Privacy Policy

Last Updated: September 16, 2026

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you create an account and use the Platform:

Photos and voice input. When you choose to attach a photo, Flexr receives the selected image and uses it with the related job or conversation. When you enable voice input, your device's speech-recognition service processes microphone input, subject to device permissions and that service's settings, and the resulting text may be submitted to Flexr like a typed message. Speech recognition may use Apple, Google, or another device service and may involve processing away from the device. You can type instead and can change camera, photo, and microphone permissions in your device settings. Do not include payment numbers, passwords, identity documents, medical records, or unrelated information about other people in job photos or AI messages.

1.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain information:

• Device Information: Device type, model, operating system and version, app or Firebase installation identifiers, app version, language settings, and mobile network information. Flexr does not use this information for cross-app behavioral advertising.
• Location Information: With your permission, we collect precise location data (GPS coordinates) to match Clients with nearby Pros, determine job locations, and verify service areas. We also derive approximate location from your IP address.
• Usage Information: Pages and screens viewed, features used, actions taken, search queries, interaction patterns, session duration, timestamps, and referring sources
• Log Data: IP address, browser type and version, access times, pages viewed before and after visiting the Platform, and error/crash logs
• Push Notification Tokens: Device tokens used to deliver push notifications through Firebase Cloud Messaging

1.3 Information from Third Parties

We may receive information from third-party sources, including:

• Payment Processors: Transaction status, payment confirmations, fraud risk signals, and chargeback information from Stripe, Inc.
• Credential Sources: Public licensing records or official verification services may provide license status, classification, jurisdiction, or expiration information when we check a submitted credential.
• Review Platforms: If you request a review import, we may receive review content and ratings from third-party platforms (e.g., Google, Yelp, Thumbtack) that you authorize
• Analytics Providers: Aggregated and de-identified usage data and app performance metrics from analytics tools

2. How We Use Your Information

2.1 Core Platform Functions

• Creating, authenticating, and managing your account
• Matching Clients with eligible Pros based on location, service categories, availability, and applicable credential requirements
• Facilitating communication between Users regarding jobs
• Processing payments, refunds, authorization holds, payouts, tips, and invoices through our payment processor
• Administering recurring service plans, including requests, offers, acceptances, Client saved-payment consent, scheduled per-visit authorizations and captures, automatic base invoices, separately accepted extras invoices, Pro wallet and payouts, reminders, payment recovery, schedule changes, skips, pauses, cancellations, refunds, recurring problem holds, and plan endings
• Providing AI-assisted job scoping, pricing, categorization, and booking through FlexrAI
• Administering ordinary one-time-job disputes and the separate recurring-visit problem-review process
• Displaying Pro profiles, reviews, ratings, and verification status to Clients
• Sending transactional notifications related to jobs, payments, and account activity

2.2 Platform Improvement and Development

• Analyzing usage patterns and trends to improve features, user experience, and Platform performance
• Testing and improving Flexr's prompts, pricing rules, safety checks, booking workflows, and evaluation systems using conversation and booking outcome data, which may be minimized, anonymized, or aggregated where appropriate
• Conducting internal research and analytics to develop new features and services
• Debugging, testing, and troubleshooting technical issues

2.3 Safety, Security, and Platform Integrity

• Detecting, investigating, and preventing fraud, abuse, unauthorized access, and other harmful activity
• Monitoring for violations of our Terms of Use, including off-platform transaction solicitation
• Enforcing our Terms of Use and other policies
• Protecting the rights, property, and safety of Flexr, our Users, and the public
• Verifying User identity and preventing duplicate or fraudulent accounts

2.4 Communications

• Sending transactional notifications (job and recurring-schedule updates, payment confirmations, authorization reminders, failed-payment notices, ordinary dispute or recurring problem alerts, invoice notices, plan-change notices, retainable acceptance acknowledgements, and annual or other legally required recurring-service notices)
• Sending service-related announcements (policy changes, Terms updates, maintenance notices, security alerts)
• Sending promotional communications about new features, services, or offers (you can opt out of these at any time)
• Responding to your support requests, inquiries, and feedback

2.5 Legal Compliance

• Complying with applicable laws, regulations, and legal processes
• Generating tax information reporting forms (e.g., IRS Form 1099) as required by law
• Responding to lawful requests from governmental authorities
• Establishing, exercising, or defending legal claims

