Privacy policy
Last updated October 15, 2026
Turtle Scope is a service of Flow Source Media LLC (“we”, “us”), a Minnesota company. This policy explains what we collect when you use the Turtle Scope website, web app and phone app, why, and what you can do about it. Questions: office@flowsourcemedia.com.
Who this covers
Turtle Scope is used by businesses (our customers, such as a contracting company) and the people they invite. The business decides what job information goes into Turtle Scope, including information about its own clients (homeowners). For that job information we act on the business's behalf, as its service provider.
What we collect
- Account details: your email address, the companies you belong to and your role.
- Job information your company enters: clients' names, phone numbers, email addresses and property addresses; jobs, notes, insurance claim details, measurements and marks drawn on photos.
- Photos and what's stamped on them: the image, when it was taken, the phone model, the direction the camera faced and, if you allow location access, where it was taken.
- Location: the phone app reads your location only while you are taking photos, to stamp them. It does not track you in the background.
- Usage and logs: a record of changes made in your company (who changed what and when), sync and error logs, and basic server logs.
- Website visits: the page visited and the site you came from. No cookies, no IP address and no identifier are stored for this.
- Billing: payments are handled by Stripe. We receive your company name, email, plan and payment status, never your card number.
Why we use it
- To run the service: store jobs and photos, sync the phone app, show your company's data to the people your company allows.
- To send what you ask us to: sign-in emails and codes, invitations.
- To connect the tools your company connects, such as its GoHighLevel account or its webhooks.
- To bill, support and secure the service, and to fix problems.
We do not sell personal information, and we do not use your company's job information to advertise.
Who processes it for us
- Supabase (database, file storage, sign-in), in the United States.
- Vercel (hosting the website and web app).
- Google (address lookup and maps).
- Stripe (payments).
- Hostinger (sending sign-in emails).
- GoHighLevel and any webhook address, only when your company connects them: clients and jobs are sent to your company's own account there.
How it's protected
Data is encrypted in transit and at rest. Each company's data is separated in the database itself, so one company can never read another's. Connection keys (such as your GoHighLevel sign-in) are stored encrypted and never sent to a browser or phone. Within a company, people see only what their role allows.
How long we keep it
For as long as your company has an account. If a company cancels, its data is kept for 90 days so it can come back or take an export, then deleted. Backups roll off within 30 days after that.
Your choices
- Ask your company's owner or admin to correct or remove job information about you.
- Ask us for a copy of your account information, or to delete your account: see Delete your data.
- Turn off location access for the phone app at any time in your phone's settings; photos still save, without a location.
Children
Turtle Scope is a business tool and isn't meant for children under 16. We don't knowingly collect their information.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account owners by email before it takes effect.