Privacy Policy

1. Who this covers

This policy covers rextechsolution.com, auto-hail-pdr and related marketing pages, lead/demo-request forms, tawk.to chat, and the Storm-Ops SaaS application. It does not cover third-party sites you reach via links.

2. What we collect

A. You give us

• Contact & business info — name, company, email, phone, agents/volume/locations, plan interest, challenge notes (demo-request form).
• Messages — chat (tawk.to), email, phone notes.
• Storm-Ops tenant data (if you are a customer) — customers, vehicles, VINs, photos, claims, insurers, adjusters, estimates, repair orders, loaner assignments, payments, commissions, documents/signatures, and communications you store. You control what you put in; we do not mine it for advertising.
• Account info — login email, role, company association.

B. Automatic

• Device, browser, IP, approximate location, pages viewed, referrer, and timestamps — for security, abuse prevention, and aggregate analytics.
• Cookies / localStorage for session, preferences, and analytics (see §5).

C. We do NOT collect

We do not intentionally collect sensitive categories (e.g., health, biometric, or government IDs) via the marketing site. Storm-Ops tenants should not store such data unless required and authorized for their own lawful purpose.

3. How we use it

• To respond to demo inquiries, schedule walkthroughs, and provide support.
• To operate and improve Storm-Ops — tenant-isolated, per-company data, with RBAC and audit logs.
• To send service messages (e.g., onboarding, commission, or system updates) — not bulk marketing without consent.
• For security — rate limiting, auth, fraud/phishing detection, and to keep signed documents immutable.
• In aggregate, de-identified form to improve the product (never sold).

We do not sell your personal information.

4. Storm-Ops — tenant isolation & ownership

Storm-Ops is multi-tenant, single-instance. Every record carries company_id and is auto-scoped via BelongsToCompany + CompanyScope. Company A cannot query Company B without an audited super-admin escape hatch (scopeAllCompanies). Your tenant’s Customer / Vehicle / Claim / Estimate / RO / Payment / Loaner / Commission / Document data is your Customer Data under your SaaS agreement. RexTech retains the software, architecture, and brand (Storm-Ops IP). Encrypted secrets (e.g., integration tokens) are encrypted at rest and never shown in UI/logs. Signed/final documents capture signer, times, IP/UA (where available), version, method, and hash — stored immutably, not overwritable.

Legal sub-processors (hosting, email, chat, payments) are disclosed in your SaaS agreement. Integration connectors are provider-agnostic and built only via authorized APIs/file exchanges — never by scraping.

5. Cookies & analytics

We use essential cookies for login/session and preference, and — where you consent — analytics to understand site use. tawk.to sets its own chat cookies. You can block non-essential cookies in your browser; the site will still work, chat may be degraded. We do not use cross-site ad trackers.

6. When we share

We share only as needed to run the service:

• Service providers / sub-processors — hosting (Hostinger), email delivery, tawk.to chat, and — with your authorization — integrations you connect (CCC, QuickBooks, Stripe, Twilio, etc.) with minimal scopes, revocable and encrypted tokens. Each provider’s privacy policy applies on their side.
• Legal / safety — if required by law, subpoena, or to prevent fraud/harm.
• Business transfer — in a merger/acquisition, with notice.
• We do not share tenant PII with other tenants.

7. How long we keep it

Demo inquiries: as long as needed to respond and for honest record-keeping (typically 12–24 months), or until you ask us to delete. Storm-Ops tenant data: for the life of your subscription plus a reasonable backup-retention window, then purged per your data-deletion workflow and our retention policy. Backups are encrypted and not used for marketing.

8. Security

We use: tenant isolation, RBAC with server-side checks, MFA/2FA where enabled, encrypted secrets/fields where appropriate, secure sessions, signed URLs for private documents/photos, rate limiting, secure uploads, hardened error handling, and audit logging. No system is 100% secure — use strong passwords, keep MFA on, and limit who has Owner/Manager in Storm-Ops.

9. Your rights & choices

Depending on your region: you may request access, correction, deletion, or export of your personal information; to opt out of non-essential cookies; or to revoke an integration connection (Settings → Integrations → Disconnect — tokens are wiped). To exercise: email info@rextechsolution.com with subject “Privacy Request” and the email you used. We will verify you and respond promptly. We do not discriminate for exercising rights. Tenants exercise rights over their own Customer Data directly via Storm-Ops export/delete workflows.

10. Children

Our sites and Storm-Ops are for business use and not directed to children under 16. We do not knowingly collect data from children.

11. International transfers

We are based in the United States (RexTech Solution LLC, 7901 4th St N Ste 15643, St Petersburg, FL 33702). If you use the service from elsewhere, your data may be processed in the US, where laws may differ. Where required, we rely on consent or Standard Contractual Clauses with sub-processors.

12. Changes to this policy

We may update this policy to reflect product or legal changes. We will change the “Last updated” date and, for material changes, provide notice in-app or by email. Continued use after notice means you accept the updated policy.

13. Contact

RexTech Solution LLC — info@rextechsolution.com — (858) 223-9099 — 7901 4th St N Ste 15643, St Petersburg, FL 33702

Storm-Ops in-app: Settings → Integrations / Activity for audit, or email above for privacy requests.

Related

RexTech Solution · Storm-Ops · Explore Demo · Sign in

© 2026 RexTech Solution LLC · Storm-Ops is a product of RexTech Solution.