3. How We Share Your Information

3.1 With Other Users

When you use the Platform, certain information is shared with other Users as necessary to facilitate services:

• Client to Pro: Eligible Pros browsing available jobs can see the posted scope, notes, job photos, scheduling and pricing information, limited Client profile information, and approximate service location. The matched Pro can also see the job site address and the messages exchanged with them. Do not put door codes, private contact information, or other sensitive access instructions in a public job description, photo, or browsing note; provide necessary access details to the matched Pro through the appropriate private channel.
• Pro to Client: Clients can see the Pro's name, profile photo, bio, service categories, reviews, ratings, verification badges, and in-app messages.
• Recurring service: Matched Clients and Pros can see the recurring request or offer, accepted scope, proposed and accepted schedule, Pro price, Client total, Service fee, visit and invoice status, and relevant change, add, restore, skip, cancellation, completion, payment-readiness, or problem-review status. When a problem is reported, the other party may see the affected visit, problem category, and details the reporting Client submits. Flexr does not disclose either party's full payment card number to the other party.
• Contact information (phone number) may be shared between matched Users to facilitate service delivery for active jobs.

3.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect your data:

• Payment Processing (Stripe, Inc.): Processes Client payments, recurring Client payment methods and per-visit authorizations, refunds, Pro payouts, and ordinary one-time-job holds where applicable. Stripe receives financial and transaction data necessary for payment processing. Stripe's privacy policy is available at stripe.com/privacy.
• AI Services (OpenAI and Anthropic): Customer messages, photos or image-derived facts, confirmed scope, location context, and related booking evidence may be transmitted to OpenAI and Anthropic to provide AI-assisted scoping, categorization, safety review, and independent pricing checks. In addition, when an authorized Flexr administrator uses Flexr Eye/AdminAI, the administrator's prompt and the selected account, job, recurring-plan, visit, payment-status, support, safety, audit, or operational records needed to answer it may be transmitted to OpenAI for administrative support, reconciliation, and issue investigation. Flexr limits the selected records to what is reasonably relevant to the administrator's request. Their privacy information is available at openai.com/privacy and anthropic.com/legal/privacy.
• Cloud Infrastructure (Amazon Web Services): Our production and development servers, files, and databases are hosted using Amazon Web Services.
• Push Notifications (Firebase/Google): Device tokens and notification content are processed through Firebase Cloud Messaging.
• Restricted Administrative Alerts (Telegram): Flexr uses the Telegram Bot API to deliver access-restricted operational alerts to authorized Flexr administrators. Depending on the event, an alert may contain a Client or Pro name and phone number, job or recurring-plan title, visit schedule, transaction amount or status, internal job/plan/visit identifiers, and a link to the applicable admin record. These alerts are used for payment, safety, support, fraud, notification-delivery, and recurring-service monitoring and are not sent to public groups or used for advertising. Telegram's privacy policy is available at telegram.org/privacy.
• SMS & Phone Verification (Twilio): Your phone number is processed through Twilio, Inc. to send one-time verification passcodes (OTP) and SMS notifications. Twilio's privacy policy is available at twilio.com/legal/privacy.
• Maps and Geocoding (Google): Job addresses and location data are processed through Google Maps APIs for address lookup, geocoding, and map display.
• Analytics: Where enabled, we use Firebase/Google analytics and app-performance tools to understand how Users interact with the Platform. These tools may collect app, device, and usage information.
• Website Email Forms (FormSubmit): If you submit an email address through a flexr.co signup form, FormSubmit processes the form so it can be delivered to Flexr. You may instead contact us directly without using that form.

These providers process information under their applicable contracts, data-protection terms, and privacy policies. We configure and limit disclosures to what is reasonably necessary for the service, restrict access within Flexr, and review provider access and use as part of our security and vendor-management practices.

3.3 For Legal and Safety Reasons

We may disclose your information if we believe in good faith that disclosure is reasonably necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request
• Enforce our Terms of Use, including investigating potential violations
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of Flexr, our Users, or the public as required or permitted by law
• Respond to a subpoena, court order, or similar legal process

3.4 Business Transfers

If Flexr, Inc. is involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, dissolution, or sale of all or a portion of its assets, your information may be transferred, sold, or shared as part of that transaction. We will notify you (for example, via email and/or a prominent notice on the Platform) of any change in ownership or uses of your personal information and any choices you may have.

