Privacy Policy

1. Introduction

Welcome to FixBlox. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you purchase and use our white-label web application solutions, including QuoteFlow, JobTracker, TradeHub, and when you visit our website.

Important Note on White-Label Services: FixBlox provides white-label application solutions on a one-time purchase basis. When you purchase a white-label solution, you become the data controller for any customer data collected through your branded application. FixBlox processes your business information and may act as a data processor for your customer data during the provision of hosting and support services.

Please read this Privacy Policy carefully. By purchasing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

We collect several types of information from and about users of our services:

2.1 Information You Provide Directly

We collect information that you provide directly when you:

• Create an account: Name, email address, phone number, business name, trade type, password
• Use QuoteFlow or other services: Customer information (names, addresses, contact details), service details, pricing configurations, job descriptions
• Submit inquiries: Contact form submissions, support requests, feedback
• Subscribe to communications: Email address for newsletters or updates
• Make payments: Billing information (processed through secure third-party payment processors)

2.2 Lead and Customer Data

When your customers use QuoteFlow or other services to request quotes, we collect:

• Customer name and contact information
• Service address and property details
• Service requirements and specifications
• Quote details and pricing information
• Communication preferences

2.3 Automatically Collected Information

When you access our services, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, navigation paths
• Device Information: IP address, browser type and version, device type, operating system
• Location Data: General location based on IP address
• Log Data: Access times, error logs, performance data
• Cookies and Similar Technologies: See Section 6 for details

2.4 Information from Third Parties

We may receive information about you from third-party services we use to provide our services, such as:

• Payment processors (transaction information)
• Authentication services
• Email delivery services
• Analytics providers

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Provide, operate, and maintain our services
• Process quotes and manage customer leads
• Send email notifications for new leads and updates
• Enable communication between you and your customers
• Process payments and manage billing
• Provide customer support and respond to inquiries

3.2 Service Improvement

• Understand and analyze how you use our services
• Develop new products, services, and features
• Improve and optimize our services and user experience
• Conduct research and analytics
• Debug and fix technical issues

3.3 Communication

• Send you service-related communications and updates
• Respond to your comments, questions, and requests
• Send marketing communications (with your consent)
• Notify you about changes to our services or policies
• Provide training and educational materials

3.4 Security and Legal Compliance

• Detect, prevent, and address fraud and security issues
• Protect against malicious, deceptive, or illegal activity
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to legal requests
• Resolve disputes and protect our legal rights

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database and authentication services
• Email Service Providers: To send notifications and communications
• Payment Processors: To process payments securely
• Cloud Hosting Providers: To host our applications and data
• Analytics Providers: To analyze usage and improve our services

These service providers are contractually bound to protect your information and may only use it for the purposes we specify.

4.2 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• To comply with legal obligations, court orders, or legal processes
• To protect and defend our rights or property
• To prevent or investigate possible wrongdoing
• To protect the personal safety of users or the public
• To protect against legal liability

4.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

5. Data Storage and Security

5.1 Data Storage

Your information is stored on secure servers provided by our cloud hosting partners. We use Supabase for database services, which stores data in secure, professionally managed data centers.

5.2 Security Measures

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Employee training on data protection
• Restricted access to personal information

5.3 Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar tracking technologies to track activity on our services and store certain information.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the operation of our services (authentication, security)
• Functional Cookies: Enable enhanced functionality and personalization (preferences, settings)
• Analytics Cookies: Help us understand how visitors use our services (usage patterns, popular features)
• Performance Cookies: Monitor performance and identify technical issues

6.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, if you disable cookies, some features of our services may not function properly. You can usually find cookie controls in your browser's privacy or security settings.

7. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

7.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information about you.

7.3 Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (e.g., legal obligations, legitimate business purposes).

7.4 Restriction and Objection

You have the right to:

• Restrict the processing of your personal information in certain circumstances
• Object to the processing of your personal information for direct marketing purposes
• Withdraw consent where we rely on consent to process your information

7.5 Exercising Your Rights

To exercise any of these rights, please contact us at info@fixblox.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law. You may also have the right to lodge a complaint with a data protection authority.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws in your country.

When we transfer your information internationally, we take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy and applicable data protection laws. This may include using standard contractual clauses approved by relevant authorities.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information.

10. Marketing Communications

10.1 Opt-In

We may send you marketing communications about our services, new features, and special offers if you have opted in to receive such communications or where we have a legitimate interest and you have not opted out.

10.2 Opt-Out

You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your account communication preferences
• Contacting us at info@fixblox.com

Please note that even if you opt out of marketing communications, we will still send you service-related communications that are necessary for the operation of your account.

11. Third-Party Websites and Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites or services you visit or use.

When you use third-party services through our platform (such as payment processors), those services may collect information about you in accordance with their own privacy policies.

12. Data Controller and Processor Relationships

The data controller/processor relationship varies depending on the type of data and context:

12.1 Your Business Information (FixBlox as Controller)

For data you provide about yourself and your business during the purchase process and account setup, FixBlox is the data controller responsible for processing:

• Your contact information (name, email, phone number)
• Business details (business name, trade type)
• Payment information (billing details)
• Communications with FixBlox
• Support tickets and inquiries

12.2 Customer Lead Data (You as Controller, FixBlox as Processor)

For customer lead data collected through your white-label application (such as QuoteFlow):

• You are the data controller: You determine what data is collected, how it's used, and how long it's retained
• FixBlox acts as a data processor: We provide the technical infrastructure and may process this data on your behalf when hosting or supporting your application

Your Responsibilities as Data Controller:

• Ensure you have a lawful basis to collect and process customer data
• Provide appropriate privacy notices to your customers
• Respond to data subject access requests from your customers
• Comply with UK GDPR, Data Protection Act 2018, and other applicable privacy laws
• Implement appropriate security measures for customer data
• Notify affected individuals and authorities of any data breaches

12.3 Data Processing Agreement

When FixBlox hosts your white-label application and processes customer data on your behalf, we act as your data processor. A Data Processing Agreement (DPA) may be included in your service agreement or available upon request, which outlines:

• The nature and purpose of data processing
• Types of personal data processed
• Security measures implemented
• Our obligations as a data processor
• Your rights as a data controller
• Sub-processor arrangements (e.g., Supabase, hosting providers)

12.4 Data Independence

Once your white-label application is deployed, you have independent control over your customer data. You can export, delete, or transfer data at any time. FixBlox does not use, share, or analyze your customer data for any purpose other than providing the agreed services to you.

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell
• Right to Delete: You have the right to request deletion of your personal information
• Right to Opt-Out: You have the right to opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights

To exercise these rights, contact us at info@fixblox.com. We will verify your identity before processing your request.

14. UK GDPR and Data Protection

If you are in the United Kingdom, the processing of your personal information is subject to the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

14.1 Legal Basis for Processing

We process your personal information on the following legal bases:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given consent for specific processing activities
• Legal Obligation: Processing necessary to comply with legal requirements

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry as soon as possible, and in any case within the timeframes required by applicable law.