Privacy Policy

How information connects to the work.
And who is responsible for it.

EffectiveEffective Date: September 16, 2026

Who this policy covers

Exodus Tech, LLC provides Exodus Fusion, software for small service businesses. This policy describes personal information handled in connection with exodusfusion.com, app.exodusfusion.com, product inquiries, accounts, and use of Exodus Fusion.

Exodus Tech acts in two distinct roles. For the marketing site, product inquiries, account administration, billing, and our own business communications, Exodus Tech decides why and how information is used and is the controller of that information. When a service business uses Exodus Fusion to manage its own customers, jobs, records, and communications, that business decides the purpose and means of the processing and Exodus Tech processes the information on its behalf and under its instructions.

Confirm the written agreement that governs the processor role, including any data processing addendum, before this policy becomes effective.

If you are a customer of a service business using Exodus Fusion, contact that business about its use of your information. Its own privacy notice also applies. You can contact us if you need help identifying the appropriate business or have questions about our role.

Information we handle

The information involved depends on the capabilities a business uses and what people provide through them.

  • Account and business information: names, email addresses, phone numbers, business details, user roles, account settings, and subscription information.
  • Customer and service records: contact information, service addresses, booking requests, estimates, proposals, schedules, job notes, forms, checklists, photos, and signatures.
  • Billing and payment records: invoices, transaction amounts, payment status, and payment-related references. Payment providers also process information needed to complete a payment; their privacy notices describe their own handling of that information.
  • Communications and SMS compliance evidence: inquiries, support correspondence, message content, sender and recipient details, delivery status, and consent records. For managed SMS enrollment programs, evidence includes the mobile phone number, submission timestamp, choice, sending program, exact disclosure and version, canonical public source URL, and equivalent rendered form evidence. Dossier access is restricted to the sending business's administrators and authorized platform compliance reviewers.
  • Technical information: information generated when using an online service, which can include IP addresses, browser and device details, access times, pages or features used, and error or security logs. The final policy will reflect the confirmed logging and analytics configuration.

How information is used

Information supports the capabilities a service business chooses to use and the administration of the service.

  • Create and administer accounts, permissions, subscriptions, and business settings.
  • Connect customer records with estimates, scheduling, job execution, invoicing, payments, and follow-up.
  • Deliver requested communications, appointment reminders, and other configured workflow messages.
  • Respond to questions, provide assistance, and manage business relationships.
  • Diagnose problems, protect accounts, prevent misuse, and meet applicable legal obligations.

Any additional use, including advertising or product analytics, must be described in the final policy once the actual practices are confirmed.

When information is shared

Information in a business account is available to the people that business authorizes, according to the access the service provides. Customer-facing actions, such as sending an estimate or invoice, disclose the relevant information to the intended recipient.

Operating the service involves third-party infrastructure and service providers that receive only the information needed for their role and act under contract. These include Stripe for payment processing, Telnyx for SMS delivery, Resend (Plus Five Five, Inc.) for transactional and workflow email, and our cloud hosting, storage, and security providers.

Payment card and bank details are entered into and processed by Stripe, which is responsible for that handling under its own terms and privacy policy (stripe.com/privacy). Exodus Fusion does not receive or store full payment card or bank account numbers. Email addresses, message content, and delivery logs are shared with Resend solely to send and monitor the messages the service generates.

Information may also be disclosed when required by law, to respond to valid legal process, or when necessary to address fraud, security incidents, or threats to people's rights or safety. A proposed merger, acquisition, or business transfer may involve information subject to applicable legal protections.

The SMS consent restrictions in the next section apply to all communications. Mobile information and text messaging consent are never sold, rented, or shared with third parties or affiliates for promotional purposes.

SMS and messaging privacy

Exodus Fusion supports messaging by participating service businesses. Messages can relate to appointments, estimates, invoices, payments, customer service, and follow-up. The sending business is responsible for the context of its messages and for obtaining any required consent.

Mobile information and SMS consent are not sold, shared with affiliates, or disclosed to third parties for marketing or promotional purposes. Telnyx and other providers that are necessary to deliver or support the program may process the information only for that operational role and may not use it for their own purposes.

Exodus Fusion records SMS opt-out and opt-in events and blocks sends after an opt-out. Providing a phone number for a service request does not, by itself, describe consent to unrelated marketing. For managed programs, consent is collected through the business's approved hosted form and recorded with immutable disclosure, rendered form, and submission evidence. Minimal durable suppression and keyword replay-control records persist separately to prevent older, duplicate, or replayed requests from defeating an opt-out or re-enabling messaging; these control tombstones are not retained customer dossiers or disclosure archives.

The SMS Policy states these same limits in the same terms. Both documents must be updated together.

Cookies and similar technologies

Websites and online applications can use cookies or local storage to maintain sessions, remember preferences, and support security. Hosting and other service providers may also generate access logs.

Exodus Fusion uses essential and functional cookies, local storage, and server access logs strictly as necessary for user authentication, session security, and basic platform operations.

You can manage cookies through your browser settings. Blocking technologies needed for authentication or session management can affect sign-in and other features.

Retention and security

We retain personal information for the duration necessary to fulfill the purposes described in this policy, maintain active customer business accounts, satisfy legal and accounting recordkeeping obligations, resolve disputes, and maintain system security.

For managed SMS enrollment programs, consent evidence and version disclosures are retained as immutable records under the approved retention schedule and any active legal holds. Evidence needed for an active enrollment remains in place; other evidence becomes eligible for deletion after its applicable retention deadline, unless a legal hold or another active dependency prevents deletion. When an operational account is closed, active business data is scheduled for deletion in accordance with our terms of service and retention schedules. Separate suppression and keyword replay-control records support opt-out enforcement and protection against replayed requests while the messaging program operates.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or alteration. No system can be guaranteed completely secure; keep account credentials private and contact us immediately if you suspect unauthorized activity.

Your choices and requests

Contact contact@exodustech.us to ask about your personal information or request access, correction, or deletion. Tell us how you interact with Exodus Fusion and what you are requesting. Do not include passwords or full payment card details.

Depending on your jurisdiction, you may have rights under applicable privacy laws (including US state privacy statutes such as the CCPA/CPRA) to request access to, correction of, or deletion of your personal data, or to restrict certain processing activities. We do not sell personal information or share mobile information for targeted cross-context advertising.

We may need information to verify your identity or authority to act before responding. For records managed by a service business, we may direct the request to that business or assist it with the request. Some records may be subject to legal retention requirements or other exceptions.

Other important information

Exodus Fusion is designed exclusively for commercial business users and is not directed to children under 18 years of age. Contact us if you believe a child has provided personal information to us.

External websites and services, including payment services reached through links, have their own privacy practices. This policy does not replace their notices.

Customer data and personal information are hosted and processed within secure cloud infrastructure located in the United States.

Changes and contact

This Privacy Policy is effective as of September 16, 2026. Material updates will be posted directly to this page with a revised effective date.

For privacy questions or requests, contact Exodus Tech, LLC at contact@exodustech.us or 704-431-8318.