3.5 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose, including research, analytics, marketing, and business development.

3.6 With Your Consent

We may share your information for other purposes with your explicit consent or at your direction.

3.7 What We Do Not Do

• We do not sell your personal information to third parties for their marketing or advertising purposes, and we have not done so in the preceding twelve (12) months.
• We do not share your personal information for cross-context behavioral advertising.
• We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law.

4. Cookies and Tracking Technologies

Our website may use cookies, local storage, and similar technologies. The mobile app uses app storage, authentication tokens, Firebase installation identifiers, and SDK-provided diagnostics rather than browser cookies. These technologies help us:

• Remember your preferences and settings
• Authenticate your identity and maintain your session
• Analyze usage patterns and improve the Platform
• Detect and prevent fraud and abuse

4.1 Your Choices

You can control website cookies in your browser and mobile permissions, notifications, and location access in your device settings. Disabling required storage, notifications, or permissions may limit certain Platform functions. Flexr does not use personal information for cross-app behavioral advertising.

4.2 Do Not Track

Some browsers send "Do Not Track" (DNT) signals. There is currently no industry standard for how companies should respond to DNT signals. At this time, the Platform does not respond to DNT signals, but we do not track your activity across third-party websites.

5. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Access controls and storage protections designed to safeguard stored data
• Payment processing through PCI DSS-compliant third-party processors (Flexr does not store full payment card numbers)
• Role-based access controls limiting employee and contractor access to personal information on a need-to-know basis
• Regular security monitoring and incident response procedures

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information using commercially reasonable measures, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials.

6. Data Retention

We retain personal information only for as long as reasonably necessary to provide services, complete transactions, meet legal and tax obligations, resolve disputes and chargebacks, prevent fraud and abuse, enforce agreements, and maintain security. Retention depends on the type of record and why it is needed:

• Account and public profile data: Retained while the account is active. After deletion, login identifiers and direct profile information are deleted or anonymized, subject to the exceptions below.
• Transaction and payment records: Retained for the period needed for tax, accounting, payment-network, chargeback, fraud-prevention, and legal obligations.
• Recurring plan, consent, and payment records: Active plan terms, Client payment consent, future schedule data, visit history, base and extras invoices, payment-recovery events, and unresolved administrative holds are retained while needed to operate the plan and resolve its transactions. Ending the plan or deleting the account revokes authority for future recurring-plan charges and cancels future unfunded visits; it does not delete or reverse a captured visit, paid invoice, confirmed completed-service obligation, chargeback, or unresolved problem hold. Flexr may retain the accepted terms, disclosure and affirmative-consent evidence, cancellation acknowledgement, schedule-change history, problem reports, and related payment records as reasonably necessary to document authorization, comply with recurring-service recordkeeping requirements, resolve claims and chargebacks, prevent fraud or duplicate charges, and meet accounting or legal obligations.
• Job messages, job photos, and AI conversations: Retained while needed to operate the booking and, after completion or deletion, when reasonably necessary for transaction history, safety, fraud prevention, chargebacks, disputes, or legal claims. De-identified or aggregated information may be retained for analytics and service improvement.
• Job records: Retained while needed for transaction history, tax, accounting, dispute, chargeback, safety, fraud-prevention, and legal purposes.
• Support communications: Retained while needed to answer the request and, when applicable, to document an unresolved claim, safety matter, or legal obligation.
• Administrative operations, AI-assistant, and alert records: Administrator prompts, selected operational context, AI responses, administrative audit logs, and alert-delivery records are retained while reasonably needed for support, payment reconciliation, security, quality review, fraud prevention, legal compliance, and accountability. Telegram or another provider may retain delivered alert content under its own policies and account settings.
• Log and device data: Retained while reasonably needed for security, diagnostics, abuse prevention, fraud prevention, or a legal matter.

When personal information is no longer needed for any legitimate purpose, we securely delete or anonymize it in accordance with our data retention procedures.

Drafts, device storage, and retained copies. The app may save a finalized quote, its conversation, photo references, and scheduling progress on your device to recover an interrupted booking. Saving a draft does not book or pay for a job. Discarding a device draft does not also delete related server-side booking, support, or audit records. Deletion of active records does not necessarily immediately remove copies retained in backups, legally required transaction records, or another User's own copy of a message or invoice. Those records remain subject to the purpose and retention limits above. Contact privacy@flexr.co for a request covering records beyond the app's account controls.

