Privacy Notice
FlagRight by BowtieTech · Last updated September 26, 2026
1. Who we are
FlagRight is operated by Corey James Radford, trading as BowtieTech, which is the data controller for the personal data described in this notice.
2. Data we collect
- Account data: name, email address, login credentials.
- Work data you enter: repair order numbers, vehicle details, tracked times, notes, and 3 C's stories.
- Usage and device data: pages visited, feature use, device type, browser, IP address.
- Support messages you send us.
3. Why we use it
- To create and maintain your account (performance of our contract with you).
- To provide the service: syncing your ROs, timer, stats, and notes across your devices.
- For security and fraud prevention (our legitimate interest).
- To improve the product and provide customer support (our legitimate interest).
- To meet legal obligations where required.
4. Who we share it with
- Service providers that host and operate the app (cloud hosting, analytics, support tooling).
- Paddle, our Merchant of Record, for the sale of memberships, subscription management, payments, tax compliance, and invoicing.
- Professional advisers (legal, accounting) where needed.
- Authorities where required by law.
5. Retention
We keep your data while your account is active. When data is no longer needed, it is deleted or anonymized. After account closure you may request an export for 30 days before deletion.
6. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. You may also complain to your local supervisory authority. Contact us through the app to exercise any of these rights; we respond within one month.
7. Security
We use appropriate technical and organizational measures, including encryption in transit and access controls, to protect your data.
8. Cookies
We use essential cookies/storage to keep you signed in and remember your settings. We do not use marketing cookies. You can clear site data in your browser at any time.
9. International transfers
Your data may be processed outside your country. Where required, we use appropriate safeguards such as standard contractual clauses.