Privacy Policy

• Account data: your email, name, company, and a hashed password. We never store passwords in plain text.
• Tenant business data: the records your shop enters — customers, sites, equipment, technicians, jobs, invoices, and notes.
• Operational data: IP addresses for rate limiting and abuse prevention, and lightweight service telemetry used to keep the product healthy.

Payments are processed by Stripe. We receive your subscription status and Stripe customer ID; card numbers and bank details go to Stripe directly and are never stored on our servers. Stripe’s own privacy policy applies to that processing.

We set one session cookie, fsm_session (HttpOnly, SameSite=Lax), to keep you logged in. We also use the browser’s offline cache so the field app keeps working without a connection.

On our public marketing and pricing pages, we use Google Tag Manager and Google Analytics 4 to understand aggregate site use and trial sign-ups. We do not send customer, job, invoice, email, or other operational data to Google Analytics.

Across the public site, signed-in dispatcher, and customer portal, we use first-party Ferrum Warehouse operational tracking. It records a minimal success event (such as an app view, portal view, job creation, or invoice send), time, canonical domain, and a redacted route category. It does not record account, customer, job, invoice, email, IP address, referrer, request body, or portal-token values.

Meta Pixel is optional. We load it only after you choose Allow Meta Pixel on a public marketing page; refusing it does not affect the first-party operational tracking described above.

• Provide the service: dispatch board, invoices, customer portal links, invites, and password resets.
• Send transactional email (invites, resets) via our mail provider.
• Enforce trials, plan limits, and billing status.

We do not sell your data, and we do not share tenant business data with advertisers. Data is disclosed only to the processors needed to run the service (hosting, Stripe, transactional email) or when required by law.

Throwaway sample shops are deleted within about 24 hours unless claimed. Trial and paid tenants keep their data while the account exists, including after a subscription lapses. To delete your account and tenant data, write to [email protected] and we will remove it within a reasonable window, subject to legal retention needs.

Passwords are hashed, sessions are signed cookies, and each tenant’s business data lives in its own database. No method is perfect, but we work to keep your shop’s data protected.

We may update this policy; the current version lives at /privacy. Questions or deletion requests: Hutts Enterprises, [email protected].