Your information should have a clear purpose.

1. Scope

Express Tech Solutions (“Express Tech,” “we,” “us,” or “our”) provides computer repair, refurbishing, custom builds, computer and component sales, software, licensing, support, and hosted business portals. This policy covers information handled through those activities.

Third-party websites and services linked from the site have their own privacy practices. Their policies apply when you leave our services or use their independent systems.

2. Information we collect

Information you provide

• Contact details such as name, email address, phone number, and preferred contact method.
• Customer-account details, including a one-way password hash rather than a readable password, a mobile number, and the date that number was verified.
• Service-request details, device information, symptoms, files or notes you choose to provide, and repair history.
• Cart, quote, order, purchase, receipt, license, and subscription records.
• Business-portal settings, branding, logos, connected-service links, CRM, communication, calendar, estimate, invoice, order, website, marketing, directory, reporting, team, technology, approval, and support records submitted by a portal customer.
• Messages sent to the help desk and responses to support questions.

Information collected automatically

Our website and hosting providers may process IP address, browser and device type, timestamps, requested pages, session identifiers, security events, and diagnostic logs needed to operate, protect, and troubleshoot the service.

Software information

Kiventhra AI and ShieldAI may send the account email, application version, edition, license key, verification time, and limited security or update-request information to the official Express Tech service. Budget data intended for local storage is not uploaded merely because the application performs an account, license, or update check.

When a signed-in paid user asks an in-app AI assistant a question, the app sends that question, limited recent chat context, and a product-specific summary to the Express Tech hosted AI service. Kiventhra limits this summary to financial totals, categories, goals, coaching preferences, and budget status; ShieldAI limits it to app and protection states, definition versions, scan-running state, and detection count. These assistant requests are designed not to include raw transaction rows, imported files, bank credentials, local notes, file contents, file paths, quarantine contents, passwords, license keys, or browsing history. Express Tech may use a contracted AI provider to process the request and return the answer.

When an eligible business-portal customer uses the portal AI, the question, limited recent chat context, business profile, enabled tools, and up to 80 recent portal records may be processed to answer the question or prepare a draft. Portal customers control what they enter and should not place passwords, banking credentials, full payment-card data, government identifiers, private keys, or unnecessary sensitive information in portal records or AI messages. The portal AI cannot itself send, publish, pay, refund, delete, or change an external account.

When anonymous usage analytics are enabled, Kiventhra AI, ShieldAI, and Margin send named button or navigation actions, the current app screen, app version, platform, timestamp, and a short-lived random session identifier. Margin does not send book titles, authors, searches, imported text, reading passages, highlights, notes, or reading progress through these analytics. These events do not include typed text, passwords, license keys, budget or transaction data, file paths, file contents, scan results, or browsing history.

ShieldAI processes selected file contents, SHA-256 hashes, archive entry names, quarantine records, and supported running-process command lines locally on the device for security analysis. Browser Shield downloads reputation domains from Express Tech, but it does not upload page contents or browsing history. Third-party threat-intelligence data is enabled only through a configured provider relationship.

3. How we use information

• Respond to requests, diagnose equipment, deliver approved work, and provide support.
• Create accounts, authenticate sessions, display purchase history, and administer customer or business portals.
• Prepare quotes, process sales, issue receipts, generate and verify account-bound licenses, and manage subscriptions.
• Send transactional messages such as confirmations, one-time phone-verification codes, service updates, receipts, license delivery, and security notices.
• Prevent abuse, investigate errors, maintain backups, enforce terms, and protect customers and the business.
• Improve services, catalog organization, software reliability, and customer experience.

We do not sell personal information for money. We do not use repair-customer files for advertising.

4. When information is shared

We share information only as reasonably necessary for business operations, a customer-requested transaction, safety, or legal compliance. Providers may include:

• Amazon Web Services for website hosting, storage, networking, and operational infrastructure.
• Square for payment processing, transaction status, refunds, and related financial records.
• Resend and email providers for sending transactional and help-desk email.
• Twilio for delivering one-time phone-verification codes and customer-requested transactional text messages.
• Amazon Associates and Creators API services for permitted product information and qualifying affiliate referrals.
• Professional advisers, insurers, fraud-prevention providers, or authorities when reasonably required by law or to protect rights and safety.

Providers receive only the information needed for their role and operate under their own terms and privacy notices.

5. Payments

Card payments are processed by Square. Express Tech does not intend to store complete payment-card numbers or card security codes on its website servers. Square may provide us with transaction identifiers, payment status, card brand and last digits, refund information, and settlement records.

6. Cookies and sessions

The site uses essential cookies or similar storage for customer and help-desk sign-in, cart operation, security, and preferences. Blocking essential storage may prevent account, cart, portal, or administrative features from working. We do not represent essential account cookies as advertising consent.

7. Retention and security

Records are retained for as long as reasonably needed to provide services, honor warranties, administer licenses and subscriptions, meet accounting or legal obligations, resolve disputes, prevent fraud, and maintain backups. Different record categories may have different retention periods.

Anonymous software interaction events are intended for product-support and usability reporting and should be removed or aggregated after 90 days.

Phone-verification codes expire after 10 minutes, are stored only as one-way keyed hashes, and cannot be reused. Limited delivery and attempt records may be retained temporarily to enforce abuse controls and investigate account-security events.

We use access controls, encrypted transport, restricted administrative tools, one-way password hashing, and operational backups. Client portal records are isolated by portal and customer account. Authorized Express Tech portal staff may access a client workspace to configure or support it; the interface labels staff-managed access and saved records identify the acting account. No online or physical system can be guaranteed completely secure. Customers should avoid sending passwords or unnecessary sensitive files and should maintain a current backup before service whenever possible.

8. Your choices

You may browse the public store without an account. An account is optional unless a feature requires purchase history, license activation, subscription management, or private portal access.

You may ask to review, correct, or delete eligible account information, or object to nonessential communications, by contacting us. Some records may be retained when required for completed transactions, security, taxes, legal claims, license enforcement, or backups.

9. Children’s privacy

Our services are not directed to children under 13, and we do not knowingly collect their personal information through the site. A parent or guardian who believes a child submitted information should contact us.

10. Changes and contact

We may update this policy as services, providers, or legal requirements change. The effective date at the top identifies the current version. Material changes may also be announced on the site or through an account message when appropriate.

Also review our Legal Terms.