ShopPros

These are the United States Privacy Policy (ShopPros USA, Inc.).

Other versions: Canada ›

Privacy Policy

Effective October 13, 2026

Last Updated: October 13, 2026

This Privacy Policy (this “Policy”) explains how ShopPros collects, uses, shares and protects information in connection with ShopPros (the "Service"), agentic data analytics and business performance platform (including web and mobile applications) for businesses (hereinafter referred to as a “shop”). It covers:

  • the ShopPros website and application;
  • personal information from third-party services you connect, including QuickBooks Online; and
  • the business coaches who use ShopPros to work with shops.

This Policy applies only to information we collect through the Service and in communications with you through it. It does not apply to information collected offline, on any website or service that does not link to this Policy, or by any third party (including a connected service or a coach's own systems), even where we link to or integrate with them. Those third parties handle information under their own privacy policies. We may provide additional or supplemental privacy notices for particular features or regions, which apply together with this Policy. This Policy also forms part of, and should be read together with, our ShopPros End User Agreement and Terms of Service, and any master subscription agreement, enterprise agreement, or order form you enter into with us (which governs to the extent it conflicts with this Policy). Coaches may also separately enter into a Coach Agreement with us that, as a supplement to this Policy, governs their access to, use of, and handling of a shop's data. By creating an account or using the Service, you acknowledge this Policy. Where the law requires consent for a particular use of personal information, we rely on the consent described in this Policy or obtained separately, and not on your use alone.

In short:

  • We do not sell personal information.
  • We may use aggregated and de-identified information to train our own internal models and to improve and benchmark the Service.
  • Our Service is hosted in the United States, and your information is stored and processed in the United States.
  • A shop's data can be seen by a business coach only when the shop has been given to that coach, and the shop's owner can remove that access at any time.
  • Authorized ShopPros personnel can access your workspace and view your activity in the Service to operate, support, secure, troubleshoot and improve it. This access is logged and limited to these purposes (see Section 6).

1. Who is responsible for your information

ShopPros is operated by ShopPros USA, Inc., Florida corporation (“we”, “us” and “our”), which is responsible for your personal information.

This Policy and ShopPros USA, Inc.'s handling of personal information are governed by the laws of the State of Florida and applicable United States federal law, without regard to conflict-of-laws principles, and without limiting any non-waivable rights you have under the law of your state of residence.

Two roles. For your own account information, and for how we run and improve the Service, we decide how the information is used; in privacy-law terms, we are the controller or the organization accountable for it.

For information a shop puts into ShopPros about other people, such as its employees and its customers, we process that information on the shop's behalf and on its instructions. The shop decides what goes in and who sees it. If you are a customer or employee of a shop and have a question about your information, please contact the shop first. We will help the shop respond.

2. Information we collect

"Personal information" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, postal address, or payment information (for example, billing name and address and limited payment-card details), or any other identifier we may use to contact you online or offline.

The types and categories of personal information we collect or process include:

Account and contact information.

  • Your name, address (which as home address, work address, or other address) email address, phone number, role and authentication identifiers, and other contact information you provide to us.
  • Your sign-in activity.
  • Account history, including information about your account, transactions, purchases, order history, or discounts.
  • Whether you accepted our agreements, which version, and when.

Workspace and shop information.

  • The shop's name, address, country and region, time zone and opening hours.
  • Its facilities and capacity (i.e., service bays, seats, chairs or locations, depending on your industry)
  • Its team roster: names, roles and pay basis of its staff (for example, technicians, service writers, managers, or other roles), which we collect when a shop sets up and manages its users.
  • The targets, plans, notes, projects, reports and files you create or upload.
  • Your conversations with the AI coach inside ShopPros.

We also collect:

  • Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature.
  • Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information.

HOW WE COLLECT YOUR PERSONAL AND OTHER DATA

We collect information about you when you interact with our Services, such as when you create or update an account, place an order, subscribe, or make a request, participate in surveys, create, upload, or post content to the Services, including reviews, media such as photos, videos, or audio recordings.

