Privacy Notice
FlagRight by BowtieTech · Last updated October 3, 2026
1. Who we are
FlagRight is operated by Corey James Radford, an individual (not a registered company) using the brand name BowtieTech. He is the data controller for the personal data described in this notice.
2. Data we collect
- Account data: name, email address, login credentials.
- Work data you enter: repair order numbers, vehicle details, tracked times, notes, and 3 C's stories.
- Usage and device data: pages visited, feature use, device type, browser, IP address.
- Support messages you send us.
2a. Photos and customer information
Photos you attach to repair orders and parts-return slips are stored on your own device, not in our cloud. Before a photo is saved, it is sent briefly to an automated checker that looks for customer personal information (names, addresses, phone numbers, emails, payment details, licenses, or faces). The image is processed only for that check and is not kept by us or the checker. If something is detected you are asked to black it out or delete the photo. The checker can miss things, so please avoid photographing customer details at all. Repair-order scans read only the RO number, VIN, vehicle and job and do not store the image.
3. Why we use it
- To create and maintain your account (performance of our contract with you).
- To provide the service: syncing your ROs, timer, stats, and notes across your devices.
- For security and fraud prevention (our legitimate interest).
- To improve the product and provide customer support (our legitimate interest).
- To meet legal obligations where required.
4. Who we share it with
- Service providers that host and operate the app (cloud hosting, analytics, support tooling).
- Paddle, our Merchant of Record, for the sale of memberships, subscription management, payments, tax compliance, and invoicing.
- Professional advisers (legal, accounting) where needed.
- Authorities where required by law.
5. Retention
We keep your data while your account is active. When data is no longer needed, it is deleted or anonymized. After account closure you may request an export for 30 days before deletion.
6. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. You may also complain to your local supervisory authority. Email sales@flagright-pro.com to exercise any of these rights; we respond within one month.
7. Security
We use appropriate technical and organizational measures, including encryption in transit and access controls, to protect your data.
8. Cookies
We use essential cookies/storage to keep you signed in and remember your settings. We do not use marketing cookies. You can clear site data in your browser at any time.
9. International transfers
Your data may be processed outside your country. Where required, we use appropriate safeguards such as standard contractual clauses.