1. Who we are and what this policy covers
RecoverFlow is operated by PurposeBuilt Capital LLC ("RecoverFlow," "we," "us," or "our"). This Privacy Policy explains how we collect, use, and disclose information through our website, business software, support, and messaging programs.
Business customers may enter or upload information about their own customers. For that information, we provide services on the business customer's behalf and follow its authorized instructions, subject to applicable law. The business is responsible for its own privacy notices and lawful collection and use of customer information. This policy also describes information we handle for our own account administration, security, and support purposes.
2. Information we collect
Account and business information: names, business email addresses, account identifiers, business or workspace details, user roles, contact details, and information supplied during setup or support requests.
Customer, estimate, and import information: customer names and contact information, phone numbers, email addresses, estimate descriptions, dates, amounts and statuses, spreadsheet contents and field mappings, import-review decisions, and records entered manually or uploaded by business users.
Recovery and messaging information: recovery opportunities, activity and outcome records, permission and consent records, opt-in and opt-out information, suppression records, outbound and inbound SMS content, delivery information, and related audit records when these features are used.
Technical information: IP addresses, browser and device information, request and activity timestamps, authentication activity, error reports, and security logs. Cookies or similar storage may be used for authentication, session continuity, and essential functionality. We also receive information you choose to provide when contacting us.
Please do not upload payment-card details, government identification numbers, medical records, or other highly sensitive information that is not needed for the service.
3. How we use information
We use information to provide accounts and workspaces; process imports and manual entries; organize estimates and recovery opportunities; record reviews and outcomes; provide authorized messaging features; maintain consent and opt-out records; respond to support requests; and communicate about the service.
We also use information to diagnose errors, improve reliability, prevent fraud and unauthorized access, enforce our terms, maintain audit records, and meet legal obligations. Uploading a phone number does not establish messaging consent, ownership of that number, or eligibility to receive messages.
5. SMS and mobile privacy
Mobile information, SMS opt-in data, and messaging consent are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.
RecoverFlow may provide such information to service providers acting on RecoverFlow's behalf solely as necessary to provide messaging and related services. This does not authorize those providers to use it for their own marketing or promotional purposes.
The current RecoverFlow SMS program is for internal product-development and quality-assurance testing with consenting RecoverFlow test participants. Participation is voluntary. Testers explicitly agree to this specific messaging program before being added to the server-side allowlist. Allowlisting alone is not consent. This internal testing campaign is not used to send marketing or promotional messages to HVAC customers, contractors' customers, or other third-party consumers.
Message frequency varies. Message and data rates may apply. Recipients may reply STOP to opt out. SMS consent is not a condition of purchasing unrelated RecoverFlow services. We may retain limited consent and suppression records to document permission and honor opt-outs. For help, reply HELP or contact support@recoverflow.co. See the SMS Messaging Terms in our Terms of Service.
6. Retention and deletion
We retain information for as long as reasonably needed to provide the service, follow authorized business instructions, maintain security and audit records, resolve disputes, and meet legal obligations. Retention depends on the type of information and the purpose for which it is held; this policy does not promise a single fixed retention period.
Deletion requests are subject to applicable legal requirements and legitimate retention needs, including records needed to honor opt-outs. Information in backups may remain until those backups are replaced or expire under the applicable backup process. Contact us to request deletion or discuss retention for your workspace.
7. Security and processing locations
We use safeguards intended to protect information, including access restrictions and controls designed to separate business workspaces. No system or transmission method is completely secure. Keep your account credentials private and report suspected unauthorized access promptly.
RecoverFlow and its service providers may process information in the United States and other locations where they operate. Applicable privacy protections may differ by location. Where legally required, appropriate safeguards must apply to international transfers.
8. Your choices and privacy requests
Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your information, or to object to or restrict certain processing. Contact support@recoverflow.co to make a request. We may need to verify your authority or identity in a proportionate way before responding. Do not send passwords or sensitive documents in an initial request.
If your information was provided by a contractor or other business using RecoverFlow, contact that business first. We can help route requests and assist the business as appropriate. Some information may need to be retained as described above. You may also have the right to raise a concern with your local privacy regulator.
9. Children's privacy
RecoverFlow is a business service intended for users who are at least 18 years old and is not directed to children. We do not knowingly solicit personal information directly from children. If you believe information about a child has been provided to RecoverFlow inappropriately, contact support@recoverflow.co so we can investigate and take appropriate action.
10. Changes and contact
We may update this policy as the service or applicable requirements change. We will post the revised policy with an updated effective date and provide additional notice when required by law.
For privacy questions or requests, contact PurposeBuilt Capital LLC, operator of RecoverFlow, at support@recoverflow.co.