Privacy Policy

Effective September 30, 2026

Malachite Marketing LLC (“Malachite,” “we,” “us”) is responsible for the personal information this policy describes. We sell internet, TV and wireless service door to door as an authorized sales partner of carriers such as AT&T. This policy explains what we collect, why, who receives it, how long we keep it, and the choices you have.

It covers:

• Customers and prospects: people we meet at the door, call or text, and people who use our offer, welcome, referral and review pages.
• Website visitors: malachite.eco and join.malachite.eco.
• Applicants: people who apply to join Malachite.
• Personnel: sales representatives, managers and staff who use the Malachite app on the web, iPhone or iPad (“the App”). The App is for authorized Malachite personnel only.

Each carrier has its own privacy policy for the service you buy from it. Once your order reaches the carrier, the carrier’s policy governs what it does with your information.

1. Customers and prospects

What we collect

• Contact and order details: name, service address, phone, email, the products you discuss or order, order and install status, and the carrier’s account or order number.
• Carrier account security details: if you give them to your representative, your AT&T account passcode and security answer. Our account managers use them to verify your account with AT&T when they help you with your order or service. We store them encrypted. Only your representative, your account manager, our finance and operations staff, and the managers over your representative can read them. If a call summary contains them, we remove them before we save it.
• Visit records: that a representative knocked on your door, the date and time, the outcome (for example “not home,” “not interested” or “no soliciting”), and notes the representative writes.
• Public and licensed property data: addresses, building outlines, owner names and sale history from public property records (such as Florida’s statewide parcel records), and service-availability data published by the FCC and carriers. We use these to decide which homes to visit.
• Messages and calls: texts you send to or receive from our business line, call logs (number, time, length), and a short summary of the call produced by our phone provider. We do not store call recordings or transcripts.
• Forms you fill in: on our offer pages, your name, phone, address, preferred call time, the services you are interested in, and whether you asked for texts about future offers. We store the consent wording you saw and when you agreed.
• Link activity: links we text or email you carry a code. When you open one, we record that it was opened, when, and how many times. We use this only to know whether our message reached you.
• Reviews: your rating, name or initials, comments, and any private feedback you choose to send.
• Gift cards: if you qualify for a welcome credit or a retention offer, your name, email and the amount, so the gift card can be sent.

We do not collect your Social Security number, date of birth, bank account or payment card. Carriers handle credit checks and billing in their own systems.

How we use it

• To present offers, place and follow your order, and help with installation and your account.
• To contact you about your order, appointment or question, by call, text or email.
• With your consent, to text you about offers and price changes.
• To honor “do not knock” requests and avoid visiting you again.
• To pay our representatives correctly and check orders against carrier reports.
• To publish reviews you submit for publication.
• To prevent fraud, secure our systems, and meet legal and contract obligations.

2. Text messages and calls

We text and call from our business line, (904) 867-7776, through our phone provider, Quo.

• About your order or request: after you ask for information, order, or book a call, we may text you about it, including install follow-ups and a request to review your representative.
• Offers: we send texts about offers and price changes only to numbers that agreed to receive them, for example by checking the box on our offer form. Agreeing is not a condition of any purchase.
• Frequency and cost: message frequency varies. Message and data rates may apply.
• Opting out: reply STOP (or UNSUBSCRIBE, CANCEL, END or QUIT) to any text. We confirm once and stop. You can also call or email us.
• Help: reply HELP or INFO and we answer: “Malachite. Call or text (904) 867-7776, or email hello@malachite.eco. Reply STOP to opt out.”
• Timing: automated texts go out only during daytime hours.

We do not sell or share mobile numbers or text-messaging consent with third parties or affiliates for their marketing. The service providers listed in section 7 receive them only to deliver our messages.

3. Website visitors

• Our web hosts (Netlify for malachite.eco, Google Firebase for the App and join.malachite.eco) record standard request logs, including IP address, browser and pages requested.
• We read your IP address to limit abuse of our forms. We store it only as a one-way scrambled value.
• On pages with an address field, Google Maps suggests addresses as you type. Google receives what you type and your device’s connection details under Google’s privacy policy.
• We do not use advertising cookies, tracking pixels, retargeting, or analytics services such as Google Analytics.

4. Applicants

When you apply, we collect your name, email, phone, city and state, how you heard about us, who referred you, your confirmation that you are 18 or older, and whether you agreed to texts about your application. Applications are stored on Google Firebase and seen by the people who handle recruiting and by the person who referred you.

5. Personnel and the App

Onboarding

• Legal name, date of birth, home address, phone, personal email, emergency contact, shirt size, work authorization, and the type of tax ID you hold (not the number).
• A government ID and a headshot. The headshot becomes your profile photo and is sent to carriers to issue your sales credentials.
• Driver’s license number and state, prior carrier registrations, and carrier IDs such as your AT&T UID.
• Agreements you sign, with your typed name, the document version, and the time you signed.
• Background and drug screening through Checkr, and any screening a carrier or dealer requires. You receive a separate disclosure and authorization before any background check.
• Your tax form and bank details are entered in our payroll provider’s system, not in the App.

