Privacy Policy

1. Information we collect

From shops and their staff:

• names, email addresses, phone numbers and the business's name and address, given at sign-up or when staff are invited;
• billing details, which Stripe collects and holds. We see the card's brand, last four digits and expiry date, never the full number;
• how the app is used, such as sign-ins and the actions taken in it, kept as a record of who did what in the shop.

On a shop's behalf, about the shop's customers:

• names, email addresses, phone numbers and addresses the shop enters, imports or receives through its website;
• the work, equipment, quotes, appointments, photos and messages the shop records about them;
• whether a customer has agreed to marketing messages, or has unsubscribed.

From visitors to profactr.com and to shop websites:

• page views and general visit details through cookieless analytics, which do not identify you;
• anything you choose to send through a contact, quote request or sign-up form;
• if you arrive through a referral partner's link, a cookie that records which partner referred you, so they can be credited.

2. How we use it

We use personal information to:

• provide, secure, back up and support the Service;
• send the messages the Service exists to send: sign-in links, account and billing notices, and the status updates and messages a shop sends to its customers;
• take payments and keep the records the law requires;
• improve the Service and fix problems;
• protect against fraud and misuse, and meet legal obligations.

3. What we don't do

We do not sell personal information, and we do not share it for advertising. We do not use a shop's customers' information to market anything of our own to them.

4. Who we share it with

We share personal information only with the service providers that help us run Profactr, under contracts that limit them to doing that work, and where the law requires it. Our current providers are:

• Stripe: payments and billing;
• Supabase: database and sign-in;
• Vercel and Render: hosting the website and the app;
• Cloudflare: storage of files and backups;
• Resend: sending email;
• Anthropic: the AI assistant, which receives only what is needed to answer a question. [CONFIRM zero data retention once granted.];
• Telnyx: phone calls and text messages, where those features are used.

If Profactr is merged, acquired or sold, personal information may transfer as part of that transaction, under this policy's protections.

5. How long we keep it

We keep a shop's information while its account is open. After it closes, we keep it for [30] days so the shop can ask for a copy, and then delete it, along with its backups within a further [BACKUP RETENTION PERIOD]. Billing and tax records are kept for as long as the law requires.

6. Security

Each shop's data is kept separately from every other shop's. Information is encrypted in transit and at rest, backed up nightly, and available only to the staff a shop invites and to the few Profactr people who need it to provide support, each of whose access is recorded. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

7. Your choices and rights

You can unsubscribe from any marketing email with the link it carries, and from text messages by replying STOP.

You can ask us to show you, correct or delete the personal information we hold about you by writing to [SUPPORT EMAIL]. If your information is held for a shop, we will pass your request to the shop, because it decides what happens to it. Depending on where you live, including under Texas law, you may have further rights, and we will honor them as the law requires.

8. Children

Profactr is a service for businesses. It is not meant for children under 13, and we do not knowingly collect their information.

9. Changes

If we change this policy in a material way, we will update the date above and tell shop owners by email before the change takes effect.

10. Contact

Profactr LLC, [COMPANY MAILING ADDRESS]. Email [SUPPORT EMAIL].