Privacy Policy

This Privacy Policy explains how TinkerPro (“TinkerPro,” “we,” “us,” or “our”) handles personal information when you use the TinkerPro Support platform, including the website at support.tinkerpro.io and our related mobile applications for customers and employees (together, the “Services”). By using the Services, you agree to the practices described in this policy.

1. Information We Collect

We collect information that you provide directly, information generated as you use the Services, and information from your device.

Account & profile information

When you or your organization create an account, we collect your name, email address, phone number, role, profile photo, and login credentials (passwords are stored in hashed form). We may use email or one-time passcodes (OTP) to verify your identity.

Customer, client, and business records

The Services let authorized users create and manage support tickets, client records, projects, tasks, offers, licenses, and related documents. This may include contact details, business information, attachments, identification documents and images uploaded for verification, and any content you choose to submit. If you submit information about another person, you confirm you are authorized to do so.

Communications

We process the content of messages, chat conversations, voice/video calls, file shares, and feedback you exchange through the Services so that they can be delivered and stored as part of your support history.

Media you upload

Photos, scanned identification documents, PDFs, and other files you upload (for example, to register a client or attach to a ticket) are stored to provide the feature you requested.

Device & usage information

When you use the Services we automatically collect technical data such as IP address, device and operating-system type, app version, browser type, time zone, activity logs, and pages or features accessed. This helps us secure, operate, and improve the Services.

2. How We Use Information

We use personal information to:

• Provide, maintain, and operate the Services and your account;
• Authenticate users and keep accounts secure (including OTP and session protection);
• Deliver messages, calls, notifications, and file transfers;
• Process and manage tickets, clients, documents, licenses, and related records;
• Provide customer support and respond to your requests;
• Monitor, troubleshoot, and improve performance and reliability;
• Detect, prevent, and investigate fraud, abuse, and security incidents;
• Comply with legal obligations and enforce our terms.

We do not sell your personal information.

3. Mobile App Permissions

Our mobile apps may request the following device permissions. Each is used only for the stated purpose, and you can manage them in your device settings (disabling a permission may limit related features):

• Camera & Photos/Storage — to capture or upload identification documents, attachments, profile photos, and images for tickets or client records.
• Microphone — to make voice and video calls within the app.
• Notifications (Push) — to alert you about messages, tickets, calls, and account activity. We use Firebase Cloud Messaging to deliver these.
• Network & Connectivity — to sync data and enable realtime chat and calling.

4. How We Share Information

We share personal information only as needed to run the Services:

• Within your organization — authorized users (such as employees, administrators, and agents) can access records relevant to their role.
• Service providers — vendors who host infrastructure, deliver notifications, enable realtime messaging/calls, or send email on our behalf, under contractual confidentiality obligations.
• Legal & safety — when required by law, legal process, or to protect the rights, property, or safety of users, the public, or TinkerPro.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Third-Party Services

The Services rely on trusted third-party providers to function. These may include:

• Google Firebase Cloud Messaging — push notification delivery;
• Pusher / Soketi — realtime chat and call signaling;
• Email delivery providers — transactional and notification emails.

These providers process data under their own privacy policies. We encourage you to review their practices where relevant to you.

6. Cookies & Tracking

The web platform uses strictly necessary cookies to keep you signed in and to protect your session (these are set as HttpOnly with the SameSite=Strict attribute). We may also store limited preferences (such as your light/dark theme) locally in your browser. We do not use third-party advertising cookies.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. Records held on behalf of an organization are retained according to that organization’s instructions.

8. Data Security

We use technical and organizational safeguards to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, hardened session cookies, access controls, and security headers. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

9. Your Rights & Choices

Depending on your location, you may have the right to access, correct, update, or delete your personal information, object to or restrict certain processing, or request a copy of your data. To exercise these rights, contact us using the details below. If your data was provided to us by an organization that uses the Services, we may direct your request to that organization. You can also manage app permissions and notifications through your device settings.

10. Children’s Privacy

The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

11. International Transfers

Your information may be processed and stored in countries other than your own, where data-protection laws may differ. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.