Using the App

• Work records: doors knocked, outcomes, notes, sales, appointments, tasks, training progress, and photos you upload (such as gate reports and receipts).
• Pay: commissions, overrides, adjustments, chargebacks, reimbursements and pay statements. You see your own pay. Managers see pay for their teams as their role allows.
• Location: with your permission, the App uses your device’s precise location only while you are using it. It shows your position on the map and checks that you were at a door when you record a visit. We store whether the visit was verified and how far away you were, not your coordinates. The App does not collect location in the background and keeps no record of your movements.
• Address search: addresses you search for and map points you tap are sent to Esri (ArcGIS) to look them up.
• Team chat: messages, reactions, read receipts and attachments. Direct messages are visible in the App only to the people in them. Photo location data is removed on upload. Reported messages are visible to the administrators who review the report.
• Automatic posts in team chat: the App posts sales wins, standings and alerts to team channels, with representative names and products. A few posts name a customer: a wireless hand-off in the wireless channel, a callback request in the leadership channel, and urgent-call and incoming-text alerts in a channel only operations staff and administrators can read. These posts never include the customer’s phone, address or email. In the hand-off and callback posts, the customer’s name is cut to initials after 30 days.
• Google Calendar: if you connect it, we read your events and add Malachite appointments to your calendar. Leaders see only when you are busy, not event details. You can disconnect at any time, and we revoke our access when you do.
• Notifications: a device token, so we can send push notifications through Apple and Google Firebase Cloud Messaging. We remove it when you sign out or delete your account.
• Public profile: if your profile is public, anyone with the link can see your name, photo, badge number, bio, work phone, and your reviews and rating. Link previews show your name and photo.
• Personal budget: if you use the App’s budget tools, the figures you enter. Only you can see them in the App.
• Data on your device: the App keeps a local copy of recent data, including the doors in your territory, so it works with a poor connection. Use a passcode on any device you sign in on.

6. Milo, our AI assistant

Milo answers personnel questions in the App and by text, sends reminders, and sorts incoming customer texts so the right person replies. To do this, we send Anthropic, our AI provider, the conversation and the records it needs: for example your schedule, tasks, pay or deals, and, for incoming texts, the message, the customer’s name and the recent thread. Anthropic processes this to produce a response. Its commercial terms say it does not use this data to train its models. Milo does not make decisions about hiring, pay or credit. A person does.

7. Who receives information

We do not sell personal information, and we do not share it for targeted advertising. We disclose it only as follows:

Service providers may use the information only to provide their service to us.

8. How long we keep information

• Customer and order records: while the order is active, and afterward for as long as we need them to reconcile pay, handle chargebacks and disputes, and meet carrier contracts and the law.
• Prospects who did not buy: until they are no longer useful for our work, or until you ask us to delete them. A “do not knock” or opt-out record is kept so we keep honoring it.
• Pay and financial records: seven years.
• Applicants and personnel: for the length of the relationship and as long as employment, tax and contract law requires afterward.
• Customer names in team chat posts: cut to initials after 30 days, as section 5 describes.
• Unused chat uploads: deleted after 24 hours.

9. Your choices and rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it;
• stop texting or calling you, or stop knocking on your door.

Contact us using the details below. We will confirm your identity before we act, and we respond within 45 days. We may keep information the law or our contracts require us to keep, and we will tell you what we kept and why. We will not treat you differently for making a request. Residents of some states have further rights under their state’s law. We honor those rights where they apply.

Deleting your App account

Personnel can view and update much of their profile in the App, and can delete their account themselves: in the iPhone and iPad app under More > Delete Account, or on the web under Profile. You may be asked to sign in again first. If you cannot use either, email us.

Deleting your account erases:

• your sign-in, profile, photo and public profile;
• your contact details: personal email and phone, home address, date of birth, emergency contact and work authorization;
• the messages you wrote in team chat, with their attachments;
• your Milo conversations and reminders, notifications, schedule, personal budget and push tokens;
• your Google Calendar connection;
• the documents you uploaded during onboarding, including your ID and headshot.

We keep the records the business and the law need: deals you sold (they are also the customer’s record), pay lines, pay statements, adjustments, chargebacks and expenses, training and review history, your place in the team structure, signed agreements, and our audit log. Your account then shows as “Deleted user.” We keep your legal name for seven years for tax purposes, in a record only our servers can read.

10. Security

Information is encrypted in transit and stored encrypted with Google Cloud. Carrier account passcodes and security answers get a second layer of encryption with a key only our servers hold. Access is limited by role: a representative sees their own customers and pay, and managers see their own teams. Uploaded IDs are readable only by our operations staff. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

11. Children

Our services, sites and App are for adults. Applicants and personnel must be 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

12. Where information is stored

We operate in the United States and store information in the United States.

13. Changes

When we change this policy, we update the effective date above. If a change materially affects how we use information we already hold, we will tell personnel in the App and give notice on this page before it takes effect.