requests.
- Message Frequency: Message frequency varies based on your job activity. You will typically receive 1-5 messages per active job request.
- Message and Data Rates: Message and data rates may apply. Check with your mobile carrier for details.
- Opt-Out: You may opt out of SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a one-time confirmation message and no further SMS messages will be sent.
- Help: For assistance, reply HELP to any message, or contact us at dispatch@cremecitysolutions.com or (414) 877-7794.
- No Purchase Required: Consent to receive SMS messages is not a condition of purchasing any goods or services from us.
- Compatible Carriers: Our SMS service is compatible with all major US wireless carriers. Carriers are not liable for delayed or undelivered messages.
- No Sharing for Marketing: We do not sell, share, or disclose your phone number or SMS consent data to third parties for their marketing or advertising purposes. Phone numbers and consent data are shared only with our SMS service provider (Twilio) for the sole purpose of delivering messages on our behalf.
8. Do Not Track and Opt-Out Preference Signals
Some web browsers transmit "Do Not Track" (DNT) signals. Because there is no uniform standard for how DNT signals should be interpreted, Vac OPS does not currently respond to DNT signals.
We recognize the Global Privacy Control (GPC) signal as a valid opt-out preference signal under the CCPA/CPRA. Because we do not sell personal information or share it for cross-context behavioral advertising, a GPC signal does not change how we process your data, as our practices already align with the opt-out the signal requests.
9. Data Security
We implement a range of security measures to protect your personal information:
- Industry-standard encryption (TLS/SSL) for all data in transit
- Data at rest is stored in secured, access-controlled databases
- Access to personal information is restricted to authorized personnel on a need-to-know basis
- Regular security reviews of our systems and processes
- Authentication via trusted third-party identity providers (Google, Microsoft)
While we strive to protect your information using commercially reasonable safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Data Breach Notification
In the event of a data breach that compromises the security, confidentiality, or integrity of your personal information, we will:
- Investigate and contain the breach without unreasonable delay
- Notify affected individuals in writing (via email or postal mail) without unreasonable delay and no later than required by applicable state law (e.g., Wisconsin Stat. 134.98 requires notification within 45 days of discovery)
- Notify the appropriate state attorney general or regulatory authority as required by law
- Provide details of the breach including: the types of information involved, the date or estimated date of the breach, a description of the steps we are taking to investigate and mitigate, and contact information for further inquiries
- Offer identity theft protection services when required by law or when sensitive personal information (such as Social Security numbers or financial account data) is compromised
We maintain an incident response plan that is reviewed and updated periodically. If you believe your information has been compromised, please contact us immediately at dispatch@cremecitysolutions.com.
11. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. The following table outlines our retention periods by category:
| Category of Data | Retention Period |
|---|---|
| Account data (name, email, phone, credentials) | Duration of active account + 30 days after account deletion request |
| Job records and operational data (including typed job site addresses) | 7 years (regulatory and business compliance) |
| Server logs and session data | 90 days |
| SMS consent records | Duration of consent + 5 years after opt-out (telecommunications regulations) |
| Uploaded files and photos | Duration of active account or as long as the associated job record is retained |
| Precise geolocation (device GPS) | Not stored on our servers; used client-side only in your browser session |
| Database backups | Rotated every 30 days |
You may request deletion of your account data by contacting us using the information in Section 22.
12. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Opt-Out of SMS: Opt out of SMS communications at any time by replying STOP.
- Data Portability: Request a copy of your data in a commonly used, machine-readable format.
- Withdraw Consent: Withdraw your consent for data processing where consent is the legal basis.
To exercise any of these rights, contact us using the information in Section 22. We will respond to your request within the time required by applicable law. See Section 13 and Section 14 for state-specific rights and processes.
13. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following rights regarding your personal information:
- Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we have shared it.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., data needed for legal compliance or to complete a transaction).
- Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
- Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. If these practices change in the future, we will provide an opt-out mechanism and update this policy.
- Right to Limit Use of Sensitive Personal Information: Where we collect sensitive personal information (such as precise geolocation), you have the right to limit its use and disclosure to purposes that are necessary to perform the services you request. Because we use precise geolocation only client-side in your browser (not stored or transmitted to our servers), and use it solely to provide the mapping features you access, our current practices align with this right.
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
How to Submit a Request
- Email us at dispatch@cremecitysolutions.com with the subject line "California Privacy Request."
- Call us at (414) 877-7794.
Verification
To protect your privacy, we will verify your identity before processing your request. We may ask you to confirm information associated with your account (such as your email address or phone number). If we cannot verify your identity, we may decline your request.