7. Your Rights and Choices

7.1 All Users

Regardless of where you live, you can:

• Access and update certain profile and account information through the app, and contact privacy or support for information that is not editable in the app
• Opt out of promotional and marketing communications through your notification settings or by following the unsubscribe instructions in any promotional message
• Control location permissions through your device's operating system settings (note: disabling location may limit Platform functionality)
• Manage recurring service in the app by changing a Client payment method, proposing schedule or plan changes, adding or restoring a visit where available, skipping an eligible visit, pausing a plan, ending a plan, and revoking authority for future recurring-plan charges. During a completed recurring visit's 24-hour review period, the Client may use Report a problem to pause still-protected funds. Ending future service does not reverse a captured visit, paid extras invoice, or confirmed completed-service payment obligation, which remains subject to the applicable cancellation, refund, invoice, or recurring problem-review rules.
• Delete your account in the app's account menu or through flexr.co/delete-account. Deletion is subject to limited legal, tax, transaction, dispute, safety, fraud-prevention, and security retention exceptions described above.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions (e.g., completing transactions, complying with legal obligations, security, debugging).
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: Flexr does not sell your personal information and does not share it for cross-context behavioral advertising. If our practices change, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" mechanism.
• Right to Limit Use of Sensitive Information: You may request that we limit our use and disclosure of sensitive personal information to purposes permitted under CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your rights.

To exercise these rights, contact us at privacy@flexr.co or through the app's support feature. We will verify your identity using your account information before processing your request. You may designate an authorized agent to make requests on your behalf by providing written authorization.

We will respond to verifiable consumer requests within 45 days. In some cases, we may need an additional 45 days, in which case we will notify you of the extension and the reason for it.

7.3 Categories of Personal Information (CCPA Disclosure)

In the preceding twelve (12) months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email, phone number, IP address, device identifiers)
• Personal information under Cal. Civ. Code 1798.80(e) (name, address, phone, financial information)
• Commercial information (transaction history, services purchased or provided)
• Customer records and service-plan information (recurring schedules, requests, offers, acceptances, Client payment consent, and consent records)
• Support and administrative operations information (problem reports, administrative holds, audit events, operational alerts, and administrator AI-assistant prompts or responses that relate to an account or transaction)
• Internet or electronic network activity (usage data, interaction with Platform)
• Geolocation data (precise GPS coordinates with permission, approximate location from IP)
• Professional or employment-related information (for Pros: licenses, insurance, service categories)
• Inferences drawn from the above (e.g., service preferences, location patterns)

7.4 Other State Privacy Laws

This Policy applies to Users throughout the United States wherever Flexr is available. Depending on your state, the information involved, and whether the relevant law applies to Flexr, you may have rights to confirm processing, access, correct or delete information, obtain a portable copy, learn about disclosures, and opt out of sales, targeted advertising, or certain profiling or automated decisions. You may also have rights concerning sensitive information, withdrawal of consent, and use of an authorized agent. We do not sell personal information or share it for cross-context behavioral advertising. A right described for one state does not limit a different or additional right under another applicable law.

To exercise a right, email privacy@flexr.co with the subject "Privacy Rights Request." We may verify your identity or an agent's authority using information reasonably necessary for the request; do not send sensitive identity documents unless we provide an appropriate method. We will respond within the applicable legal deadline, explain any permitted extension or denial, and provide requests without charge unless a charge is permitted by law. If we deny a request, you may appeal by replying with the subject "Privacy Request Appeal." We will explain the result within the applicable deadline and provide information about contacting the relevant state regulator where required. We will not unlawfully discriminate or retaliate against you for exercising your rights.

8. Location Information

Location data is essential to how Flexr works — matching Clients with nearby Pros and determining job sites. We collect and use location information as follows:

• Precise location (GPS): Collected only with your explicit device-level permission when you use the app. Used for job matching, service area determination, and displaying nearby job opportunities. You can revoke location permission at any time through your device settings, but core Platform features (posting jobs, accepting nearby jobs) may not function properly without location access.
• Job site addresses: Collected when Clients post jobs and stored as part of the job record. Shared with the Pro who accepts the job.
• Approximate location: Derived from your IP address for general functionality, fraud prevention, and regional service availability. This does not require your permission and cannot be disabled.

