Introduction
Flottix ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our IT asset management platform and related services (collectively, the "Service").
By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Company or organization name
- Job title and department
- Phone number (optional)
- Billing address and payment information
- Account credentials (passwords are encrypted and never stored in plain text)
Asset and Business Data
As part of providing our Service, we process data you input, including:
- IT asset information (hardware, software, licenses)
- Employee assignment data
- Location and department information
- Custom fields and notes
- Audit logs and activity history
Usage Data
We automatically collect certain information when you use our Service:
- IP address and general location (city/region level)
- Browser type and version
- Operating system
- Pages visited and features used
- Time and date of access
- Referring website or source
- Device information (device type, screen resolution)
Communication Data
When you contact us, we collect:
- Email correspondence
- Support ticket content
- Feedback and survey responses
How We Use Your Information
We use the information we collect to:
Provide and Maintain the Service
- Create and manage your account
- Process transactions and send billing information
- Deliver the features and functionality of the Service
- Provide customer support and respond to inquiries
Improve and Develop the Service
- Analyze usage patterns to improve user experience
- Develop new features and functionality
- Conduct research and analytics
- Fix bugs and troubleshoot issues
Communicate With You
- Send service-related announcements and updates
- Provide product news and feature updates (with your consent)
- Respond to your comments and questions
- Send security alerts and notifications
Ensure Security and Compliance
- Detect and prevent fraud, abuse, and security incidents
- Enforce our Terms of Service
- Comply with legal obligations
- Protect the rights and safety of our users
Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We work with third-party service providers who perform services on our behalf, such as:
- Cloud hosting and infrastructure (e.g., AWS, Google Cloud)
- Payment processing (e.g., Stripe, LemonSqueezy)
- Email delivery services
- Analytics providers
- Customer support tools
These providers are contractually obligated to protect your information and may only use it to provide services to us.
Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal processes (subpoenas, court orders)
- Government requests
- To protect our rights, privacy, safety, or property
- To investigate potential violations of our Terms of Service
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.
With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
Data Retention
We retain your information for as long as your account is active or as needed to provide you with our Service. Specific retention periods include:
- Account data: Retained while your account is active and for 30 days after deletion request
- Asset data: Retained while your account is active; deleted within 30 days of account termination
- Usage logs: Retained for 12 months for analytics purposes
- Audit logs: Retained for 7 years to meet compliance requirements
- Billing records: Retained for 7 years for tax and legal compliance
- Support tickets: Retained for 3 years after resolution
After the retention period, data is securely deleted or anonymized.
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
For All Users
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Data Portability: Request your data in a structured, machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
European Economic Area (GDPR)
If you are in the EEA, you have additional rights under GDPR:
- Right to Object: Object to processing based on legitimate interests
- Right to Restrict Processing: Request limitation of processing in certain circumstances
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with your local data protection authority
California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information is being collected
- Know whether your personal information is sold or disclosed
- Say no to the sale of personal information (we do not sell personal information)
- Access your personal information
- Request deletion of your personal information
- Not be discriminated against for exercising your privacy rights
To exercise any of these rights, please contact us at privacy@flottix.com.
Cookies and Tracking
We use cookies and similar tracking technologies to collect and store information about your interactions with our Service. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
Types of cookies we use include:
- Essential cookies: Required for the Service to function properly
- Functional cookies: Remember your preferences and settings
- Analytics cookies: Help us understand how you use our Service
Security Measures
We implement industry-standard security measures to protect your information:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments and penetration testing
- Multi-factor authentication support
- Role-based access controls
- Regular security training for employees
- Incident response procedures
- SOC 2 Type II compliance (in progress)
While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with all sub-processors
- Certification under recognized privacy frameworks
Children's Privacy
Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@flottix.com. If we learn we have collected personal information from a child under 16, we will delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date at the top of this page
- Sending you an email notification for significant changes
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after any modifications indicates your acceptance of the updated Privacy Policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:
Flottix Privacy Team
Email: privacy@flottix.com
Address: Flottix, Inc.
123 Tech Street, Suite 100
San Francisco, CA 94105
United States
For data protection inquiries in the European Union, you may also contact our EU representative at eu-privacy@flottix.com.