Privacy Policy

Last updated: February 18, 2026

Flush ("we," "our," or "us") operates the Flush field service management platform available at flush.works and related subdomains (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.

1. Information We Collect

Account Information

When you create an account, we collect:

Name and email address
Phone number(s)
Business name and address
Role within your organization (administrator, dispatcher, technician, etc.)
Password (stored in hashed form)

Customer Data

When you use the Service to manage your business, you may store information about your customers including names, addresses, phone numbers, email addresses, service history, and payment information. You are the data controller for your customer data, and we process it on your behalf.

Communication Data

We collect information related to communications sent through the Service, including:

SMS text messages sent to and received from customers and technicians
Phone call metadata (call duration, timestamps, phone numbers)
Email communications (invoices, receipts, notifications)
In-app messages between team members

SMS and Phone Number Data

Our Service uses SMS messaging to facilitate communication between your business, your technicians, and your customers. When SMS features are used, we collect and store phone numbers, message content, delivery status, and opt-in/opt-out preferences. We comply with the Telephone Consumer Protection Act (TCPA) and all applicable telecommunications regulations regarding SMS communications.

Location Data

With your consent, we collect GPS location data from technician devices for dispatch tracking, clock-in/out verification, and service area management. Location data is only collected while the technician is clocked in to their shift.

Payment Information

Payment processing is handled by Stripe, Inc. We do not directly store credit card numbers. Stripe's privacy policy governs the handling of payment card data. We store transaction records including amounts, dates, and payment method types.

Usage Data

We automatically collect information about how you interact with the Service, including IP address, browser type, device information, pages visited, and actions taken within the platform.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Process transactions and send related information (invoices, receipts, confirmations)
Send SMS notifications including appointment reminders, dispatch alerts, and payment confirmations
Facilitate communication between your business, technicians, and customers
Provide customer support and respond to inquiries
Monitor and analyze usage patterns to improve the Service
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

3. SMS Messaging Privacy

Flush sends SMS messages on behalf of businesses using our platform. These messages may include appointment reminders, dispatch notifications, payment links, quote approvals, and service updates. Recipients can opt out of SMS communications at any time by replying STOP to any message. We honor all opt-out requests immediately and maintain opt-out records to prevent future messages to those numbers.

We do not sell, share, or use phone numbers or SMS message content for marketing purposes unrelated to the Service. SMS data is used solely to facilitate the field service operations of our customers' businesses.

SMS messages are transmitted via Twilio; see Twilio's privacy policy at twilio.com/legal/privacy.

4. Data Sharing and Disclosure

We may share your information with:

Service providers: Third-party vendors who assist in operating the Service (Supabase for database hosting, Stripe for payments, Twilio for SMS and voice, Resend for email delivery, Cloudflare for hosting and security).
Your organization: Information is shared within your organization as necessary for the Service to function (e.g., dispatchers can see technician locations, administrators can view all business data).
Legal requirements: When required by law, subpoena, or other legal process, or to protect our rights and the safety of our users.

We do not sell your personal information to third parties. We do not share SMS opt-in data or consent status with third parties for their marketing purposes.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest, row-level security policies, and role-based access controls. All data is hosted on secure cloud infrastructure with SOC 2 compliance.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Business records (invoices, job history, payment records) are retained in accordance with applicable tax and business record-keeping requirements. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate data
Request deletion of your data
Opt out of SMS communications by replying STOP
Withdraw consent for location tracking
Export your data in a portable format

8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@flush.works
Website: flush.works