Privacy Policy

Effective October 6, 2026 · All Things IT, Utah, USA

1. What this covers

This policy applies to the All Things IT website (allthingsit.cc), to our IT consulting services, and to software applications we build and operate for our customers, including Blackstack, a document and fleet management application for trucking and hauling businesses, and to the text messages All Things IT sends. When we say "the Services" we mean all of these together.

If a customer of ours uses our software to manage their own business, that customer decides what data goes into it. In that case we process the data on their behalf, and their own privacy practices govern how they treat the people whose information they enter.

2. What we collect

Information you give us

• Contact details when you email or call us: your name, email address, phone number, company name, and what you tell us about your needs.
• Mobile number and text-message consent if you agree to receive texts from us: the number, the date you agreed, how you agreed, and any STOP or HELP replies. See section 6.
• Account information for our applications: a username, a display name, an email address, and a password, which is stored only as a one-way hash.
• Business records you enter into our applications, such as customer names and contact details, vehicle details, and pricing.
• Documents and photos you upload, such as photographs of delivery tickets, receipts, fuel purchases, and inspection defects, together with the details you enter alongside them (dates, ticket numbers, quantities, driver and truck names).

Information collected automatically

• Server logs: IP address, browser type, the pages requested, and the time of each request. These are kept for security and troubleshooting.
• Application activity: an audit trail of significant actions inside our applications (for example, who uploaded, emailed, deleted, or invoiced a record, and when). This exists so the business using the application can see what happened to its own records.
• Cookies: only those needed to keep you signed in and to protect forms against forgery. We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics on our applications.

Information from connected services

If you connect one of our applications to a third-party service, we receive the data needed for that connection. See section 5 for QuickBooks specifically.

3. How we use it

• To provide, operate, secure, and support the Services.
• To do what you ask: for example, turning an uploaded photo into a clean PDF, emailing it to a customer, or creating an invoice in your accounting system.
• To respond to your questions and requests.
• To keep an audit trail so a business can see what was done to its own records.
• To detect, prevent, and investigate abuse, fraud, and security incidents.
• To comply with the law.

We do not sell personal information. We do not use your data for advertising, and we do not build profiles of you for marketing purposes. We do not use data from our applications to train artificial intelligence models.

4. Who we share it with

We share information only in these situations:

• At your direction. When you email a PDF to a customer, share a file from your phone, or create an invoice in QuickBooks, the data goes where you sent it.
• Service providers who help us run the Services, such as hosting providers, email delivery providers, and our text-message provider (Twilio), which delivers our texts to the mobile carriers. They may only use the data to provide their service to us.
• Connected services you have chosen to link, such as Intuit QuickBooks.
• Legal reasons. If required by law, subpoena, or court order, or to protect the rights, safety, or property of All Things IT, our customers, or others.
• Business transfers. If All Things IT is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. QuickBooks and Intuit data

Some of our applications can connect to Intuit QuickBooks Online so that records you keep in our application, such as delivery tickets, can be turned into invoices in your books. This connection is optional, and it is made only when you explicitly authorize it through Intuit's own sign-in.

What we access

When connected, the application may read and create the following in your QuickBooks company, and nothing beyond it: company name; customers (to match or create the customer an invoice belongs to); products and services (to choose which item an invoice line is booked to); invoices (to create drafts); and attachments (to attach the supporting PDF to an invoice).

How we use it

Data obtained through Intuit's APIs is used solely to provide the invoicing feature you turned on. We do not use it for any other purpose, we do not sell it, we do not share it with anyone other than as needed to provide the feature, and we do not use it for advertising or to train models.

What we keep

We store the authorization tokens Intuit issues to us, your QuickBooks company identifier and company name, the identifiers of the QuickBooks customers and items your records are matched to, and the number of any invoice we create. We do not copy your general ledger, transactions, or other financial records into our systems.

Disconnecting

You can disconnect at any time from the application's settings, or by revoking the app's access from your Intuit account. When you disconnect, we delete the stored tokens. Invoices already created in QuickBooks are yours and remain in your books.

Intuit's handling of your data is governed by Intuit's own privacy policy.

6. Text messages (SMS)

All Things IT sends text messages about the services we provide: support and appointment updates, outage, backup and security alerts, and account notices from applications we run for you. We do not send marketing or promotional texts.

• Consent. We text only people who have agreed to receive our texts, usually by telling us so during a support or onboarding call. We record the number, the date, and who agreed. The full terms and the exact wording we use are on the SMS Terms in our Terms & Conditions. Agreeing to texts is never a condition of buying anything from us.
• Frequency and cost. Message frequency varies with your service activity. Message and data rates may apply.
• Opting out. Reply STOP to any message to stop receiving texts; we confirm once and send nothing more. Reply START to sign up again, or HELP for help. You can also call or email us using the contact details below.
• What we keep. Your mobile number, your consent record, and the texts we send and receive, used only to send the messages you agreed to, to honor opt-outs, and to answer your replies.
• No sharing for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Some businesses use our software to text their own contacts (for example, a trucking company texting dispatch orders to the haulers it works with). Those texts are sent in that business's name, under its own registration and privacy policy. We process those numbers on the business's behalf under the same rules: they are used only to deliver its messages and are never sold or shared for marketing.

7. How long we keep it

• Business records and uploaded documents are kept for as long as the customer who owns them keeps using the application, because they are that business's records. Businesses can delete their own records at any time from within the application.
• Account information is kept while the account exists.
• Server logs are kept for a limited period, typically no more than 90 days, unless needed longer for a security investigation.
• Email correspondence with us is kept as ordinary business correspondence.

When a customer's use of an application ends, we delete or return their data within a reasonable period after being asked, except where we are required to keep it by law.

8. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS) for all traffic, hashed passwords, access limited to signed-in and authorized users, protection against request forgery, login rate limiting, and an audit trail of significant actions. Secrets such as API credentials are stored outside any web-accessible location.

No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.

9. Your choices and rights

• Access, correction, and deletion. You can see and change most of your information inside our applications. For anything else, or to have your data deleted, email us at the address below and we will respond within 30 days.
• Connected services. You can disconnect any linked service at any time.
• Marketing. We do not send marketing email or marketing texts. If that ever changes, every message will include a way to opt out.
• Text messages. Reply STOP to any text to opt out at any time.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the Utah Consumer Privacy Act, including the right to know what personal information we hold, to request its deletion, and to not be discriminated against for exercising those rights. We honor these requests regardless of where you live. We do not sell personal information, so there is nothing to opt out of on that front.

10. Children

Our Services are for businesses and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

If we make material changes, we will update the effective date above and, where we have a way to reach you, let you know. Continued use of the Services after a change means you accept the updated policy.

12. Contact

All Things IT
Utah, United States
Email: [email protected]
Phone: (801) 874-3123