ElectriTrack Legal
Privacy Policy
This Policy is tailored to how ElectriTrack actually handles data today: Firebase-based accounts, customer and job records, uploaded photos and documents, AI-assisted drafting, estimate and invoice delivery, public approval and payment links, and Stripe-powered online payments.
Effective date: May 9, 2026
Christopher Flores
1. Scope And Roles
This Privacy Policy explains how Christopher Flores, doing business as ElectriTrack, collects, uses, discloses, and protects personal information when you use the Service.
In many cases, the account holder using ElectriTrack to manage customers, jobs, estimates, invoices, permits, and photos is the party that decides why that data is being collected and used. In those cases, the account holder is responsible for its own notices, consents, and lawful processing of customer and job data, and ElectriTrack acts mainly as a service provider or processor on that account holder’s behalf, except where we need to use data for our own security, payment, legal, support, and platform operations.
2. Information We Collect
The exact data depends on how you use the Service, but we may collect the following categories of information:
- Account and identity data, such as your name, email address, phone number, authentication identifiers, login method, and account verification status.
- Business profile data, such as business name, owner name, business address, website, logo, license number, payment preferences, tax defaults, labor rates, invoice defaults, and notification settings.
- Customer and job data, such as customer names, phone numbers, email addresses, addresses, notes, job descriptions, schedule details, property type, permit details, inspection dates, utility notes, line items, and work history.
- Estimate and invoice data, such as estimate numbers, invoice numbers, pricing, tax amounts, deposit information, balances due, due dates, notes, payment status, email delivery status, approval details, and related PDF metadata.
- Photos and documents, such as jobsite photos, inspection photos, permit documents, logos, and other files you upload.
- AI interaction data, such as prompts, context you submit to AI features, generated drafts, generation timing, and feature usage counters.
- Payment and payout data, such as Stripe connected-account identifiers, onboarding status, payment intent identifiers, application-fee metadata, payout readiness status, and payment status details. We do not intentionally store full card numbers on our own servers.
- Device, network, and usage data, such as IP address, browser details, approximate location inferred from network data, access times, pages or routes used, link-token use, and security or fraud signals.
- Communications data, such as support messages, email delivery metadata, invoice emails, estimate emails, and transactional notices.
- Anti-abuse and security data, such as Turnstile verification results, webhook event metadata, access-token checks, and audit or error logs.
3. Sources Of Information
We collect information directly from you, automatically from your use of the Service, from the people you invite or bill through the Service, and from third parties that help power the Service.
- Directly from users during signup, login, settings updates, data entry, file uploads, support requests, and payment setup.
- From public-link recipients when they open estimate or invoice pages, approve estimates, or submit online payments.
- From service providers such as Firebase authentication and storage services, Stripe, email delivery providers, anti-bot services, mapping services, and AI providers.
- From browser and device interactions, including cookies or similar technologies used by us or our payment providers for security and checkout functionality.
4. How We Use Information
We use personal information to run the Service, support our users, and protect the platform.
- Provide account access, authentication, passwordless or federated sign-in, and account security.
- Store and display jobs, customers, photos, permits, panel schedules, estimates, invoices, and business settings.
- Generate PDFs, public estimate pages, public invoice pages, and online payment flows.
- Process AI requests and return drafting or insight outputs.
- Create, support, reconcile, and monitor Stripe payment activity and connected-account onboarding status.
- Send transactional communications such as account notices, estimate emails, invoice emails, payment confirmations, and support responses.
- Detect abuse, fraud, suspicious activity, unauthorized access, and service misuse.
- Debug, secure, maintain, improve, and analyze the Service and its performance.
- Comply with legal obligations, enforce our terms, and protect rights, safety, and property.
5. When We Disclose Information
We do not sell personal information in the ordinary sense, and we do not share personal information for cross-context behavioral advertising based on the Service as currently configured. We may disclose information in the following situations:
- Service providers and infrastructure vendors that help us provide the Service, including hosting, database, authentication, storage, email, AI, mapping, anti-abuse, and payment providers.
