This Privacy Policy explains what information USA SuperTech ("we," "us," "our") collects through the client portal (the "Service"), how we use and share it, and the choices you have. By using the Service you agree to the collection and use of information as described here.
When you register, we collect your first and last name, email address, phone number, and (optionally) company name. Your password is stored as a one-way cryptographic hash — we never store or have access to your plain-text password. If you sign in with Google or Microsoft instead, we receive your name and email address from that provider.
Payments and subscriptions are handled by our payment processor, Stripe. USA SuperTech does not store your full card number or bank account number — Stripe retains that information directly, and we store only what Stripe returns to identify the payment method (e.g., card brand and last four digits).
If your organization enrolls devices for monitoring, we collect operational data about those devices through our RMM (remote monitoring and management) platform provider, including: device name, local and public IP address, operating system, manufacturer, serial number, online/offline status, and the network location the device is assigned to. This data is collected to monitor, secure, and support your covered devices — not for advertising or any purpose unrelated to the Service.
Content of support tickets and ticket comments you submit. If you contact our support line, calls, SMS messages, and voicemails may be logged (e.g., timestamp, caller number, call duration, message content) to provide and improve support.
If you opt in to SMS/MMS through the client account portal (a separate, optional checkbox — not implied by agreeing to this Privacy Policy or our Terms of Use), we use your mobile number to send support-related text messages: ticket updates, service requests, appointment information, and account-related service notifications. Message frequency varies based on your support activity, and message and data rates may apply. Consent is optional and is never required to receive support or use the Service. You can opt out at any time by replying STOP to any message, or by unchecking SMS consent in your account portal. We do not sell your mobile number or share it with third parties for their own marketing purposes. See our SMS Program & Consent page for full details, including what the opt-in flow looks like.
We log IP addresses and request activity associated with your account for security purposes — for example, to detect automated scanning, unauthorized access attempts, or abuse of the Service.
The Service uses a single session cookie (ust_session) to keep you logged in. It expires automatically after 24 hours of issuance and is marked SameSite=Lax to limit cross-site use. We do not use advertising or tracking cookies, and we do not store account data, credentials, or tokens in your browser's local storage — everything is kept server-side.
We do not sell your personal information. We share information only with the service providers necessary to operate the Service, and only for that purpose:
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe | Payment processing, subscription billing | Billing contact info, payment method metadata |
| Google / Microsoft | Optional sign-in (OAuth) | Name, email address |
| RMM platform provider | Device monitoring & management | Device/network data described above |
| Ingram Micro | Fulfillment of software/cloud subscriptions ordered through our catalog | Order details necessary to provision the product |
| Twilio | Phone, SMS, and voicemail infrastructure | Call/SMS metadata and content when you contact support |
We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of USA SuperTech, our clients, or others.
Authorized USA SuperTech staff may access your organization's account data to provide support and manage your services. For troubleshooting, staff with the appropriate internal permission may temporarily view your organization's data (devices, tickets, users) from within the portal in a support-access mode; this access is logged internally and limited to what's needed to resolve the specific issue.
We retain account, device, ticket, and billing data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, and support-history obligations. You may request deletion of your account as described in Section 9 below, subject to records we are required to keep by law or by an active service agreement.
Passwords are stored using industry-standard one-way hashing. Broker/credential-style secrets, where applicable, are encrypted at rest and accessed only server-side. We use session-based authentication rather than storing credentials in your browser. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
You can review and update your account information from your account settings. To request a copy of your data, correction, or deletion of your account, contact help@usasupertech.com. Deleting your account does not automatically remove records we are required to retain for billing, legal, or security purposes.
The Service is intended for business use and is not directed at children under 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last updated" date and, where appropriate, communicated by email.
Questions about this Privacy Policy can be sent to help@usasupertech.com or by calling (978) 737-8324.