Privacy Policy

1. Introduction

Welcome to ThinLine Dynamic Solutions ("we," "our," "us," or "Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at thinlineds.com (the "Site"), use ThinLine Radio, use ThinLine POS (including the register app and pos.thinlineds.com), or otherwise interact with us.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site or use our services. By accessing or using our Site or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

This Privacy Policy applies to all information collected through our Site, ThinLine Radio, ThinLine POS, and any related applications, websites, sales, marketing, or events (we refer to them collectively in this Privacy Policy as the "Services").

2. Information We Collect

2.1 Personal Information You Disclose to Us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you:

• Register or create an account with us
• Express an interest in obtaining information about us or our Services
• Participate in activities on the Services
• Contact us via email, phone, postal mail, or through our website
• Request a quote, estimate, or information about our services
• Subscribe to our newsletter, mailing lists, or marketing communications
• Fill out forms, surveys, or questionnaires on our website
• Engage with us on social media platforms
• Otherwise contact us or use our Services

The personal information we collect may include:

• Personal Identifiers: Name, email address, postal address, phone number, and other similar contact data
• Business Information: Company name, job title, business address, and professional affiliations
• Project Information: Details about your property, service requests, project requirements, and preferences
• Billing Information: Billing address, payment information (credit card numbers, bank account information), and transaction history
• Credentials: Passwords, password hints, and similar security information used for authentication and account access
• Communications: Records and copies of your correspondence with us, including email addresses and phone numbers
• Feedback and Reviews: Testimonials, reviews, feedback, and suggestions you provide to us
• Other Information: Any other information you choose to provide to us

2.2 Information Automatically Collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as:

• Device Information: IP address (and proxy server), device and application identification numbers, browser type, hardware model, operating system and version, mobile network information, time zone setting, and device location
• Usage Information: Information about how you use our Services, including access times, pages viewed, links clicked, search queries, features used, and the page you visited before navigating to our Services
• Log Information: Server logs, including device event information (such as crashes, system activity, hardware settings, browser type, browser language, and the date and time of your request)
• Location Information: Information about your device's location, which may be determined through your IP address or your device's GPS or other location-identifying capabilities
• Cookies and Browser Storage: Only what is needed to sign you in and remember your settings, as described in Section 5

2.3 Information Collected from Other Sources

In Short: We may collect limited data from public databases, marketing partners, and other outside sources.

We may obtain information about you from other sources, such as:

• Public databases
• Joint marketing partners
• Social media platforms
• Data providers
• Business partners and service providers

2.4 ThinLine Radio

In Short: The ThinLine Radio app uses location on the map, may show ads, and may store an account so you can sign in and receive alerts. It does not record your microphone. This policy does not cover other people who run their own ThinLine Radio scanner servers.

ThinLine Radio is our scanner and alerting app for iPhone, iPad, and Android. When you use it, we may collect:

• Account information on servers we operate: Email address, password, and settings if you create an account on a ThinLine Radio scanner we run, so you can sign in, manage scanners, and receive alerts
• Listener emails from other operators’ servers: If someone else runs a ThinLine Radio scanner server, that server may send us the email address on a listener account — not the password, and not billing details. We keep that email only so we can see which server the account is on when we receive a support message, and so the mobile app can help you find that account and sign in to that server. We are not the operator of that server, we are not responsible for that operator’s customers, and we do not bill those listeners or handle their payments to the server operator
• Location: Your device location while you are using the app, so we can show your position on the incident map relative to nearby scanner incidents, weather alerts, and coverage areas. Location is used on the map screen and is not used for advertising
• Device and app information: Device type, operating system, app version, crash or diagnostic data, and how you use the app (for example, which scanners or alerts you enable)
• Push and alert delivery: A device token so we can send pager, tone-out, and other alerts you turn on
• Preferences stored on the device: Layout, scanner, and other settings kept on your phone or tablet

ThinLine Radio asks for the microphone so urgent pager and tone-out alerts can play through the system like an incoming call, including when the app is in the background. The app plays alert audio only. It does not record, process, or upload microphone input.

The free app may show advertisements from Google AdMob. If you allow tracking on iOS, AdMob may use your device’s advertising identifier (IDFA) to show more relevant ads. If you choose Ask App Not to Track, the app still works and shows non-personalized ads. You can remove ads with an in-app subscription. Subscriptions and billing are handled by Apple, Google Play, and RevenueCat. We do not store your full payment card number for those purchases.

Anyone may run their own ThinLine Radio scanner server. This Privacy Policy covers ThinLine Dynamic Solutions and the Services we operate. It does not extend to independent server operators, their listeners, their billing, or how they handle customer data. Those operators are responsible for their own users, charges, and privacy practices. If you have a question about an account or a charge on someone else’s server, you should contact that operator.

If the app creates text from radio audio (transcriptions or alerts), that text is generated to help you read a transmission and may be inaccurate.

2.5 ThinLine POS

In Short: ThinLine POS stores the business, team, sales, and time-clock data you put into the register and dashboard. Card numbers are processed by PayPal Zettle, not stored by us.

