Security and privacy

• Read-only, always. Holler never writes to your field-service system and never moves money.
• Credentials are encrypted. API keys and tokens are AES-256-GCM encrypted at rest, validated once on connect, and never displayed again. Where a platform supports OAuth (Jobber), no long-lived key is ever pasted at all.
• Minimum customer data. Texts use a customer’s first name and street only.
• Phone numbers are for texting Holler texts. Tech numbers are used to deliver the product, never sold or shared.
• Full audit trail. Every inbound and outbound message is logged, and an idempotency ledger guarantees no duplicate sends.
• Consent is structural. Techs opt themselves in; STOP is honored instantly and permanently until a tech says otherwise.