Privacy Policy

We collect information you provide directly and data generated automatically when you use Flintrock OS.

Information you provide:

• Account information: full name, email address, company name, and password (hashed — we never store plaintext passwords)
• Profile data: trucking company details, DOT number, operating states
• Financial data: expenses, receipts, fuel purchases, load details, mileage records
• Documents: photos and files you upload (BOLs, invoices, insurance cards, permits, receipts)
• Communications: messages you send to support@flintrockos.com

Data collected automatically:

• Usage data: pages visited, features used, clicks, and time spent in the app
• Device data: browser type, operating system, screen size, IP address
• Performance data: page load times, errors, and API response times (via Vercel Speed Insights)
• Session data: authentication tokens stored in secure cookies

We use your data only to provide and improve Flintrock OS. We do not sell, rent, or share your personal information with advertisers or data brokers.

• Provide core features: expense tracking, IFTA calculations, document storage, load management
• Authenticate you and keep your session secure
• Send transactional emails: account confirmation, password reset, beta updates (via Resend)
• Analyze aggregate usage patterns to improve the product — never linked to individual identity for marketing
• Respond to support requests and troubleshoot issues
• Comply with legal obligations and protect against fraudulent or abusive use

We use a small number of cookies essential to the service and optional analytics cookies. See our full Cookie Policy for the complete list.

Essential cookies (cannot be disabled):

• Supabase auth session cookie — keeps you signed in across requests
• ft_cookie_consent — stores your cookie preferences for 365 days

Analytics cookies (require your consent):

• Vercel Analytics — anonymous, privacy-first analytics for page views and user flows
• Vercel Speed Insights — performance monitoring (LCP, FID, CLS)

You can manage your cookie preferences at any time using the cookie banner or by visiting our Cookie Policy.

Your data is stored on infrastructure operated by Supabase (PostgreSQL database and file storage) and Vercel (hosting and edge network).

• Database: Supabase-managed PostgreSQL with row-level security (RLS) policies — your data is isolated and inaccessible to other users
• File storage: Supabase Storage with access-controlled buckets — documents are private to your account
• Hosting: Vercel edge network with TLS 1.3 encryption in transit
• Passwords: hashed by Supabase Auth using bcrypt — never stored in plaintext
• Encryption at rest: enabled on all Supabase storage tiers

While no system is 100% breach-proof, we follow industry-standard security practices and will notify affected users without undue delay if a breach affecting their personal data occurs.

We use the following third-party services. Each has its own privacy policy and data processing terms:

We do not use Facebook Pixel, TikTok tracking, or any third-party advertising networks within the authenticated app. We may add integrations in the future, and this policy will be updated when we do.

Regardless of where you live, we honor these rights for all Flintrock OS users:

• Access: request a copy of all personal data we hold about you
• Correction: update or correct inaccurate data at any time via your account settings
• Deletion: request permanent deletion of your account and all associated data
• Export: download your financial data, documents, and records in standard formats (CSV, JSON)
• Restriction: object to certain processing of your data
• Portability: receive your data in a machine-readable format

To exercise any of these rights, email us at support@flintrockos.com. We will respond within 30 days. Account deletion is permanent and cannot be undone.

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights regarding your personal information.

Your CCPA rights:

• Right to Know: you can request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
• Right to Delete: you can request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt-Out of Sale: we do not sell personal information to third parties — there is nothing to opt out of
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights

Categories of personal information collected:

• Identifiers: name, email address, IP address
• Commercial information: expense records, load data, financial records
• Internet or network activity: usage data, browser type
• Professional or employment information: company name, DOT number

To submit a verifiable CCPA request, contact us at support@flintrockos.com with the subject line "CCPA Request." We will verify your identity before processing your request.

Flintrock OS is a professional business tool and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us at support@flintrockos.com and we will delete it promptly.

We may update this policy as Flintrock OS adds new features or services. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notification to your registered email address for significant changes
• In some cases, ask for your renewed consent

Continued use of Flintrock OS after changes take effect constitutes acceptance of the revised policy.

Questions, requests, or concerns about this Privacy Policy or your data?