ThinLine POS is our point-of-sale product: the iPhone and iPad register app and the web dashboard at pos.thinlineds.com. When you use it, we may collect:

• Business and account information: Name, email address, password, business name, and similar details you provide when you create an account or invite your team
• Team and access: Staff names, roles, hourly rates, and the PINs you set so people can sign in on a register
• Sales and catalog: Register sales and refunds (amounts, tender type, line items, and product cost when you enter it), register names, and the Zettle product catalog you view or edit from the register or the dashboard
• Time clock: Clock-in and clock-out times, who punched, the site or location you configure, and — when location is required — the device’s GPS coordinates so we can check that a punch is at an allowed clock-in site
• Device information: Register device identifiers, app version, and similar technical data needed to pair a register and keep it in sync

The camera and photo library are used when you take or choose a product photo for your Zettle catalog, and by the payment reader for optional barcode scanning. Photos are sent because you chose them. ThinLine POS does not take pictures in the background.

Bluetooth is used to connect a PayPal Zettle card reader. Location is also used by the payment reader software so it can accept card payments, and by the time clock as described above.

Card, contactless, and PayPal QR payments are processed by PayPal Zettle. We receive sale totals and related transaction details we need for your dashboard. We do not store full card numbers on ThinLine servers. If you connect Zettle on the dashboard so you can edit products in the browser, we store the tokens needed to talk to Zettle on your behalf until you disconnect.

3. How We Use Your Information

In Short: We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.

We use the information we collect or receive:

3.1 To Facilitate Account Creation and Logon Process

If you choose to link your account with us to a third-party account (such as your Google or Facebook account), we use the information you allowed us to collect from those third parties to facilitate account creation and logon process for the performance of the contract.

3.2 To Fulfill and Manage Your Orders

We may use your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.

3.3 To Deliver Services to You

We may use your information to provide you with the requested service, including to:

• Respond to your inquiries and provide customer support
• Send you quotes, estimates, and service information
• Process and complete transactions
• Manage your account and preferences
• Schedule appointments and service visits
• Operate ThinLine Radio (scanner audio, alerts, the incident map, and optional ads or a paid ad-free subscription)
• Operate ThinLine POS (registers, the dashboard, sales reports, the product catalog, and the time clock)

3.4 To Post Testimonials

We post testimonials on our Services that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and testimonial. If you wish to update or delete your testimonial, please contact us.

3.5 To Request Feedback

We may use your information to request feedback and to contact you about your use of our Services.

3.6 To Send Administrative Information to You

We may use your personal information to send you product, service, and new feature information and/or information about changes to our terms, conditions, and policies.

3.7 To Send You Marketing and Promotional Communications

We may use the personal information you send to us for our own marketing purposes, if this is in accordance with your marketing preferences. We do not give your information to other companies for their marketing. For example, when expressing an interest in obtaining information about us or our Services, subscribing to marketing, or otherwise contacting us, we will collect personal information from you. You can opt-out of our marketing emails at any time.

3.8 To Protect Our Services

We may use your information as part of our efforts to keep our Services safe and secure (for example, for fraud monitoring and prevention).

3.9 To Enforce Our Terms, Conditions, and Policies

We may use your information to enforce our Terms and Conditions and Usage Policies for business purposes, legal reasons, and contractual obligations.

3.10 To Respond to Legal Requests and Prevent Harm

If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

3.11 To Manage User Accounts

We may use your information for the purposes of managing our account and keeping it in working order.

3.12 Advertising

Our websites and web apps do not show ads and do not use your information for targeted advertising. The free ThinLine Radio mobile app may show ads from Google AdMob, as described in Section 2.4.

3.13 For Other Business Purposes

We may use your information for other business purposes, such as reviewing server logs and support requests to find problems, and to evaluate and improve our Services, products, and your experience.

4. Will Your Information Be Shared with Anyone?

In Short: We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

We may process or share your data that we hold based on the following legal basis:

4.1 Consent

We may process your data if you have given us specific consent to use your personal information for a specific purpose.

4.2 Legitimate Interests

We may process your data when it is reasonably necessary to achieve our legitimate business interests.

4.3 Performance of a Contract

Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.

4.4 Legal Obligations

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

4.5 Vital Interests

We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your personal information in the following situations:

4.6 Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4.7 Vendors, Consultants, and Other Third-Party Service Providers

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include:

• Payment processing (including PayPal Zettle for ThinLine POS card payments and catalog, and Apple, Google Play, and RevenueCat for ThinLine Radio subscriptions)
• Advertising in the ThinLine Radio mobile app (Google AdMob)
• Bot protection on sign-in and sign-up forms (Cloudflare Turnstile)
• Email delivery
• Hosting services and content delivery (including Cloudflare)
• Customer service
• Cloud storage

We do not allow third parties to use tracking or advertising technology on our websites or web apps. See Section 5 for the services that load only when you use them.

4.8 With Your Consent

We may disclose your personal information for any other purpose with your consent.