Authorized Agents
You may designate an authorized agent to submit a request on your behalf. The agent must provide written authorization signed by you, and we may require you to verify your identity directly with us. To submit a request through an authorized agent, email us with the agent's written authorization attached.
Opt-Out Preference Signals
We recognize the Global Privacy Control (GPC) signal. Because we do not sell or share personal information for cross-context behavioral advertising, our data practices already align with the opt-out that GPC requests.
We will respond to verifiable consumer requests within 45 days of receipt, as required by law. If we need additional time (up to an additional 45 days), we will notify you of the extension and the reason for it.
14. Additional State Privacy Rights
If you are a resident of Colorado, Virginia, or Connecticut, you may have additional privacy rights under your state's privacy law, including:
- The right to access, correct, and delete your personal data
- The right to data portability
- The right to opt out of the sale of personal data, targeted advertising, and profiling (we do not engage in these activities)
We will respond to your request within 45 days, as required by applicable state law. If we need additional time, we will notify you.
Right to Appeal
If we decline your privacy request, you have the right to appeal our decision. To appeal, email us at dispatch@cremecitysolutions.comwith the subject line "Privacy Appeal." We will respond to your appeal within the time required by your state's law (typically 45-60 days). If your appeal is denied, we will provide information on how to contact your state's attorney general to file a complaint.
15. Children's Privacy
Vac OPS is a business-to-business platform intended for use by adults in the course of commercial operations. We do not knowingly collect personal information from children under the age of 13, as defined by the Children's Online Privacy Protection Act (COPPA). If we become aware that we have inadvertently collected information from a child under 13, we will take steps to delete that information promptly.
As a product rule, Vac OPS is not intended for use by individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us using the information in Section 22.
16. Workforce and Operator Notice
Vac OPS is used by dispatchers, field operators, managers, and other personnel in the course of their employment or contracting relationships. If you are an employee or contractor whose employer or contracting company uses Vac OPS, the personal information we process about you (such as your name, contact information, qualifications, and work schedule) is collected and used for the purpose of providing dispatch and scheduling services to your employer or contracting company.
Workforce-specific privacy information, including details about what data is collected in the employment context and how it is used, is provided separately during onboarding by your employer or contracting company. California employees may have additional rights under the CPRA; please contact your employer's HR department or us directly for information.
17. Notice at Collection
In accordance with the CCPA/CPRA, we provide a Notice at Collection at or before the point where we collect your personal information. This notice is presented during account registration and when you opt in to SMS notifications. It includes:
- The categories of personal information being collected
- Whether any categories are classified as sensitive personal information
- The purposes for which the information will be used
- Whether the information is sold or shared (we do not sell or share for advertising)
- The applicable retention periods (see Section 11)
- A link to this Privacy Policy for complete details
18. Email Communications (CAN-SPAM)
We comply with the CAN-SPAM Act of 2003 for all commercial email communications. Our email practices include:
- Transactional emails (job confirmations, dispatch notifications, account alerts, password resets) are not promotional in nature and are sent as a necessary part of the service you have engaged with. These do not require an unsubscribe link under CAN-SPAM.
- Marketing or promotional emails, if any, will clearly identify the sender, include our physical mailing address, and provide a clear and conspicuous mechanism to unsubscribe. We will honor unsubscribe requests within 10 business days.
- We will not use deceptive subject lines or misleading header information in any email communication.
- We do not sell, rent, or share email addresses with third parties for their own marketing purposes.
To opt out of marketing emails, click the "Unsubscribe" link included in any promotional email, or contact us at dispatch@cremecitysolutions.com.
19. Third-Party Links and Services
Vac OPS integrates with and may contain links to third-party services that are not operated by us, including Google Maps, Google Sign-In, Microsoft authentication, Twilio, and routing services. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party service you access through or in connection with our platform. This Privacy Policy applies solely to information collected and processed by Vac OPS.
20. Accessibility
We are committed to making Vac OPS accessible to all users, including individuals with disabilities. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards and the Americans with Disabilities Act (ADA). Our ongoing accessibility efforts include:
- Providing keyboard-navigable interfaces
- Using semantic HTML structure and ARIA attributes where appropriate
- Maintaining sufficient color contrast ratios for text and interactive elements
- Supporting screen readers and other assistive technologies
- Periodic accessibility audits and remediation of identified issues
If you encounter any accessibility barriers while using Vac OPS, please contact us at dispatch@cremecitysolutions.com so we can work to address the issue promptly.
21. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our platform with a revised "Last Updated" date at the top of the page. We encourage you to review this policy periodically. Your continued use of Vac OPS after changes are posted constitutes acknowledgment of the updated policy.
22. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, need assistance with our SMS program, or want to submit a privacy request, please contact us:
See also our Terms and Conditions