Privacy Policy

We collect the following categories of information:

• Account information: your name and email address, obtained through Google sign-in when you create an account.
• Contact information: phone number and preferred contact method (email, text, or call), if you choose to provide them — used for service coordination, particularly for home visits.
• Device and service information: details about the device you bring in for service (make, model, serial number where provided), a description of the issue, and internal notes related to diagnosis and repair.
• Photos: images related to your ticket (e.g., documentation of device condition, screenshots of an issue) and, if you choose to leave a review, any photos you optionally submit with that review.
• Payment records: which payment method was used (Square, Zelle, or Apple Cash) and a reference/confirmation identifier for your payment. We do not store full card numbers, bank account details, or other raw payment credentials — Square handles card payment processing directly.
• Booking information: scheduled appointment times for home visits or sessions.
• Communications: messages and notes exchanged through the ticketing system in connection with your service.
• Technical information: we (and our service providers — see Section 4) may automatically collect technical information such as IP address, browser type, and request metadata, for security, fraud prevention, and troubleshooting purposes.

We process personal information only as reasonably necessary to provide the Services you request, comply with legal obligations, protect our legitimate business interests, or where you have otherwise provided consent. Specifically, we use the information above to:

• Create and manage your account and tickets.
• Diagnose and perform the services you request.
• Communicate with you about your tickets, bookings, and account, by email and, where provided, by text or phone.
• Process and record payment for services rendered.
• Maintain our own business and service records.
• Display reviews you choose to submit and approve for publication.
• Maintain the security, reliability, and proper functioning of the Services.

We use Google sign-in, provided through Supabase Auth, to authenticate your account. When you sign in, we receive basic profile information from Google (your name and email address) — we do not receive your Google password, and we do not access other Google account data (e.g., your Gmail, Drive, or Calendar) beyond what’s needed to identify your account.

We do not sell your personal information. We share information only with the following service providers, each of whom is contractually or operationally limited to using your information as necessary to provide their service to us, and each of whom maintains their own privacy practices for the infrastructure they operate:

• Supabase — database, file storage, and authentication.
• Resend — sending service-related emails (e.g., ticket updates, booking confirmations).
• Upstash — rate limiting and abuse prevention on public-facing forms; this involves minimal, largely non-identifying request data.
• Sentry — error tracking, to help us identify and fix technical issues. Error reports may include a ticket, customer, or admin identifier where relevant, to help us debug the specific issue that occurred.
• Vercel — website hosting, and collection of standard technical/server logs described in Section 1.
• Square — payment processing for in-person card transactions.

We use strictly necessary cookies to keep you signed in and to operate the Services (e.g., maintaining your login session). We use privacy-focused, cookieless analytics to understand aggregate website usage (such as which pages are visited) — this is not designed to identify you individually or track you across other websites. We do not use marketing or advertising tracking cookies at this time. If this changes in the future, this Policy will be updated accordingly.

Our website may contain links to third-party websites or services (for example, our YouTube channel, Instagram, or embedded maps). This Privacy Policy does not apply to those third-party sites, and we encourage you to review their own privacy policies.

We retain ticket and service records for our own business record-keeping (e.g., repair history, warranty tracking, dispute resolution) for as long as reasonably necessary for these purposes, even after a specific repair is complete. Certain information — including email correspondence retained in our business email records — may be kept where reasonably necessary to maintain service history, resolve disputes, enforce our agreements, or comply with legal obligations, even after an account is deleted. See Section 9 for how this interacts with account deletion, and Section 8 for how it interacts with our backups.

We maintain periodic backups of our systems for business continuity and disaster recovery. Because backups are retained as point-in-time snapshots, information that has been deleted from our live systems (including following an account deletion request) may still exist within a backup for a limited period — currently up to 90 days — before it is purged as part of our normal backup rotation. We do not use backup copies for any purpose other than restoring our systems if needed.

We take reasonable measures to protect your information, including relying on our service providers’ own security practices (e.g., Supabase’s database security and access controls). However, no internet-based service can guarantee absolute security, and we cannot guarantee the security of information transmitted to us.

You may request access to or correction of your personal information at any time by contacting us at support@hackittech.com. You may also request deletion of your account at any time through your account settings. When you do:

• Your personal identifiers (name, email, login/authentication identity, phone number) will be removed or anonymized.
• Photos associated with your account (e.g., review photos) will be removed from storage, unless they are required to document completed work for legal or warranty purposes, in which case they may be retained as part of an anonymized service record.
• Ticket and repair records will generally be retained in anonymized form — meaning the record of the service performed is kept for our own business continuity (e.g., repair history, warranty tracking), but it will no longer be linked to your personal identity.
• As described in Section 8, deleted information may persist in encrypted backups for a limited period before being purged.

If you would prefer a different outcome (e.g., full removal of a specific record) or have questions about this process, contact us at support@hackittech.com.

The Services are not directed to children, and account creation requires the account holder to be at least 18 years old (or a parent/guardian acting on behalf of a minor’s device, per our Terms of Service). We do not knowingly collect personal information directly from children.

If HackIt Tech is ever sold, merged, or reorganized, customer information may be transferred as part of that transaction. We would expect any such successor to remain bound by the terms of this Privacy Policy with respect to previously collected information, and would notify affected customers where practical.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date at the top of this document.

If you have questions about this Privacy Policy or how your information is handled, contact us at support@hackittech.com.