Data Protection & Privacy

Privacy Policy

1. Overview & Scope

This Privacy Policy explains how Pie Bytes Mobile Technology Services ("Pie Bytes", "we", "us", or "our") collects, uses, protects, and discloses personal information when you visit piebytes.com, book a diagnostic house call, utilize our customer portal, or contract for managed business IT services.

2. Categories of Information We Collect

We collect information strictly necessary to provide professional electronics diagnostics, repair services, and customer communication:

• Contact & Dispatch Details: Full name, physical street address (for mobile house calls in Henderson County), telephone number, and email address.
• Hardware & Service Data: Device make, model, serial number, operating system version, reported symptoms, diagnostic findings, and technician notes.
• Account Authentication Credentials: Email addresses and passwords (stored exclusively as one-way salted PBKDF2 SHA-256 cryptographic hashes). We do not store plaintext passwords.
• Billing & Payment Information: Payment transactions are processed directly via Square, Inc. Pie Bytes never collects, processes, or stores your raw credit card number, expiration date, or CVV security code.
• Google Identity Information: If you choose to authenticate via "Sign In with Google", we receive your verified Google email address, full name, and avatar URL in accordance with Google API Services User Data Policy.

3. Zero-Retention Bench Protocol for Customer Files

When diagnosing or repairing computers, laptops, and storage drives:

• Technicians access user folders solely to the minimum extent required to complete authorized repair services (e.g., verifying user profile stability or executing virus removal).
• We never copy, browse, catalog, or archive personal photos, documents, financial records, or browser histories to external media without explicit customer instruction.
• Any temporary diagnostic administrator passwords provided are purged immediately upon work order completion.

4. TCR 10DLC Mobile Messaging & SMS Consent Compliance

Pie Bytes utilizes SMS text messaging exclusively for transactional service updates (such as appointment arrival confirmations, diagnostic estimates ready for review, invoice payment confirmations, and warranty status reminders).

You may opt out of SMS communications at any time by replying STOP to any message, or reply HELP for assistance. Message frequency varies based on active repair status. Standard message and data rates may apply.

5. How We Use Your Information

We use collected data exclusively for genuine business purposes:

• Scheduling and dispatching mobile on-site service appointments.
• Managing Digital Chain of Custody tracking and 90-day workmanship warranties.
• Delivering itemized service receipts and diagnostic work order documentation.
• Sending 6-digit one-time password (OTP) verification codes for portal account activation.
• Preventing fraudulent access to customer accounts and workshop tools.

6. Zero Sale of Personal Data

Pie Bytes does not sell, rent, license, or monetize your personal information to third-party data brokers, marketers, or advertisers. We do not engage in cross-context behavioral advertising.

7. Service Providers & Third-Party Processors

We share data only with trusted infrastructure providers strictly required to operate our mobile services:

• Cloudflare: Secure edge CDN hosting, DDoS mitigation, and encrypted D1 database storage.
• Square, Inc. (PCI-DSS SAQ A): Certified PCI-DSS Level 1 payment processor. Pie Bytes operates under PCI-DSS Merchant Self-Assessment Questionnaire A (SAQ A) by delegating all cardholder data handling directly to Square's hosted tokenization iframes; raw credit card numbers and CVVs never pass through or reside on Pie Bytes servers.
• MailChannels & Resend: Transactional email delivery for OTP verification codes and invoice PDFs.
• Google Identity Services: Optional single-sign-on (SSO) authentication. Pie Bytes' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your Privacy Rights (CCPA / CPRA & State Laws)

Regardless of your geographic location, Pie Bytes extends the following rights to all customers:

• Right to Know & Access: You may request a complete summary of all personal information and repair tickets associated with your account by emailing [email protected] (Data Access Request).
• Right to Correction: You may update your profile contact details directly via the Customer Portal (piebytes.com/account.html).
• Right to Deletion: You may permanently delete your portal account profile directly within account settings or submit a request to erase all customer dispatch records by emailing [email protected] (Data Deletion Request).
• Right to Non-Discrimination: We will never deny service, charge different prices, or provide different service tiers based upon the exercise of your statutory privacy rights.

9. Cookies & Local Storage

Pie Bytes uses browser localStorage strictly for maintaining active authentication sessions (JWT tokens) and user UI preferences. We do not use persistent third-party advertising cookies or tracking pixels.

10. Do Not Track (DNT) & Global Privacy Control (GPC) Signals (CalOPPA Compliance)

Under the California Online Privacy Protection Act (CalOPPA) and related state laws, websites must disclose how they respond to browser "Do Not Track" (DNT) and Global Privacy Control (GPC) signals. Because Pie Bytes does not track visitors across third-party websites or engage in behavioral cross-context advertising, our services are inherently non-tracking. Furthermore, when our systems detect an enabled Global Privacy Control (GPC) signal, any optional telemetry or analytics are automatically suppressed.

11. Children's Privacy (COPPA)

Our services are directed to adults and authorized business operators. We do not knowingly collect personal information from individuals under the age of 13.

12. Contact Our Privacy Officer

If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact our workshop: