1. Who we are
Roffik LLC (“SalesThumb,” “we,” “us”) operates the SalesThumb platform at salesthumb.com, a multi-tenant software-as-a-service product for service businesses. This Privacy Policy explains how we handle personal information.
2. The two roles we play
SalesThumb processes data in two distinct roles, and your rights depend on which applies:
- Controller — for data we collect about you directly, including account information for shop owners and their staff, billing data, support correspondence, and product telemetry.
- Processor— for data shop owners enter into SalesThumb about their customers, vehicles, appointments, invoices, and so on. The shop is the controller; we process that data only on the shop’s instructions.
If you are a customer of a shop using SalesThumb and want to exercise rights against your data, please contact that shop directly. We will assist them in fulfilling your request.
3. What we collect
Account & identity
- Name, email address, phone number, hashed password.
- Shop name, address, vertical, business hours.
- Profile photo (optional).
Billing
- A payment-processor customer identifier and the last four digits of the most recent card. We never receive or store full card numbers.
- Subscription plan, billing history, and invoices.
Product usage
- Pages viewed, features used, error events. Used to debug, plan the roadmap, and bill metered usage where applicable.
- IP address, user-agent, device type, referrer. Retained 30 days for abuse and security investigation.
Customer-of-a-shop data
- When a shop uses SalesThumb, it enters customer information, vehicle details, photos, payment data, warranty registrations, and message history. We process this on the shop’s behalf.
Voice messages
- The SalesThumb mobile app’s team walkie-talkie feature records short voice messages and uploads them to our storage so teammates can play them back. These are stored, not processed on-device only.
Google Business Profile reviews
- If a shop connects its Google Business Profile, we periodically sync that shop’s reviews (reviewer name, profile photo, rating, and review text) so the shop can see and reply to them from SalesThumb. This is a read-only mirror of what Google already shows publicly — we do not collect this directly from reviewers, and it refreshes automatically from Google on a regular cycle.
4. How we use it
- To provide, secure, and improve the SalesThumb service.
- To bill you and prevent fraud.
- To send transactional email (receipts, security alerts).
- To send product update emails to shop owners (you can opt out from any such email; opting out doesn’t affect transactional messages).
- To respond to support requests.
- To comply with law, court orders, and lawful requests.
5. Who we share it with
We share personal information only with vendors who help us run the service, all under contract:
- Vercel— application hosting (US).
- Neon— managed Postgres database (US, AWS us-east-1).
- Cloudflare R2— file storage (global edge).
- Rainforest Payments— processes payments between shops and their customers (card data, payouts).
- Stripe— bills SalesThumb’s own subscription plans to shop owners.
- Twilio— SMS sending and receiving.
- Your configured email provider— transactional email is sent via SMTP using the mailbox you (or we, on your behalf) configure — typically Google Workspace. We do not route email through a separate third-party email-delivery vendor.
- Inngest— scheduled background jobs.
- Anthropic— powers optional AI features (photo-to-quote suggestions, inspection damage-note drafting, AI-drafted message replies, and similar assistive tools). Photos and text you or your customers submit through these features may be sent to Anthropic’s API to generate the AI output; it is not used to train Anthropic’s models.
We do not sell personal information. We do not share it with advertisers or data brokers.
6. International transfers
We are a US company and our infrastructure is primarily in the United States. If you are in the European Economic Area, the UK, or another jurisdiction with data-export restrictions, your information will be transferred to the US under Standard Contractual Clauses where required.
7. How long we keep it
- Account data— for the life of your account. Canceling your subscription disables access but does not delete anything automatically; deletion happens only on an explicit request (see Deletion requests).
- Backups— 7-day rolling point-in-time recovery window.
- Invoices and payments— kept as your financial/business history; there is no automatic deletion today. Personal-identifying fields on quotes and invoices (signatures, notes) are automatically redacted 540 days after creation, independent of any request.
- Failed-login and security logs— 90 days.
8. Your rights
You can:
- See what we have about you — export from Settings → Data export in the app, or email info@roffik.com.
- Correct inaccurate information by editing it in the app.
- Request deletion of your account or data, or an export, at salesthumb.com/privacy/delete-my-data.
- Object to processing or restrict it, subject to our legal obligations.
- File a complaint with your local data-protection authority.
If you left a Google reviewfor a business that uses SalesThumb: that review lives on Google Business Profile, not in a SalesThumb account you created. We only mirror what Google already displays publicly, and it refreshes automatically from Google’s own data. To edit, remove, or manage a review, use Google’s own tools for reviewers (Google Maps or Google Search); a removal on Google will be reflected here on our next sync.
9. California & US state privacy
California, Colorado, Connecticut, Virginia, Utah, Texas, and a growing list of states grant residents specific privacy rights. We honor those rights as written for each state. We do not sell personal information as defined under the CCPA, CPRA, or equivalent state law. We do not engage in “sharing” for cross-context behavioral advertising.
10. Children
SalesThumb is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email info@roffik.com and we will delete it promptly.
11. Cookies
We use first-party cookies for authentication and to remember preferences. We do not use third-party advertising cookies. Where enabled, a short list of privacy-conscious analytics cookies help us understand product usage in aggregate; these are anonymized where possible and you can opt out at the operating-system level.
12. Changes to this policy
We’ll post material updates here at least 30 days before they take effect, and email account holders if the change affects their data. The current version is always available at this URL.
13. Text messaging (SMS)
If you provide a mobile number and opt in, SalesThumb (and shops using SalesThumb, on their own behalf) may send you text messages such as account alerts, appointment confirmations and reminders, and service updates. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out at any time, or HELP for help.
We do not sell your mobile information, and we do not share your mobile number or SMS opt-in consent with third parties or affiliates for their own marketing or promotional purposes. Mobile information is shared only with the messaging providers (such as Twilio) that deliver these messages on our behalf, and only as needed to comply with law. Opting out of texts does not affect transactional account or security messages required to operate your account.
14. Contact
Privacy questions: info@roffik.com.
EU representative: contact us first; we’ll route the request appropriately.