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal information. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our Services, such as traffic data, location data, logs, and other communication data, and which resources and Services features that you access and use. Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience.

Data from connected services. When you authorize a connection, we retrieve business data from it:

Connected service

What we retrieve

Industry management systems (for example, shop-management systems such as Protractor and Tekmetric)

Invoices, repair orders, transaction and job records, job and labor lines, parts and sales figures, technician and service-writer attribution, and the customer and vehicle details on those records — including customers' names, phone numbers, addresses, and purchase history

QuickBooks Online

Company information and profit & loss / general-ledger account data (see section 4)

Phone systems (currently RingCentral)

Call records: date, time, duration, direction and outcome of calls, and the other party's phone number and, where available, name

Files you upload

Whatever the file contains, such as spreadsheets, reports and PDFs

Voice. If you use voice features, the audio you speak is converted to text and responses may be read aloud (see section 8).

Payment information. Payments are processed by Stripe. We receive your billing name and address, plan, payment status, and the last digits and expiry of your card. We do not receive or store full card numbers.

Usage and technical information. This includes log data, device and browser information, IP address, pages and features used, and error reports. We use it to operate, secure, debug and improve the Service.

Information you give us directly. For example, when you contact us, join a waiting list, send in-app feedback (including any screenshots you attach), or apply to become a coach.

3. How we use information

We use personal information to:

  • provide the Service. That includes calculating scorecards, financial summaries, targets and plans; producing reports and coaching guidance; and sending the notifications and scheduled reports you set up;
  • let the people a shop authorizes see its data, according to their role, including a coach the shop has been given to (section 6);
  • process payments, and manage subscriptions and referral attribution;
  • secure the Service, prevent fraud and abuse, and fix problems;
  • operate, support, monitor and improve the Service, which includes authorized ShopPros personnel accessing your workspace and observing activity within the Service, as described in Section 6;
  • communicate with you about your account, billing, price changes, and changes to our terms;
  • understand how the Service is used, so we can improve it;
  • comply with the law and enforce our agreements; and
  • create and use aggregated and de-identified information to operate, secure, analyze, develop, improve, train our own internal models, and benchmark the Service, including to produce industry and peer benchmarks and workflow and efficiency insights across shops and industries. De-identified information cannot reasonably be linked to you, your business, your staff, your customers or any device. We take reasonable measures to prevent re-association, do not attempt to re-identify it (except to test that our de-identification is effective), and contractually require recipients to do the same.

If we combine aggregated, de-identified, or technical information with information that identifies you, we treat the combined information as personal information for as long as it is combined.

Customer lists and outreach. The Service can analyze your data to produce lists of customers (for example, customers who declined or deferred recommended work, or who are likely to buy in the future) together with their contact details drawn from your connected systems (such as name, phone number, address, and purchase history). You are responsible for having the rights and consents needed to provide this information to the Service and for ensuring that any outreach you carry out using these lists (including any call, text message, or email) complies with all applicable laws, including the Telephone Consumer Protection Act, Do-Not-Call, and other telemarketing and privacy laws.

4. QuickBooks Online

If you connect QuickBooks Online, you authorize ShopPros, through Intuit's OAuth flow, to access your company's accounting data so we can display your financial performance. Specifically:

  • Read-only use. We use the access only to read company information and profit & loss / general-ledger account data. We do not have access to your Intuit sign-in credentials or your bank login credentials.
  • Encrypted tokens. Access tokens issued by Intuit are stored encrypted, and are used only to retrieve the data needed to operate the Service on your behalf.
  • Intuit's terms. Our access to and use of information received from Intuit's APIs follows the Intuit Developer terms and applicable API usage requirements, including limited-use requirements.
  • Disconnecting. You can disconnect QuickBooks Online at any time, from the integrations area of the Service or from within QuickBooks Online. Disconnecting revokes our access: we stop retrieving new data, and the stored tokens are invalidated.

5. AI processing

Parts of the Service are produced by AI models operated by third-party providers (listed in section 8). These include:

  • plans and targets;
  • analyses and written summaries;
  • answers from the AI coach; and
  • descriptions of images you upload.

