SalvageFlow Pro — Privacy Policy

Last updated: September 13, 2026

Overview

SalvageFlow Pro ("we", "us", "our") is a yard management platform used by salvage yards, scrap yards, and automotive recyclers, operated by FlowWorks. This Privacy Policy explains how we collect, use, store, and protect information. It applies to two groups:

  • Yard Operators — businesses that subscribe to SalvageFlow Pro and their staff members
  • Sellers — individuals whose information a yard operator enters into the platform when they sell materials or vehicles to that yard

Information We Collect

Yard Operator Information

When a business creates an account, we collect:

  • Business name, contact name, email address, and password/authentication credentials
  • Billing and subscription information (card details are processed by Stripe — we never store your full card number)
  • Yard configuration details: branding, pricing rates, scale settings, jurisdiction, and compliance settings

Seller Information (entered by Yard Operators)

Yards may record information about individuals who sell materials or vehicles, as required by metal-recycling and salvage laws:

  • Name, date of birth, address, and phone number
  • Government identification type, number, state, and photos (e.g., driver's license images)
  • Thumbprint records (where state law requires them)
  • Vehicle and material information: VINs, vehicle descriptions, material types, weights, and photos of materials or transactions
  • Transaction records: payout amounts, payment method, hold-period status, and signatures
  • Catalytic converter serial numbers and stolen-vehicle check results

We do not collect this information directly from Sellers — Yard Operators provide it while using the Service.

Technical Information

Standard log data such as IP address, browser type, and usage activity, used to operate and secure the Service.

How We Use Information

For Yard Operators

  • To provide the Service: ticketing, inventory, payouts, pricing tools, and reporting
  • To manage your subscription, billing, and plan usage
  • To send service notifications, account alerts, and support communications

For Seller Data

  • To generate and manage scrap tickets, payouts, and hold-period tracking on behalf of the Yard Operator
  • To support compliance record-keeping required by state metal-recycling, catalytic converter, and vehicle-dismantling laws
  • To prepare law-enforcement reports, NMVTIS tracking data, and export files for the Yard Operator's own filings
  • To run stolen-vehicle and serial-number checks where offered

Legal Basis for Processing

  • Contract — providing the Service to Yard Operators and their subscribed features
  • Legal obligation — supporting record-keeping and retention required by recycling and salvage regulations
  • Legitimate interests — securing the Service and preventing fraud or misuse

Data Sharing

We do not sell personal information. We share data only with:

  • Stripe — payment processing (PCI-compliant)
  • Google — account authentication services
  • Twilio (where enabled) — SMS message delivery to users or Sellers who have consented
  • Service providers — hosting and infrastructure (Base44) that process data on our instructions

We may disclose information when required by law, court order, or valid request from law enforcement, including records a Yard Operator has entered where disclosure is legally mandated.

Data Security

  • Data is encrypted in transit and at rest
  • Row-level access controls isolate each Yard Operator's data — one yard cannot access another yard's records
  • Access to personal data is restricted by role-based permissions
  • Card data is handled exclusively by Stripe; we never store full card numbers
  • Account access requires authenticated login; the platform is not publicly browsable

Data Retention

  • Yard Operator account data is retained while the subscription is active, and after cancellation as needed to preserve records, per our Terms of Service
  • Seller transaction records are retained according to the record-retention settings the Yard Operator configures and as required by applicable state and federal law (commonly 1–5 years for metal-recycling transactions; longer where required)
  • Retention periods vary by state — Yard Operators are responsible for setting retention appropriate to their jurisdiction

Your Rights

Yard Operators

You may access, correct, or export your business data through the Service, or by contacting support. On cancellation, your data is preserved but access is locked; export tools are available while your account is active.

Sellers

Your information is controlled by the yard where you transacted. To access, correct, or delete your personal information, contact the yard directly; they will work with us to fulfill legally permitted requests. Certain records (e.g., identification and transaction records) may be exempt from deletion where retention is required by law.

SMS Communications

Where a yard enables SMS features, users or Sellers may receive service-related messages (e.g., payout-ready notifications) only if they have provided consent. Standard rates apply. Recipients may opt out at any time by replying STOP or contacting the yard.

Children's Privacy

The Service is a business tool and is not directed to children under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted in the app with an updated "Last updated" date. Continued use constitutes acceptance.

Contact

Privacy questions: purdyman52@gmail.com