Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you contact us, submit a repair inquiry, book an appointment, or fill out a form on our Site, we may collect the following categories of personal information:

• Identification Information: Full name, company name (for commercial inquiries), and contact name.
• Contact Information: Email address, phone number, and mailing address (if provided).
• Device Information: Device type, model, serial number (IMEI), issue description, and any details you provide about the condition of your device.
• Service Information: The nature of the repair requested, preferred service dates, and prior service history with us.
• Payment Information: We do not process payments through our website. Payment information (card numbers, etc.) is collected in person at the point of service and is not stored electronically by StoneMTN Device Repair.
• Communications: The content of messages, inquiries, or feedback you submit through our contact forms, email, or phone.
• Commercial Inquiry Data: For business customers, we may collect company name, industry, number of devices, and service agreement details.

1.2 Information Collected Automatically

When you visit our Site, we and our service providers may automatically collect:

• Usage Data: Pages visited, time spent on pages, links clicked, and referring URLs.
• Device and Browser Data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Log Data: Server log files that record requests made to our servers, including date/time, URL, HTTP status codes, and bytes transferred.
• Location Data: General geographic location inferred from your IP address (city/state level only). We do not collect precise GPS location.

1.3 Information from Your Device (In-Shop)

When you drop off a device for repair, our technicians may incidentally observe data on the device as part of the diagnostic process. We do not intentionally record, copy, or retain any personal data from your device. See Section 8 of our Terms of Service for full device access policies.

2. How We Collect Information

We collect information through the following means:

• Directly from you: Via our contact forms, booking portal, in-person intake, phone calls, and email communications.
• Automatically: Via cookies, web server logs, and similar technologies when you visit our Site (see Section 6).
• From third parties: We may receive information about you from our third-party service providers in connection with the delivery of services (e.g., booking confirmation data from our scheduling software). We do not purchase personal information from data brokers.
• From your device (in-shop only): As necessary to perform the authorized repair, subject to the limitations described in Section 1.3.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To provide and complete services: Processing your repair request, contacting you about your device, scheduling appointments, communicating service status, and delivering completed repairs.
• To communicate with you: Responding to your inquiries, sending service confirmations, repair status updates, and pickup notifications via email, phone, or SMS.
• To generate internal service summaries: We use AI-assisted tools (see Section 5) to generate internal summaries of your inquiry for internal staff use only, to improve response efficiency.
• To process payments and maintain records: Keeping records of services rendered, payments received, and warranty periods for our accounting, legal, and operational obligations.
• To operate and improve our Site: Analyzing usage patterns, diagnosing technical problems, and improving website functionality and user experience.
• To protect legal interests: Maintaining records as required or permitted by law, responding to legal process, and enforcing our Terms of Service.
• To send service-related communications: Sending you information about your existing repair or warranty. We do not send unsolicited marketing emails. If we ever introduce a newsletter or promotional communications, we will obtain your express opt-in consent first.
• For security and fraud prevention: Detecting, preventing, and investigating fraudulent, abusive, or unlawful activity, including verifying that submitted devices are not reported stolen.

We do not sell your personal information. We do not use your personal information for targeted advertising or share it with advertising networks.

4. How We Share Your Information

We share your personal information only in the following limited circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf (see Section 5). These providers are contractually bound to use your information only for the purpose of providing services to us and are prohibited from using it for their own purposes.
• Legal Requirements: We may disclose your information if required to do so by law, court order, subpoena, or other legal process, including responding to law enforcement requests under applicable Georgia or federal law.
• Protection of Rights: We may disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of StoneMTN Device Repair, our customers, or others, or to investigate fraud or criminal activity (including investigation of stolen device submissions).
• Business Transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to a successor entity. We will notify you of any such transfer and any material changes to this Policy that result.
• With Your Consent: We may share your information for any other purpose with your explicit prior consent.

We do not sell, rent, trade, or license your personal information to any third party for their own marketing or commercial purposes.

5. Third-Party Service Providers

We use the following categories of third-party service providers in connection with our operations. By using our services, you acknowledge that your information may be processed by these providers subject to their own privacy policies:

5.1 Email Delivery — Google Gmail (Alphabet Inc.)

We use Google Gmail to send and receive email communications related to your service inquiry and repair. Information included in contact form submissions is transmitted to our Gmail inbox. Google's privacy policy applies: policies.google.com/privacy. Google may process your email data on servers located in the United States.

5.2 SMS Notifications — Twilio Inc.

We use Twilio to send SMS (text message) notifications to our internal staff regarding service inquiries. Your name and a summary of your service request may be included in internal SMS messages sent via Twilio. Twilio's privacy policy applies: twilio.com/legal/privacy. Twilio processes data in the United States.

5.3 AI-Assisted Summarization — Anthropic, PBC

When you submit a contact or repair inquiry form, the content of your submission may be processed by Anthropic's Claude API to generate a short internal summary for our staff. This summary is used only internally to improve response efficiency. We do not use this feature for marketing. Anthropic's privacy policy applies: anthropic.com/privacy. Anthropic processes data in the United States. Your submission data is transmitted to Anthropic only at the time of form submission and is not used by Anthropic to train its models pursuant to our API agreement.

5.4 Online Booking — Booking Portal

Our booking portal at portal.stonemtnrepair.com is operated by a third-party scheduling platform. Information you provide when booking an appointment is subject to that platform's privacy policy in addition to this Policy.

5.5 Web Hosting — Railway

Our website is hosted on Railway (Railway Corp.). Server logs and usage data are processed by Railway on infrastructure in the United States. Railway's privacy policy applies: railway.com/legal/privacy.