5. Cookies and Other Tracking Technologies

In Short: Our websites and web apps use only the cookies and browser storage needed to sign you in and remember your settings. We do not use analytics, advertising, or social media tracking on them.

This section covers thinlineds.com, thinlineradio.com, the ThinLine Radio web app and owner portal (app.thinlineradio.com), scanner servers we operate, and the ThinLine POS dashboard (pos.thinlineds.com). Advertising in the ThinLine Radio mobile app is described in Section 2.4.

5.1 What We Use

• Sign-in cookies: When you sign in to the ThinLine POS dashboard, the ThinLine Radio owner portal, or an admin page, we set a cookie that keeps you signed in. It is removed when you sign out or when it expires.
• Browser storage: The ThinLine Radio web app and our dashboards save your sign-in and settings (such as layout, selected scanners, and alert preferences) in your browser's local storage so they are there the next time you visit. This information stays in your browser and is sent only to our servers.
• Security cookies: Our sites are delivered through Cloudflare, which may set a short-lived cookie to protect the site from bots and abuse.

These are strictly necessary for the Services to work, so we do not ask for separate consent for them.

5.2 What We Do Not Use

Our websites and web apps do not use analytics cookies, advertising or targeting cookies, social media pixels (such as the Meta Pixel), session recording, or any other technology that tracks you across other websites. We do not allow third parties to place tracking or advertising technology on them. Our fonts and page scripts are served from our own servers.

5.3 Third-Party Services That Load Only When You Use Them

• Stripe: When you start a ThinLine Radio subscription or manage billing, payment is handled by Stripe, which may set its own cookies for fraud prevention.
• PayPal Zettle: When you connect Zettle to ThinLine POS, you sign in on PayPal's site, which may set its own cookies.
• Cloudflare Turnstile: Some sign-in and sign-up forms use Cloudflare Turnstile to check that you are not a bot.
• YouTube: Videos on our sites do not load until you press play. They are then played from YouTube's privacy-enhanced mode (youtube-nocookie.com), and Google's privacy policy applies.
• OpenStreetMap: Maps in the ThinLine POS dashboard load map images from OpenStreetMap, which receives your IP address when the map is shown.

These providers handle your information under their own privacy policies.

5.4 Changes and Your Choices

If we ever add analytics or advertising technology to our websites or web apps, we will update this policy first and ask for your consent where the law requires it. You can also set your browser to block or delete cookies and site data. If you block sign-in cookies or browser storage, you will not be able to stay signed in.

6. Data Retention

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. How We Keep Your Information Safe

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

7.1 Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and any applicable regulatory authority as required by applicable law.

8. Collection of Information from Minors

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 18, please contact us immediately.

9. Your Privacy Rights

In Short: Depending on your location, you may have certain rights regarding your personal information.

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below.

9.1 Access, Update, or Delete Your Information

You have the right to:

• Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
• Request restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information in certain circumstances.
• Request the transfer of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format.
• Withdraw consent at any time where we are relying on consent to process your personal information.

9.2 Opting Out of Email Marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list; however, we may still communicate with you regarding your account or services.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. Our websites and web apps do not track you across other websites or use advertising cookies, so there is no tracking for a Do-Not-Track or Global Privacy Control (GPC) signal to turn off. If we ever add such technology, we will treat a GPC signal as a request to opt out where the law requires it.

11. California Privacy Rights

In Short: California residents have specific rights regarding access to their personal information.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

11.1 California Consumer Privacy Act (CCPA)

If you are a California resident, you are granted specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA). These rights include:

• The right to know: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
• The right to delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
• The right to opt-out: You have the right to direct us to not sell or share your personal information at any time (the "right to opt-out"). We do not sell personal information, and our websites and web apps do not share it for cross-context behavioral advertising.
• The right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

11.2 How to Exercise Your California Privacy Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

• Calling us at (330) 647-5810
• Emailing us at [email protected]
• Visiting our website at www.thinlineds.com
• Writing to us at the address provided in the Contact Us section

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

12. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

13. Third-Party Websites

The Services may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with us. ThinLine Radio may show ads from Google AdMob and may connect to scanner servers run by other people. Those operators are not us; their customers, billing, and data practices are theirs. ThinLine POS uses PayPal Zettle to take card payments and hold your product catalog. Once you have used these links or partners, any information you provide to those third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your information.

Before visiting and providing any information to any third-party websites, you should inform yourself of the privacy policies and practices (if any) of the third party responsible for that website, and should take those steps necessary to, in your discretion, protect the privacy of your information. We are not responsible for the content or privacy and security practices and policies of any third parties, including other sites, services, or applications that may be linked to or from the Services.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this Privacy Policy, you may contact us by:

15.1 How to Review, Update, or Delete the Data We Collect from You

Based on the laws of some countries, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please submit a request by contacting us using the information above. We will respond to your request within 30 days.

15.2 Data Subject Access Request

If you wish to make a data subject access request, please contact us using the contact information provided above. We will process your request in accordance with applicable data protection laws and will provide you with a copy of your personal information within one month of receiving your request, unless the request is complex or we receive numerous requests, in which case we may extend the response time by an additional two months.