To produce them, the relevant shop data is sent to the provider as part of the request.

Training. We may use aggregated and de-identified information to train our own internal models and to operate, improve, and benchmark the Service.

  • Provider use of data. Our providers process the data only to return a response to us. Our contracts with these providers require them to use the data solely to provide their services to us, to keep it confidential and secure, and not to use it to train their own models.
  • Record of AI requests. We keep a record of AI requests and responses to monitor quality, investigate problems and control cost. That record contains the data that was sent.
  • No automated decisions with legal or similarly significant effects. We use AI to generate analyses, plans and coaching guidance, but we do not use AI to make decisions about you that produce legal or similarly significant effects without human involvement. Where U.S. state law gives you a right to opt out of certain profiling, you may exercise it as described in Section 11.
  • AI output can be wrong. It is not professional advice. See our Shop User Agreement.

6. How we share information

We share information only as described here. In addition, we may disclose aggregated or de-identified information, which does not identify any shop or individual, without restriction.

Within a shop's workspace. A shop's data is visible to that shop's members according to the roles the shop assigns. For example, a technician may be able to see their own numbers without seeing the shop's financials.

Administrative, support and monitoring access by ShopPros. Authorized ShopPros personnel (and contractors bound by confidentiality obligations) can access your account, your shop's workspace and data, and records of your activity within the Service, including through administrative or "back-end" tools that allow our personnel to view how you and your team are using the Service, in some cases without a separate, real-time notice to you each time such access occurs. We use this access only to operate, maintain, host and secure the Service, provide customer support and respond to your requests, detect, investigate and prevent fraud, abuse, security incidents and violations of our agreements, debug, test and improve the Service and its AI features, monitor quality, performance and cost, and comply with law and enforce our agreements. We do not use this access to read your data for advertising, to sell your data, or for any purpose unrelated to operating the Service. This access is restricted to personnel who need it for these purposes, is subject to access controls and confidentiality obligations, and is logged. This may include our personnel signing in to, viewing and operating within your workspace while you or your team are using it in real time. We do not use this access for random or general monitoring unrelated to the purposes above. By creating an account and using the Service, you acknowledge and consent to this access and monitoring, on your own behalf and, where you are a shop or an administrator, on behalf of your authorized users, whom you agree to inform of this practice. If you do not consent, do not use the Service.

With a coach the shop has been given to. A coach is given access to a shop in one of two ways:

  • the shop subscribes using the coach's referral code; or
  • a ShopPros administrator adds the shop to the coach's book.

Either way, the shop's owner is emailed to say who has access. A coach with access can see the shop's scorecard, targets, plan, financial summaries and coaching history. This can include the shop's customers' names and phone numbers as they appear on invoices and call records. A coach cannot change billing, invite or remove people, or see payment details.

The shop's owner can remove a coach's access at any time from Settings → Members, and the removal stands even if the subscription later renews. Every coach must accept a written agreement with us before seeing any shop's data. That agreement requires the coach to:

  • use it only to coach that shop;
  • keep it confidential;
  • not retain it; and
  • delete it, and confirm the deletion, when access ends.

With service providers (sub-processors). We use the providers in section 8 to host, secure and operate the Service. They process information on our behalf, under contracts that require confidentiality and security.

With connected services you authorize. We exchange information with them as needed to make the connection work. For example, we send your credentials to Protractor to retrieve your data.

For legal reasons. We share information where the law requires it, or where it is needed to protect the rights, safety and security of our users, the public, or us.

In a business transfer. If we are involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

7. Where your information is stored — cross-border transfer

Our Service is hosted in the United States. Your information, including your shop's data and its customers' and employees' personal information, is stored and processed in the United States by us and our service providers.

While it is there, it is subject to United States law. Courts, law-enforcement and national-security authorities there may be able to access it. We protect it by contract with each provider, as described in sections 6 and 8.

8. Our service providers

We list providers by the job they do. We maintain a current list of our service providers and review it at least annually. When the list changes, we update it by posting the current list on this page; posting the updated list is sufficient notice, except where the law or our contracts require advance notice before a new provider begins processing personal information, in which case we will give that notice.