5.6 Analytics (if applicable)

We may use Google Analytics or similar tools to understand how visitors use our Site. These tools may use cookies and collect usage data (IP address, pages visited, etc.). You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by your browser. We use cookies and similar technologies (such as local storage) to operate our Site and improve your experience.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Site to function (e.g., session management, security). These cannot be disabled without affecting Site functionality.
• Functional Cookies: Remember your preferences and settings to improve your experience on return visits.
• Analytics Cookies: Help us understand how visitors interact with our Site, including which pages are most visited. We may use Google Analytics for this purpose.

We do not use advertising cookies or permit third-party advertising networks to place cookies on our Site.

6.3 Managing Cookies

Most browsers allow you to refuse, delete, or be notified about cookies through browser settings. Disabling cookies may affect the functionality of our Site. Note that our Site does not respond to "Do Not Track" browser signals at this time, though we respect voluntary opt-out mechanisms described in this Policy.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations:

• Service and warranty records: Retained for a minimum of 24 months from the date of service, to support warranty claims and resolve disputes.
• Contact form submissions: Retained for a minimum of 12 months to support any follow-up inquiries or disputes.
• Booking records: Retained for a minimum of 24 months.
• Financial and payment records: Retained for a minimum of 7 years as required by Georgia accounting and tax law (O.C.G.A. § 48-7-29).
• Server logs: Typically retained for 90 days and then automatically deleted.
• Email communications: Retained in our email system for 24 months unless deleted earlier as part of routine maintenance.

After applicable retention periods expire, we delete or de-identify your personal information unless a longer period is required or permitted by law.

8. Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, use, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted through our Site;
• Access controls limiting personal data access to authorized personnel on a need-to-know basis;
• Secure storage of digital records;
• Employee training on data handling and privacy obligations;
• Physical security measures at our repair facility.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable security measures, we cannot guarantee absolute security of your information. You transmit information to us at your own risk.

9. Security Breach Notification

In the event of a data security breach that compromises your personal information, StoneMTN Device Repair will comply with the notification requirements of the Georgia Personal Identity Protection Act (O.C.G.A. § 10-1-910 et seq.). If a breach is determined to have occurred and to pose a risk of harm to affected individuals, we will:

• Notify affected individuals in the most expedient time possible and without unreasonable delay;
• Provide notice by email or U.S. mail to the address on file, or by a substitute method if direct notification is not reasonably possible;
• Notify the Georgia Attorney General's Office if the breach involves more than 10,000 Georgia residents, as required by O.C.G.A. § 10-1-912;
• Notify major consumer reporting agencies as required by law if the breach involves more than 500,000 Georgia residents or 500,000 residents nationally.

10. Children's Privacy (COPPA Compliance)

Our Site and services are not directed to children under the age of thirteen (13). We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at stonemtnrepair@gmail.com. We will promptly delete the information upon verification.

Minors between the ages of 13 and 17 may use our services only with the involvement and authorization of a parent or legal guardian, as described in our Terms of Service. If you are under 18, please have your parent or guardian review this Policy and our Terms of Service with you.

11. Your Rights & Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information. StoneMTN Device Repair honors the following rights for all Georgia residents and customers:

• Right to Access: You may request a copy of the personal information we hold about you. We will respond within 30 days.
• Right to Correction: You may request that we correct inaccurate personal information about you.
• Right to Deletion: You may request deletion of your personal information, subject to our legal retention obligations (see Section 7). We cannot delete information necessary for pending warranty claims, active legal proceedings, or tax record obligations.
• Right to Opt Out of Marketing: If we ever send you promotional communications, you may opt out at any time by following the unsubscribe instructions in the communication or contacting us directly. Service-related communications (e.g., repair status updates) are not marketing and may not be opted out while a repair is in progress.
• Right to Complain: You have the right to file a complaint with the Georgia Office of Attorney General Consumer Protection Division at consumer.georgia.gov if you believe we have violated your privacy rights.

To exercise any of these rights, contact us at stonemtnrepair@gmail.com with your full name, the email address associated with your service records, and a description of your request. We may need to verify your identity before processing your request.

12. Do Not Sell My Personal Information

StoneMTN Device Repair does not sell your personal information to third parties for monetary or other valuable consideration. We do not share your personal information with third parties for their own marketing or advertising purposes. This statement applies to all customers, including California residents whose rights under the California Consumer Privacy Act (CCPA) we voluntarily respect.

If this policy changes in the future, we will update this Policy and provide you with a clear opportunity to opt out before any sale occurs.

13. Links to Third-Party Sites

Our Site may contain links to third-party websites, including our booking portal, Google Maps, and social media platforms. These third-party sites are governed by their own privacy policies, which we do not control. When you click on a link to a third-party site, you leave our Site and your information becomes subject to that site's privacy practices. We encourage you to review the privacy policies of any third-party sites you visit. StoneMTN Device Repair is not responsible for the privacy practices of third-party sites.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the Effective Date at the top of this Policy and post the updated Policy on our Site. If we make material changes that significantly affect your rights or how we handle your personal information, we will make reasonable efforts to notify you, such as by posting a prominent notice on our Site.

Your continued use of our Site or services after changes are posted constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to privacy-related inquiries within thirty (30) calendar days of receipt. This Privacy Policy was prepared for StoneMTN Device Repair and is intended for general informational purposes. StoneMTN Device Repair recommends consulting a licensed Georgia attorney for specific legal guidance on privacy compliance.