Baycon Pro

Privacy & Cookies

BMS is built to keep Baycon job, customer, payment, document, and time information useful to the people doing the work, not to feed advertising or outside resale.

Last updated June 24, 2026

Team Login Customer Portal
Essential cookies only by default. BMS does not use advertising trackers, cross-site ad profiles, or resale of portal information. If Baycon ever adds optional analytics or marketing cookies, they should start off and require a clear opt-in.

What BMS Uses Information For

  • Creating and managing customers, jobs, appointments, work orders, notes, photos, receipts, documents, signatures, and invoices.
  • Tracking time, payroll-support records, mileage, expenses, job costing, payments, and business reports.
  • Sending portal invitations, password reset PINs, receipts, document links, job messages, and internal notifications.
  • Maintaining security, audit trails, tax/accounting records, and records Baycon reasonably needs to run the business or answer a lawful request.

What Baycon Does Not Do

  • Baycon does not sell customer, employee, or portal information.
  • Baycon does not use BMS information for cross-site behavioral advertising.
  • BMS does not store raw card numbers, CVCs, or bank-login credentials. Card or ACH details stay with the payment provider when online payments are used.
  • Access inside BMS is role-based so information is shown only where it is needed for Baycon work.

Who May Receive Information

Baycon keeps information inside Baycon unless sharing is needed to provide the service, run the system, process payments, send messages, store files, support accounting, work with professional advisors, protect the business, or comply with law.

Examples include hosting, email delivery, payment processing, banking/accounting tools, notification tools, and legal/accounting support. Those services should only receive what is needed for their role.

Your Choices

You can ask Baycon to review, correct, export, or delete portal information where deletion is legally and operationally available. Some records may need to be kept for job history, safety, accounting, tax, warranty, dispute, insurance, or legal reasons.

Baycon also treats any valid opt-out request for sale or sharing seriously, though BMS currently has no personal-information sale or advertising-sharing workflow to opt out of.

Cookies & Browser Storage

NameTypePurposeDuration
bms_session Essential first-party cookie Keeps login, security checks, form protection, and page messages working during the browser session. Browser session.
bms_remember Essential first-party login token Only set when a team member checks "Remember this device" at sign-in. Keeps that browser signed in until sign out, token rotation, password reset, or browser cleanup. Up to 10 years when opted in, subject to browser limits.
bmsTheme Local browser storage Remembers the selected visual theme on that browser. Until changed or cleared by the browser/user.
bmsActiveSection, bmsWorkflowState Local/session browser storage Keeps the current BMS section, scroll position, and open card workflow after a normal form submit. Current browser/session; workflow state is cleared after restore.

BMS currently has no optional advertising, profiling, or third-party analytics cookies. If a future feature needs optional cookies, it should be added behind a clear consent choice.

Security

BMS uses HTTPS, password hashing, reset PINs, role-based access, CSRF protection, secure cookie settings, audit trails, and limited portal views. No system is perfect, but the design goal is to keep information useful, accountable, and limited to the people who need it.

Children

BMS is for Baycon customers, employees, collaborators, and business contacts. It is not intended for children to create accounts or submit information without a parent, guardian, or responsible adult involved.

Contact

Privacy, portal access, correction, deletion, and export requests can be sent to forms@baycon.pro or by calling 717-552-4761.

Baycon Electric / Baycon Pro may need to verify the request before changing or releasing account information.