Category

Provider

What they do

Web application hosting

Vercel

Hosts the ShopPros website and application

Application servers

Railway

Runs our background processing and AI services

Database

Neon

Stores the Service's database

File storage

Cloudflare (R2)

Stores uploaded files and generated images

Sign-in and accounts

Clerk

Authentication and user accounts

Payments

Stripe

Payment processing, invoices, subscriptions

Email

Resend

Sends account, notification and report emails

AI models

DeepInfra

Runs the AI models that produce most AI output

AI models

Anthropic

Backup AI model, and image descriptions

Search indexing

Voyage AI

Converts text into search vectors, so the coach can find relevant past material

Web search

Tavily

Runs web searches for industry and market information

Voice

Deepgram

Speech-to-text and text-to-speech for voice features

AI quality monitoring

Langfuse

Records AI requests and responses for quality and cost monitoring

Error monitoring

Sentry

Captures application errors

Product analytics

PostHog

Measures how features are used

In-app feedback

AutoFeedback

Receives feedback and screenshots you send from inside the app (operated by an affiliate of ShopPros)

Some of these providers may process information in the United States or in other regions. Wherever information is processed, we require each provider by contract to protect it and to process it only on our instructions.

9. How long we keep information

We keep the categories of personal data described in this Privacy Policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified. In more detail:

  • While your account is active. We keep information for as long as the shop's account is active, or as needed to provide the Service.
  • If a subscription lapses or is cancelled. We do not delete the data. The workspace becomes read-only, and paying again restores it.
  • Disconnecting a service. We stop retrieving new data from it and invalidate its stored credentials. Data already retrieved stays in the workspace unless you ask us to delete it.
  • Closing an account. When a shop's account is closed, or on request, we delete or de-identify the associated data within 90 days. For 30 days after an account closes, the shop's owner can ask us to export the shop's data.
  • Backups. Deleted data may remain in encrypted backups for up to 90 days before it is overwritten.
  • What we keep regardless.
  • Records of which legal documents were accepted, and when.
  • Billing records, which we keep for as long as tax and accounting law requires.
  • Information the law requires us to keep.
  • Coaches. When a coach's access to a shop ends, the coach must delete that shop's data and their shop-specific materials (section 6). When a coach leaves ShopPros, we delete the coaching materials they uploaded, and confirm this to them in writing on request.

Aggregated and de-identified data. Because it does not identify you or any individual, we may retain and use aggregated and de-identified information indefinitely, including after a subscription ends or an account is closed.

If you are a California resident, visit https://oag.ca.gov/privacy/ccpa for more information about the retention periods that apply to the personal data categories we collect.

10. Security

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

We protect information using industry-standard safeguards, including:

  • encryption in transit and at rest;
  • envelope-encrypted storage of the credentials for your connected services;
  • role-based access controls;
  • database-level separation, so one shop's data cannot be read in another shop's workspace; and
  • limited staff access, including administrative and support access to your workspace as described in Section 6.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

11. Your rights

You can see and update your account information in the Service. You can disconnect linked services at any time. For other requests, contact us (section 16). We may need to verify your identity before acting. If your information is in a shop's workspace, we may refer you to the shop, which decides what is kept there (section 1).

Our Privacy Officer is Jeff Chesebrough, reachable at jeff.chesebrough@shoppros.com.

Depending on your state of residency, you may have certain rights related to your personal data, including:

  • You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.
  • You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose.
  • You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.
  • You may request that we do not use your personal data for these purposes. Some states may also grant you the ability to learn more about or challenge those automated decisions.

You may opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the "sale" of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Some states may also grant you the ability to learn more about, or to challenge, decisions based on automated processing.

Where your state grants the right, you may opt out of, or withhold consent to, the collection or processing of sensitive data (which may include precise geolocation and biometric data, such as data derived from voice features).

