Privacy Statement
Last updated: August 29, 2026
This Privacy Statement outlines how BOLT XLR collects, uses, and protects the data generated within our restoration management platform, including our web application and our iOS and Android mobile apps. Because BOLT XLR handles sensitive financial, location, and operational data, we keep each company's information separate and handle it securely.
1. Information We Collect
We collect information necessary to provide restoration cost-tracking and project management services.
| Category | Specific Data Points |
|---|---|
| User Identity | Name, email, a unique user ID, and the permissions assigned to your role. |
| Operational Data | Job details, moisture readings, psychrometric data, task lists, and equipment status. |
| Financial Data | Labor rates (hourly/salary), subcontractor contract values, material costs, and total job revenue. |
| Geospatial Data | Optional GPS coordinates for time-tracking clock-ins, mileage trip start and stop, and equipment placement locations. |
| Client Data | Names, addresses, and contact information of your restoration customers. |
| Files | Documentation, photos, and attachments (automatically scanned for viruses). |
| Mobile App Data | With your permission: camera captures and photo-library selections you attach to jobs, a one-time GPS fix recorded when you clock in or out or start or stop a mileage trip (mileage itself comes from the odometer readings you enter, never a tracked route), and a device token if you enable push notifications. The mobile apps never track your location in the background. |
2. How We Use Your Data
BOLT XLR processes data to support end-to-end cost tracking on your jobs:
- Cost Calculation: Using time tracking records and payroll info to determine labor burden.
- Material Sourcing: Using job locations to query real-time material pricing via third-party retail APIs.
- Project Documentation: Aggregating moisture readings and equipment logs into "Job Print" reports.
- Accounting Integration: Formatting labor and job data for export to QuickBooks or other CSV-compatible systems.
- Security & Maintenance: Monitoring system logs and performing virus scans on uploaded files.
3. How We Keep Your Data Separate
Your company's information is kept apart from every other company's, and access inside your own account is controlled by you:
- Your Own Database: Each company's data lives in its own separate database. Your job costs and financial records are never mixed in with another company's.
- Role-Based Access: You decide who sees what. Sensitive information such as job costs and payroll is visible only to the roles you choose to grant it to.
- Sign-In and Passwords: Sign-in is handled by an industry-standard identity provider. We never store your password.
4. Third-Party Data Sharing
We do not sell your data. We only share information with third parties necessary to run the service:
- Firebase (Google): For authentication, identity services, and push notification delivery (Firebase Cloud Messaging).
- Stripe: For subscription billing and account management.
- Google Custom Search: To fetch live material pricing based on your job's radius.
- Google Cloud: Your data is hosted on Google Cloud infrastructure located in the United States.
5. Security Measures
- Encryption: All data is encrypted in transit via TLS and at rest within our databases.
- Virus Protection: Every file uploaded to BOLT XLR is automatically scanned for viruses, so a bad file cannot spread to your team.
- Permission Checks: Your permissions are checked on every request, so people only ever see what their role allows.
6. Data Retention & Deletion
When your BOLT XLR subscription ends, your company's database is scheduled for deletion. You may request a full export of your job and financial history before your account closes.
Individual user accounts are provisioned and managed by your company's BOLT XLR administrator. To request deletion of your user account and the personal data associated with it, contact your administrator or email us at support@boltxlr.com (or use the support form). We honor verified deletion requests within 30 days, subject to records we are legally required to retain.