Who I am. True Trust IT Support is a computer repair business run by me, Peyton, from Nassau County, Florida. Questions about this policy: the quote form.

What I collect, and why

When you ask for a quote: your name, phone, email if you give one, the device and the problem, and any photos you attach. I use it to answer you and quote the job. Photos are resized and stripped of location and camera details when they arrive.
When you drop off or check in a device: the above, plus your address if you give it, the device's serial number, your signature on the check-in, and the device password only if the repair needs it. Device passwords are stored encrypted, only shop staff can view them, and every view is logged with who and when.
While I work on it: notes, photos of the device, the parts used, the time spent, and what I found. That becomes your invoice and your repair history.
Your files: before a repair that could put them at risk, I may save a backup of the drive on my own bench computer. It stays offline in my workshop and is never uploaded anywhere.
Payments: when you pay by card online, the payment goes through Stripe. I never see or store your card number; I keep a record of what was paid and how.
Remote help: when you let me connect to your computer, I record who connected, when, and why, and the session itself (what was on the screen, any command window, and files moved) is recorded and kept for 90 days in case anything is questioned later. You see a notice the whole time I am connected, and you can end it at any time. For a one-time help session I also keep the time you agreed and the internet address you agreed from.
Computers on a managed plan (businesses and plan customers): a small program on each computer reports, once a day: whether Windows and other updates are installed, antivirus, firewall and drive encryption status, free disk space, the list of installed programs (including programs installed for one person on that computer, with that person's Windows user name), and, if your plan includes backup, whether backups ran. It reads no documents, email, or browsing. I use this to keep the computers safe and working, and to alert me to problems such as a known scam remote-control program.
Remote-access consent: when someone agrees to remote support for a computer, I keep who agreed, how, the exact wording they agreed to, their signature if they signed, and the internet address they agreed from.
This website sets no cookies of its own and runs no analytics. The forms send what you type to my shop system and nothing else.

What I never do

I never sell your information or share it for marketing. Mobile numbers and text consent are never shared with third parties for their own marketing. I don't look through your files beyond what the repair needs.

Who handles it for me

These companies store or carry information for me and may use it only to provide their service: DigitalOcean (where my shop system runs), Cloudflare (this website and my email address), Google (my business phone number), and, when I use them, Resend (sends email), Twilio (sends texts), Stripe (card payments), and the backup and update services named in a managed plan. I also use an AI assistant (Claude, by Anthropic) to help me look up and organize job information; what it sees is covered by Anthropic's commercial terms.

How long I keep it

Repair and invoice records: up to 7 years, for taxes and warranty.
Remote session recordings: 90 days, then deleted automatically.
Device passwords: deleted when you pick up your device.
Quote requests that never became a repair: deleted 90 days after the last word on them. One that became a repair: deleted 30 days after the repair is finished (the repair record keeps what it needs).
Backups of your drive and copies made during data recovery: deleted within 30 days after you pick up.

Your choices

Ask to see what I have about you, to correct it, or to delete it. I'll do it within 30 days, except what I must keep for taxes or an open warranty. You can stop texts any time by replying STOP.

If something goes wrong

If a data breach affects your information, I'll tell you within 30 days, as Florida law (section 501.171) requires.

California visitors

This page is my notice under the California Online Privacy Protection Act. I don't respond to "Do Not Track" signals because I don't track.

Children

My services are for adults; I don't knowingly collect information from children under 13.

Changes

If I change this policy, the date at the top changes, and I'll tell current plan customers by email.

Privacy policy.