On this page
1Who we are
TintBoss is operated by TintBoss LLC ("TintBoss", "we", "us"). We provide a customer-relationship and shop-management platform for window tint and paint protection film businesses, available at tintboss.io and app.tintboss.io.
Questions about this policy, or about data we hold: support@tintboss.io.
2Two kinds of data, and why the difference matters
Almost every complaint about software privacy comes from blurring these two, so we'll be plain about it.
Data about the shop and its staff
When you sign up, we collect information about you and your business so the product can exist — your email, your name, your shop's details, your subscription. We decide how that information is used, within the limits of this policy. In privacy law terms, we are the controller.
Data the shop puts into TintBoss about its own customers
Your customer list, their vehicles, job notes, inspection photos — you entered that, it describes your relationship with your customers, and it stays yours. We hold and process it on your instructions so the software works. We are the processor; you are the controller. We do not decide what to do with it, we do not mine it, and we do not use it to serve any other shop.
Practically, this means
If a customer of yours asks you to delete their record, you can do it yourself in the app and it's gone from our live database. You don't need our permission and you don't need to open a ticket.
3What we collect
Account and identity
- Email address and password (stored only as a cryptographic hash — we cannot read your password).
- Your name and role in the shop (owner, manager, installer).
- If you sign in with Google: your Google account's name, email address and profile picture. Nothing else from your Google account is read at sign-in.
- The invite code used to create your shop, and which shop your account belongs to.
Shop profile
- Business name, address, phone, website, hours of operation, number of bays, logo.
- Service menu, pricing, film inventory, document templates and defaults you configure.
- Crew records and payroll rules you choose to store, such as pay rates and commission splits.
Billing
- Your plan, trial end date, subscription status, and billing history.
- Payment card details are handled entirely by Stripe. Card numbers never reach TintBoss servers and we never see or store them. We receive only what Stripe tells us: that a payment succeeded or failed, the card brand, and the last four digits.
What you enter about your customers
- Customer name, phone number, email address, and any notes you write.
- Vehicle details: year/make/model, colour, VIN and licence plate where you record them.
- Jobs, estimates, invoices, scheduling, bay assignment, installer assignment, film used, prices.
- Review requests: which channel you used, whether it was sent, the star rating a customer reported to you, and any private feedback they gave you instead of posting publicly.
Technical
- Standard server logs: IP address, browser type, pages requested, timestamps, and error traces.
- A session token in your browser's local storage so you stay signed in. TintBoss does not use advertising cookies and does not run third-party trackers or ad pixels in the application.
4Signatures, photos and location — read this one
The inspection feature collects more than the rest of the product, and you should know precisely what, because you are the one showing it to customers.
| What | When | Why |
|---|---|---|
| Photographs | Pre- and post-installation inspections | Evidence of vehicle condition. These may incidentally show licence plates, the vehicle interior, or people near the vehicle. |
| Damage markers | Inspections | Coordinates you tap on a vehicle diagram to mark existing damage. |
| Handwritten signature | When a customer signs off an inspection | Stored as an image, to show the customer agreed the vehicle's condition at that moment. |
| Approximate location | Captured with the signature, if your device permits it | Records where the sign-off happened. This strengthens the record against a chargeback claim. |
Your obligation, not ours
A signature and a location reading are personal information about your customer. Tell them what you're capturing before they sign — it takes one sentence and it is the honest thing to do. If your device asks for location permission and you decline, inspections still work; the location field is simply left empty.
5Why we use it
- To run the service — showing your jobs, generating documents, keeping your shop's data separate from every other shop's.
- To bill you — managing trials, subscriptions and renewals through Stripe.
- To support you — when you contact us with a problem, we may look at your account to diagnose it.
- To keep it working and secure — monitoring errors, investigating abuse, preventing fraud.
- To tell you things you need to know — service notices, security notices, billing notices, and material changes to these terms. You cannot opt out of these while you hold an account, because they are how we reach you about your own data. Marketing email is separate and you can unsubscribe from it at any time.
6Google account data
TintBoss can connect to your Google Business Profile so you can see and reply to your reviews without leaving the app. This is optional, entirely separate from signing in with Google, and off until you turn it on.
If you connect it, we request the business.manage scope and store a Google refresh token. That token lives in a database table with row-level security enabled and no read policy at all — meaning no signed-in session, including yours and including ours, can read it from the browser. Only our server-side function can use it. We store the reviews and rating history we pull down so they survive between syncs.
