Privacy Policy
This Privacy Policy explains how BrownCo Power Solutions LLC ("BrownCo," "we," "us," or "our") collects, uses, and protects information when you use ShopFlow (the "Service"), our shop-management software, and the ShopFlow marketing website at getsf.browncopower.com. By using the Service, you agree to the practices described here.
1. Who we are
ShopFlow is operated by BrownCo Power Solutions LLC, a limited liability company based in Bogart, Georgia, USA. If you have any questions about this policy or your data, contact us at [email protected].
2. Information we collect
Information you provide
- Account information — your name, email address, shop name, and password (or Google account identifier if you sign in with Google).
- Shop data you enter — work orders, invoices, customer and equipment records, inventory, time-clock entries, expenses, sales-tax settings, and related business records you create in the Service.
- Your customers' information — names, contact details, and equipment/service history that you enter about your own customers. You are responsible for having the right to provide this information (see "Your responsibilities" below).
- Communications — messages you send us for support or through our contact form.
- Payment information — if you subscribe to a paid plan, billing details are collected and processed by our third-party payment processor; we do not store full card numbers on our servers.
Information collected automatically
- Usage and device data — basic log information such as IP address, browser type, pages viewed, and timestamps, used to operate, secure, and improve the Service.
- Cookies and similar technologies — see the "Cookies" section below.
3. How we use your information
We use the information we collect to:
- Provide, maintain, and operate the Service and your account;
- Process subscriptions and payments;
- Provide customer support and respond to your requests;
- Secure the Service, prevent fraud and abuse, and troubleshoot problems;
- Improve and develop new features; and
- Send you service-related messages and, where permitted, occasional product updates (you can opt out of non-essential messages).
We do not sell your personal information, and we do not sell your shop's data. We do not use the business records you enter for advertising.
4. How your data is stored and secured
The Service is hosted using Supabase, a third-party cloud platform that provides our database, authentication, and secure storage. Your data is stored on infrastructure operated by Supabase and its underlying cloud providers.
We use reasonable administrative, technical, and organizational safeguards — including access controls, encrypted connections (HTTPS/TLS), and row-level security — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Google OAuth
If you choose to sign in with Google, we receive basic profile information (such as your name and email address) from Google to create and authenticate your account. We request only the information needed to sign you in and do not access your Google data beyond that. Your use of Google sign-in is also governed by Google's own privacy policy.
6. Third-party service providers (sub-processors)
We share information with a limited set of trusted service providers who process data on our behalf, only as needed to run the Service, and who are obligated to protect it. These currently include:
- Supabase — database, authentication, and hosting;
- Google — optional sign-in (OAuth);
- Our payment processor — subscription billing;
- Email/support tools — to deliver service messages and respond to you.
We do not permit these providers to use your information for their own purposes. We may update this list as our providers change.
7. Cookies
We use cookies and similar technologies that are strictly necessary to keep you logged in, remember your preferences, and keep the Service secure. We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent the Service from working properly.
8. How we share information
We only share your information:
- With the service providers described above;
- If required by law, legal process, or a valid government request;
- To protect the rights, property, or safety of BrownCo, our users, or the public;
- In connection with a business transfer (such as a merger, acquisition, or sale of assets), in which case we will notify you and this policy will continue to apply to your information.
9. Data retention
We keep your account and shop data for as long as your account is active. If you close your account, we will delete or anonymize your data within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes. You may request deletion at any time (see "Your rights").
10. Your rights and choices
You may:
- Access, correct, or update your account information within the Service;
- Request a copy (export) of your shop data;
- Request deletion of your account and associated data;
- Opt out of non-essential communications.
To exercise any of these, email [email protected]. Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA or GDPR.
11. Your responsibilities
ShopFlow lets you store information about your own customers and their equipment. You are the controller of that information. You are responsible for collecting and using it lawfully, for having any required consents, and for responding to your customers' own privacy requests. We process that information on your behalf as described in this policy and our Terms of Service.
12. Children's privacy
The Service is intended for businesses and is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13. International users
The Service is operated from the United States and intended for users in the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.
15. Contact us
Questions about this policy or your data? Email [email protected] or write to BrownCo Power Solutions LLC, Bogart, Georgia, USA.