We do not sell location data to third parties. We do not track your location when you are not actively using the app.

9. AI and Automated Processing

Flexr uses artificial intelligence and automated processing in several ways:

• FlexrAI Chat and Pricing: Conversations with FlexrAI are processed by OpenAI for booking and scope collection. Customer messages, confirmed scope, relevant photo content or derived image facts, and related booking evidence may also be processed independently by OpenAI and Anthropic for pricing, job-type, listing, routing, and safety checks. We store booking conversations as described in Section 6.
• Flexr Eye/AdminAI: Authorized Flexr administrators may use an OpenAI-powered assistant to retrieve and summarize selected operational records, explain the current state of a job or recurring visit, and identify available administrative tools. The administrator's prompt and the records reasonably relevant to that request may be processed by OpenAI. The assistant does not itself authorize a payment, refund, cancellation, account action, or other state-changing decision; an authorized administrator must use the applicable audited Platform control.
• Job Classification: AI assists in automatically determining whether a job should be classified as fixed-price or estimate-based, based on the nature of the work described.
• Pricing: AI-assisted pricing uses regional rate information, task-specific benchmarks, booking evidence, and independent model checks. Before confirmation, results are suggestions. Confirmed bookings, Pro review, revised-price approval, and any fixed-to-estimate correction are governed by Sections 3.3 and 3.4 of the Terms of Use. Estimate ranges are not guarantees; using AI or agreeing to this Policy does not authorize an additional charge.
• Job Matching: Automated systems match jobs with Pros based on service categories, location, availability, and other criteria.
• Platform Integrity: Automated systems may monitor Platform activity for potential Terms of Use violations, including off-platform transaction solicitation.

These automated processes can affect the quote, job classification, matching, and Platform eligibility you see, and they can make mistakes. Contact in-app support or privacy@flexr.co to request human review of a decision, correct underlying information, or exercise an applicable privacy right. Providing this Policy is not a substitute for any separate consent or opt-out that applicable law requires. Requesting review does not itself pause an active booking, payment, or dispute deadline; contact support promptly if a transaction also needs attention.

10. Children's Privacy

The Platform is intended for adults age 18 and older, and we do not knowingly permit minors to maintain accounts or directly submit information as Users. Adult Users should avoid including identifiable children or unnecessary information about children in job photos and messages. If we learn that a minor has directly provided personal information without legally valid authorization, we will take appropriate steps to remove the account and delete the information, subject to limited legal or security retention requirements. Contact privacy@flexr.co if you believe a child has used the Platform or you have a concern about a child's information.

11. Third-Party Links and Services

The Platform may contain links to, or integrations with, third-party websites, applications, or services that are not owned or controlled by Flexr. This Privacy Policy applies only to information collected by Flexr through the Platform. We are not responsible for the privacy practices, content, or security of any third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform.

12. International Data Transfers

Flexr, Inc. is based in the United States. Your information may be transferred to, stored, and processed in the United States or other countries where our servers or service providers operate. These countries may have data protection laws that differ from those where you live. Where applicable law requires a transfer safeguard or separate consent, we must satisfy that requirement; simply using the Platform is not a waiver of it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Depending on the significance of the change and applicable law, we will provide notice through one or more of the following methods:

• Posting the updated Policy on the Platform with a revised "Last Updated" date
• Sending a push notification or email for significant changes
• Displaying an in-app notice when you next open the app after a material change

We encourage you to review this Policy periodically. We will obtain separate consent before a materially different use of previously collected information when applicable law requires it; a posted update or continued use alone does not supply that consent. You may exercise your applicable privacy rights or request account deletion through the app or flexr.co/delete-account, subject to the retention exceptions described above.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Flexr, Inc.
32 N Gould St
Sheridan, WY 82801
Email: privacy@flexr.co
Website: www.flexr.co

For privacy rights requests (access, deletion, correction, opt-out), use the in-app deletion control, visit flexr.co/delete-account, or email privacy@flexr.co with the subject line "Privacy Rights Request." Include enough information for us to verify and complete your request; do not email a Social Security number, full payment number, password, or identity document. We will respond within the timeframes required by applicable law.