The exact scope of these rights varies by state, and there are exceptions where we may not have an obligation to fulfil a request. We will not deny you goods or services, charge you a different price, or otherwise discriminate or retaliate against you for exercising these rights. You do not need to create an account to make a request. We may need to verify your identity, and we may decline or charge a reasonable fee for requests that are manifestly unfounded, excessive or repetitive. We will respond within the time applicable law requires, generally within 45 days of a verifiable request, with one extension of up to 45 additional days where reasonably necessary and with notice to you. To exercise any of these rights, or to appeal a decision on a consumer-rights request, contact us using the methods in Section 16. If we deny your appeal, we will provide a way to contact your state attorney general or other regulator.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data "sales" as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Nevada. Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise their sale opt-out rights may submit a request using our contact methods set forth in Section 16.

California. If you are a California resident, additional information applies to you. To learn more about California residents’ privacy rights, visit https://oag.ca.gov/privacy/ccpa.

12. Children

ShopPros is a business tool for adults. Our Services are not intended for, and we do not knowingly collect any personal data from, anyone under the age of 18. If we learn we have collected or received personal data from a child under the age of 18 years old without verification of parental consent, we will delete that information.

13. Technologies we use for automatic data collection

We use:

  • essential cookies to sign you in and keep your session secure. These are required for the Service to work;
  • product analytics (PostHog) to understand how features are used;
  • error monitoring (Sentry) to find and fix problems; and
  • web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) in some of our emails, which tell us whether an email was opened or a link was clicked, so we can measure whether our service messages are delivered and useful.

A cookie is a small file placed on your device when you interact with the Services. We do not use advertising cookies or allow advertising networks to track you on ShopPros. You can block or delete cookies in your browser, but essential cookies are needed to sign in so some features may not work without them.

Supported browsers and access. You can access the Service through a supported web browser or through our mobile application (the “App”). We support the current and previous major versions of Chrome, Edge, Safari and Firefox, with Chrome recommended on desktop and on phones. On any other browser, the Service is provided as-is.

Some browsers offer a "Do Not Track" (DNT) setting. Because there is no common industry standard for how to respond to DNT signals, the Service does not currently respond to them. However, where an opt-out preference signal such as the Global Privacy Control (GPC) applies to us under the law, we make reasonable efforts to honor it (see section 11).

To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses by contacting us using the methods set forth in Section 16. Please note that some Services features may be unavailable as a result.

We do not permit advertisers or advertising networks to place tracking technologies on, or to track you through, the Service. The analytics and error-monitoring providers named above act as our service providers and process information only on our instructions. Separately, third-party services you choose to connect, and any external websites we link to, may use their own automatic collection technologies and may collect information about you across other websites, apps and online services over time; those practices are governed by those third parties' own privacy policies, which we do not control.

14. Emails from us

We send service emails: account and security notices, import results, scheduled reports, coach-access notices, billing notices and price-change notices. These are part of the Service and are not considered marketing.

Notwithstanding the foregoing, should we send marketing or promotional emails, each one will identify itself as a commercial message, include a valid physical postal address, and give you a clear way to unsubscribe. We honor opt-out requests promptly and, for U.S. recipients, no later than 10 business days, consistent with the U.S. CAN-SPAM Act. Unsubscribing from marketing emails does not stop the service emails described above.

15. Changes to this Policy

We may update this Privacy Policy from time to time, and we will provide notice of any such changes to the Privacy Policy as required by law. We will notify you of changes to this policy by updating the "last updated" date and posting the updated policy on the Services. When we make material changes, we will update the effective date above and give additional notice, such as by email or in the app, before the change applies where the law requires it.

16. Contact us

To exercise your rights or to ask questions, requests or complaints about this Privacy Policy or our privacy practices, contact us at: Jeff Chesebrough, jeff.chesebrough@shoppros.com .

Previous versions

  1. US-2026-10-13 (current) · In effect October 13, 2026 to today

    Counsel's final United States text (ShopPros USA, Inc.), effective October 13, 2026.

  2. Combined text (2026-08-24) · In effect August 24, 2026 to October 13, 2026

    Published before change summaries were kept.

ShopProsKnow your numbers. Get the plan. Grow on purpose.
PrivacyTermsSubprocessors