- Stripe and financial-service partners when needed to support online payments, connected-account onboarding, fraud prevention, dispute handling, chargebacks, tax reporting, or compliance requests.
- Public-link recipients and the account holder when estimate, invoice, or payment information is intentionally shared through the Service.
- Professional advisors, insurers, auditors, acquirers, or successor entities in connection with corporate transactions, financing, diligence, or claims handling.
- Law enforcement, regulators, courts, counterparties, or other third parties where we believe disclosure is required or appropriate to comply with law, enforce our terms, or protect rights, safety, or property.
6. Stripe, Payment Data, And Link
Online payments are processed by Stripe. Stripe may collect payment information, device data, cookies, IP addresses, and fraud-prevention information when a customer uses the payment flow. Stripe Elements tokenizes sensitive payment details, and the card details do not need to touch our servers in the normal checkout flow.
Stripe may also offer or enable Link and related accelerated-checkout features. If Link is enabled in the payment flow, Stripe may use cookies, email addresses, phone numbers, device information, and prior Link enrollment data to recognize returning users, authenticate them, and autofill saved payment details under Stripe’s own terms and privacy practices. You can review Stripe’s privacy disclosures at stripe.com/privacy, and connected account terms at stripe.com/legal/connect-account.
7. Public Estimate And Invoice Pages
The Service can generate customer-facing estimate review pages and invoice payment pages. Those pages may display business name, logo, invoice or estimate details, customer-facing contact details, address information, and payment or approval options. Anyone with a valid tokenized link may be able to access the related page until the link expires, is revoked, or the underlying record changes state.
Account holders are responsible for deciding what information to place in public estimates, invoices, messages, and attachments, and for making sure that any sharing of customer data or jobsite details is lawful and appropriate.
8. AI Features
When you use AI-powered drafting or insight features, the text, job context, notes, line items, and related information you submit may be sent to our AI providers so they can generate a response. We may store prompts, outputs, usage counts, and related metadata to operate the feature, enforce usage limits, troubleshoot issues, and improve reliability.
Do not submit highly sensitive data to AI tools unless you are comfortable with that use and have the right to share it. Account holders are responsible for deciding what business, customer, site, and permit information gets sent through AI features.
9. Retention
We keep information for as long as reasonably necessary to provide the Service, maintain the business relationship, comply with legal obligations, resolve disputes, enforce agreements, and protect the platform. Retention periods vary by data type, account status, payment records, audit requirements, backup cycles, and legal or operational needs.
We may retain de-identified or aggregated information for analytics, security, product improvement, and lawful business purposes where permitted by law.
10. Security
We use administrative, technical, and physical safeguards designed to protect personal information. That said, no system is perfectly secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your own devices, credentials, inboxes, public links, and internal business practices.
11. Your Choices And Rights
Depending on your relationship with the Service and where you live, you may have rights to access, correct, delete, or limit certain personal information. In many cases, account holders can review and update data directly in the dashboard.
If you are a customer whose information was uploaded by a contractor or other account holder, we may need to direct your request to that account holder because they control the underlying business relationship and often decide the purpose of the processing.
You can also opt out of non-essential marketing communications using the unsubscribe mechanism in those messages. Transactional messages about estimates, invoices, payments, account status, and security may still be sent when needed.
12. California Privacy Notice
If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the CPRA, including the right to know, access, correct, or delete certain personal information, the right to opt out of sale or sharing where applicable, and the right not to be discriminated against for exercising your rights.
We do not currently use the Service as configured to sell personal information or share personal information for cross-context behavioral advertising. If that changes, we will update this Policy and any required rights mechanisms. We may need to verify identity before fulfilling a request where required by law.
13. Children’s Privacy
The Service is meant for business use and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the Service. If you believe a child has provided personal information to us directly, contact us and we will review the situation.
14. International Transfers
We and our service providers may process and store information in the United States and other countries where we or our providers operate. Those countries may have data protection laws that differ from the laws in your jurisdiction.
15. Changes To This Policy
We may update this Privacy Policy from time to time. The latest version will be posted in the Service with an updated effective date. Material changes may also be communicated through the Service or by other reasonable means.