Privacy policy

1. Who we are

Obsidian Tint Pros (“Obsidian”, “we”) provides a customer-relationship, messaging, booking and supply platform to automotive window-tint businesses (“Shops”). This policy explains how we handle personal information on our website and in our service.

2. Two roles: controller and processor

• Website visitors and Shop account holders — we decide how this information is used (we are the controller).
• A Shop’s own customers (leads, vehicle owners who text a Shop) — the Shop decides how that information is used and we process it on the Shop’s behalf. Questions about that data should go to the Shop first.

3. Information we collect

• Demo requests: name, email, mobile number (optional), shop name, number of locations and your message.
• Account data: name, email, hashed password, role, sign-in times and IP address for security.
• Shop customer data processed for Shops: contact details, vehicle details, messages, appointments, payment status (card details are handled by Stripe and never stored by us).
• Lead data received from Meta (Facebook / Instagram) lead forms that a Shop connects.
• Technical data: device and browser information, logs and security events.

4. How we use it

• To provide, secure and support the service, and to respond to demo requests.
• To send text messages only where permitted (see section 5).
• To generate AI-assisted replies for Shops. Message content is sent to our AI provider (Anthropic) only to produce those replies, under terms that do not allow it to be used to train their models.
• To meet legal obligations and keep audit records.

We do not sell personal information.

5. Text messages (SMS) and consent — CASL & TCPA

• We, and Shops using our platform, send marketing or promotional text messages only to people who have given express consent. On our demo form, consent is a separate, unticked checkbox and is never required to submit the form.
• We keep a record of each consent: the exact wording shown, the time, the phone number and technical details of the submission.
• Reply STOP to any message to opt out; the opt-out is applied immediately and no further messages are sent except a single confirmation. Reply HELP for help.
• Message frequency varies. Message and data rates may apply.
• Canadian recipients: messages identify the sender and include an unsubscribe mechanism as required by Canada’s Anti-Spam Legislation (CASL).
• Mobile numbers and SMS opt-in data are not shared with third parties for their own marketing.

6. Service providers

We use trusted providers to run the service, including: hosting (Hostinger), messaging (Twilio), AI (Anthropic), payments (Stripe), lead capture (Meta) and email delivery. They may only use the data to provide their service to us.

7. Security and retention

• Each Shop’s data is isolated at the database level; access is role-based and logged.
• Integration tokens and secrets are encrypted at rest; connections use HTTPS.
• We keep data while an account is active and for a limited period afterwards for backups, legal and audit purposes, then delete or anonymise it.

8. Your rights

Depending on where you live (for example under Canadian PIPEDA or US state privacy laws) you may request access to, correction of, or deletion of your personal information, or withdraw consent. Contact us using the details below; we may need to verify your identity.

9. Contact

[Company legal name, mailing address and privacy contact email — to be completed before launch.]