What we hold, and what we do with it.

Who we are

Shopfloor Pros LLC, a New Hampshire limited liability company. Write to support@shopfloorpros.com about anything on this page.

Two different relationships

This matters for understanding the rest, so it’s worth being clear about up front.

When a shop signs up with us, we hold information about that shop and the people who work there. We decide how it’s used, within what this policy says.

When a shop puts its customers’ details into the app — names, phone numbers, vehicles — that information belongs to the shop. We hold it on their behalf and act on their instructions. We don’t use it for anything of our own. If you’re a customer of a shop and want your details changed or removed, ask the shop; they can do it themselves, and we’ll help them if they ask.

What we hold

Information	Why
Shop name, address, phone, email, logo	Runs the account, prints on estimates and invoices
Names and email addresses of people on the shop’s crew	Signing in, assigning work, working out pay
A crew member’s legal name and mailing address	Their employer needs it for their tax forms. Only they and their shop’s owner can see it.
Vehicle details, including VIN and plate	The job record itself
Photographs of vehicles	Evidence of condition and progress
Estimates, invoices and recorded payments	The shop’s business records
The shop’s customers and dealerships — names, phone, email, address	So the shop can bill them and keep them informed
Messages between a shop and its customers	The conversation about a vehicle
Documents a shop uploads for its crew	Handbooks, benefits information and similar
Support messages you send us	Answering them
Basic technical logs	Keeping the service working and secure

What we deliberately don’t hold

• Card numbers. Payment happens on Stripe’s own pages. We receive a confirmation that a payment succeeded and nothing more.
• Bank account and routing numbers. The app never asks for them.
• Social Security numbers or tax IDs. Year-end forms export with that column blank, for the shop to fill from their own records.
• Location tracking. We don’t track where anyone is.

Who else is involved

Running the service needs a small number of other companies. Each of them is bound to handle the information only as needed to provide their part.

Company	What they do
Supabase	Stores the database, files and sign-in details
Stripe	Takes subscription payments. Card details go to them, not us.
GitHub	Serves the web pages
NHTSA (US Department of Transportation)	Decodes VINs. We send a VIN, we get vehicle details back. Nothing else is sent.

If a shop switches on an optional integration — QuickBooks, Carfax, Google reviews — information goes to that company only when the shop chooses to send it, and only what they send.

We do not sell information to anyone, and we never will. We don’t share it for advertising. We would disclose information only if legally required, and we’d tell the affected shop unless the law forbade it.

Where it lives and how it’s protected

• Data is held on servers in the United States.
• Everything travels over an encrypted connection and is encrypted at rest.
• Each shop’s data is walled off from every other shop’s, enforced by the database rather than by the interface.
• Photographs and documents sit in private storage and are reached through links that expire within minutes.
• Passwords are stored as one-way hashes. Nobody, including us, can read them.
• A crew member’s mailing address and tax classification can be read only by that person and by their shop’s owner.

No system is perfectly secure, and it would be dishonest to claim otherwise. If we ever became aware of a breach affecting your information, we would tell you promptly and tell you what happened.

How long we keep it

• While you’re a customer: as long as your account is open. Job history is the point of the product, so we don’t quietly delete old work.
• After you cancel: we keep it for 90 days in case you come back, then delete it. Ask us sooner and we’ll delete it sooner.
• Records we’re required to keep, such as invoices for tax purposes, are kept as long as the law requires.

What you can ask for

• A copy. Export everything yourself from Advanced, any time, without asking.
• A correction. Edit it in the app, or write to us.
• Deletion. Ask and we’ll delete your account and its data.
• An explanation. Ask what we hold about you and we’ll tell you.

Depending on where you live you may have further rights, including under the California Consumer Privacy Act. We apply the same approach to everyone rather than sorting people by address. Write to support@shopfloorpros.com and we’ll answer within 30 days.

Cookies and tracking

We use one thing stored in your browser: the token that keeps you signed in. There are no advertising cookies, no analytics that follow you between sites, and no third-party trackers. If that ever changes, this page changes first.

Children

This is business software and isn’t intended for anyone under 16. We don’t knowingly collect information about children.

Changes

If we change this policy we’ll update the date at the top, and if the change is significant we’ll email account owners rather than hoping they notice.