Privacy Policy

Who we are

Tool Truck Direct ("TTD", "we", "us") is point-of-sale, inventory, and customer management software for mobile tool-truck businesses, available at mytooltruckdirect.com. This policy explains what information we collect, how we use it, and the choices you have. Questions go to mvposinfo@gmail.com.

Information we collect

• Account information. When a business signs up or invites an employee, we collect names, email addresses, phone numbers, and a password (stored hashed). Employees may also have a work email and display name.
• Business records you enter. Customers, shops, inventory, sales, quotes, invoices, payment plans, routes, purchase orders, notes, and files you attach. This is your data; you enter it and you control it.
• Payments. Card payments are processed by Stripe or Fortis. Full card numbers never touch our servers. We store only what the processor returns to identify a saved card, such as the brand, last four digits, and expiration, plus a processor token.
• Messages we send for you. Copies of emails and text messages sent through TTD (receipts, quotes, invoices, statements, purchase orders, plan reminders) so you can see what went out.
• Usage and device information. Standard server logs, and when you submit a support report, details of your browser, screen, and recent pages to help us reproduce the problem.

Google account data (Send from your own email)

A business may choose to connect a Gmail account so documents go out from its own address. When you connect, Google asks for one Gmail permission: send email on your behalf (the gmail.send scope), along with your email address so we know which account was connected.

• We use this permission only to send emails that you or your staff initiate in TTD, such as receipts, quotes, invoices, statements, purchase orders, and payment receipts.
• We do not request, and cannot obtain, the ability to read, search, modify, or delete anything in your mailbox.
• The tokens Google issues are stored encrypted and are used only to send on your behalf. They are never shared with or sold to anyone.
• You can disconnect at any time under Settings → Documents. Disconnecting revokes the grant with Google and deletes the tokens from our systems.

Tool Truck Direct's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• To run the service: record sales, track inventory, manage payment plans, print and email documents, and send the messages you ask us to send.
• To support you: respond to tickets and investigate errors.
• To keep the service secure and to prevent abuse.

We do not sell personal information, and we do not use your data or your customers' data for advertising.

Who we share information with

• Service providers that run parts of the service on our behalf: hosting, email delivery, text messaging, card processing (Stripe, Fortis), and file storage. They receive only what they need to do their job.
• Your customers, when you send them a document or message from TTD.
• Legal requirements, when required by law or to protect the rights and safety of TTD, its users, or others.

Retention and deletion

We keep business records for as long as the business account is active, because they are its books. When an account is closed, we delete or anonymize its data within a reasonable period, except where we must keep records to meet legal or financial obligations. Employees removed from a business lose access immediately.

Security

Data is encrypted in transit. Sensitive credentials, including processor keys and Google tokens, are encrypted at rest. Access to production systems is limited to the people who operate the service.

Cookies

We use a session cookie to keep you signed in and a CSRF cookie to protect forms. We do not use advertising or tracking cookies.

Changes

If this policy changes in a meaningful way, we will update the effective date above and notify business owners in the app.

Contact

Email mvposinfo@gmail.com with any question about this policy or your data.