Google API Services Limited Use
TintBoss's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the features you asked for; we do not transfer it to others except as necessary to provide those features, for security purposes, or to comply with applicable law; we do not use it for advertising; and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised.
You can disconnect at any time from Settings in the app, which deletes the stored token immediately. You can also revoke TintBoss's access directly from your Google account permissions page, which cuts us off regardless of what our app does.
7Who else touches your data
We use a small number of vendors to run the service. Each one is listed here with what it actually sees. We do not add vendors quietly; if we add one that handles your data, we will update this table and note the change.
| Vendor | What it does | What it can see |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | Everything stored in TintBoss. This is where the application lives. |
| Stripe | Subscription payments | Your billing name, email, and card details. Stripe does not receive your customer records. |
| Sign-in, Business Profile, business lookup | Only what the feature requires: your identity at sign-in; your business listing and reviews if you connect a profile. | |
| Hostinger | Web hosting for tintboss.io and the app files | Server logs including IP addresses. Serves static files only; holds no shop records. |
We may also disclose information if we are legally required to — a subpoena, court order, or valid legal process — or where we believe in good faith that disclosure is necessary to prevent imminent harm. If we receive a legal demand for your data, we will tell you unless we are legally prohibited from doing so.
If TintBoss is ever acquired or merged, your data may transfer as part of that transaction. You would be notified before it happened and before any new privacy policy applied to you.
8What we never do
- We do not sell your data. Not to marketers, not to lead aggregators, not to anyone, on any terms.
- We do not rent, trade, or share your customer list with other TintBoss shops — including shops in your own market.
- We do not serve advertising in TintBoss, and we do not let anyone pay to reach you through it.
- We do not use your shop's data to build or improve products for anyone else.
9How it's protected
- Tenant isolation. Every record carries the shop it belongs to, and database-level row-level security enforces that boundary on every single query. It is not a filter applied by the app that a bug could skip — the database itself refuses to return another shop's rows.
- Encryption. All traffic runs over HTTPS/TLS. Data is encrypted at rest by our hosting provider.
- Role limits. Installers can see the jobs assigned to them without seeing pricing or the customer list. Owners and managers see more. Access follows the role you assign.
- Secrets stay server-side. API keys and Google tokens are never included in the browser bundle and never sent to your device.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If we discover a breach affecting your data, we will notify you promptly and tell you what we know, including what we don't yet know.
10How long we keep it
- While your account is active — as long as you keep it, since it's the working record of your business.
- If you stop paying — your account becomes read-only and your data is retained, not deleted. You can export it or resume at any time.
- If you close your account — we delete your shop's data within 60 days of your request, except where we must keep records longer for tax, accounting or legal reasons. Billing records are kept as long as the law requires.
- Backups — deleted data may persist in encrypted backups for up to 30 days after deletion from the live database, then ages out.
- Server logs — retained for a short operational period and then discarded.
11Your choices and rights
Depending on where you live, you may have legal rights over your personal information — including the right to access it, correct it, delete it, obtain a portable copy, and object to certain uses. Residents of Florida, California, and other states with consumer privacy statutes may have specific statutory rights.
Our position is simpler than the law requires: we will honour these requests from any TintBoss user, regardless of where you live. Email support@tintboss.io and we will respond within 30 days. We will not charge you, and we will not treat you differently for asking.
Most of it you can do yourself without asking us at all — edit or delete customer records in the app, disconnect Google in Settings, or export your data.
12If you're a customer of a shop that uses TintBoss
Your information is in TintBoss because the shop you did business with put it there. That shop controls it, not us. To see, correct or delete your information, contact the shop directly — they can do all of it themselves, immediately.
If you can't reach them, or they won't respond, write to support@tintboss.io and we will pass your request to them and follow up. We will not modify or delete a shop's records on a third party's say-so without verifying the request, because doing so on request alone would be its own security hole.
13Children
TintBoss is business software for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor's information has ended up in TintBoss, contact us and we will remove it.
14Changes to this policy
We may update this policy as the product changes. When we do, we will change the "Last updated" date at the top. If a change materially reduces your privacy protections or expands how we use your data, we will email account owners before it takes effect — not after.
15Contact
TintBoss LLC
Email: support@tintboss.io
Web: tintboss.io
See also our Terms of Service.