Privacy Policy

Last updated: March 10, 2026

1. Introduction

Fitzpatrick Systems ("we," "us," or "our") operates the FitzFlow platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. Information We Collect

Information You Provide

• Account information: name, email address, phone number.
• Customer records: customer names, email addresses, phone numbers, mailing addresses.
• Vehicle information: year, make, model, VIN, mileage, license plate, color, engine/drivetrain details.
• Inspection data: inspection results, technician notes, status indicators.
• Photos: vehicle photos uploaded during inspections.
• Financial data: estimates, invoices, and payment records processed through the Platform.

Information Collected Automatically

• Usage data: pages visited, features used, timestamps.
• Device information: browser type, operating system, screen resolution.
• IP address and general location data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform.
• Process inspections, estimates, invoices, and scheduling.
• Send transactional communications (e.g., account confirmations, inspection reports).
• Improve the Platform and develop new features.
• Respond to support requests.
• Monitor for abuse and enforce our Terms of Service.

4. Data Storage & Security

Your data is stored on secure, cloud-hosted infrastructure. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest.
• Row-level security policies to isolate shop data.
• Role-based access controls within each shop instance.
• Regular security reviews and updates.

While we take reasonable steps to protect your data, no system is 100% secure. You are responsible for keeping your login credentials safe.

5. Data Sharing

We do not sell your personal information to third parties.

We may share data only in the following circumstances:

• Service providers: trusted vendors who help us operate the Platform (e.g., hosting, email delivery), bound by confidentiality agreements.
• Legal requirements: if required by law, court order, or government request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. After account cancellation:

• Data is retained for 30 days to allow for reactivation or export.
• After 30 days, data may be permanently deleted.
• Certain records may be retained longer if required by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (subject to legal obligations).
• Export your data in a portable format.
• Opt out of marketing communications.

To exercise any of these rights, contact us at privacy@fitzpatricksystems.com.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information — we do not sell your data.
• The right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, email privacy@fitzpatricksystems.com with the subject line "CCPA Request." We may need to verify your identity before processing your request. Verified requests will be responded to within 45 days, as required by California law. If additional time is needed, we will notify you of the reason and extension period.

9. International Users

FitzFlow is primarily designed for and operated within the United States. Our infrastructure, data storage, and support are based in the U.S.

If you are located outside the United States, including in the European Economic Area (EEA), please be aware of the following:

• By using the Platform, you consent to the transfer of your data to the United States, which may not offer the same level of data protection as your home country.
• We do not currently offer a formal Data Processing Agreement (DPA).
• If you are an EU-based business or subject to GDPR, we recommend contacting us at privacy@fitzpatricksystems.com to discuss your compliance requirements before using the Platform.

We are committed to protecting all user data regardless of location and apply the security measures described in Section 4 to all accounts.

10. Cookies & Analytics

The Platform may use cookies or similar technologies for:

• Maintaining your login session.
• Remembering your preferences (e.g., theme, layout).
• Understanding how the Platform is used (analytics).

We do not use cookies for advertising or third-party tracking.

11. Children's Privacy

FitzFlow is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above. Continued use of the Platform constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests:

Fitzpatrick Systems
Email: privacy@fitzpatricksystems.com