Privacy Policy
MR Web Solutions TX · Prosper, Texas
- We collect your email, your name, and whatever progress you record in RouteFlow.
- Documents you upload are stored privately and filed under your account. Nobody else can open them.
- We don't sell your information, and we don't share it with courier companies or lead buyers.
- You can delete any document, or your whole account, whenever you want.
- Never upload patient information. RouteFlow is not built to hold it.
01Who this covers
This policy applies to mrwebsolutionstx.com, the RouteFlow program at /routeflow, and any forms, intakes, or email you send us through those sites. It's written by MR Web Solutions TX, a web design and software business based in Prosper, Texas.
It does not cover websites we build for clients. Those are the client's own properties with their own policies.
02What we collect
Information you give us
- Account details — your email address, a password, and the name you choose to display. Passwords are hashed by our authentication provider; we never see them.
- Program progress — which checklist items you've completed, which phases you've unlocked, and the issue dates you enter for certificates so the compliance calendar can tell you when they expire.
- Documents — files you upload to satisfy a phase gate. Covered separately in section 3.
- Messages — anything you send through a contact or intake form, or by email.
- Order details — if you buy a lead batch, the city and radius you ask for.
Information collected automatically
- Basic technical data — IP address, browser type, device type, pages viewed, and the page that referred you. This is ordinary web server and analytics data.
- Session data — a token that keeps you signed in.
What we don't collect
We do not collect your Social Security number, driver's license number, bank account details, or payment card numbers. If you pay for a membership or a lead batch, our payment processor handles the card and we receive only a confirmation, the amount, and the last four digits.
03Documents you upload
RouteFlow gates certain phases behind proof — an insurance declaration page, a HIPAA or OSHA certificate, a DOT hazmat certificate, a completed route log. Here is exactly what happens to those files.
- They go to private storage. The storage container is not public and has no browsable address. Files are filed under your account identifier.
- Only you can open them. Access is enforced at the database level, keyed to your account. Another member cannot retrieve your file even with the exact path — the request is refused regardless of what it asks for.
- Links expire. When you open one of your own documents, the system generates a link that stops working after 60 seconds.
- Deletion is real. When you remove a document, it is deleted from storage, not hidden from your view.
- We may review them. To confirm a gate is genuinely met, an authorized reviewer at MR Web Solutions TX may open a document you have submitted. Reviewer access is logged. We do not read your documents for any other purpose.
Documents are stored on infrastructure operated by Supabase, encrypted in transit and at rest. We never publish them, index them, or provide them to courier companies, insurers, lead buyers, or anyone else.
04Protected health information
Do not upload patient information to RouteFlow. That includes specimen manifests, requisition forms, chain-of-custody paperwork naming a patient, delivery logs containing patient identifiers, or anything else taken from a client's records.
RouteFlow is an educational and compliance-tracking program. MR Web Solutions TX is not a covered entity or a business associate under HIPAA with respect to your courier clients, and we have no business associate agreement with them. Material of that kind belongs on your client's systems under their own agreements.
If you upload it anyway, you are responsible for that disclosure. Tell us at [email protected] and we will delete it.
05How we use your information
- To create and maintain your account and keep you signed in
- To save your progress so it follows you between devices
- To decide whether a phase gate is satisfied
- To calculate renewal dates and send compliance reminders you've asked for
- To deliver and support anything you've purchased
- To answer messages you send us
- To understand which pages are useful, in aggregate
- To meet legal obligations and enforce our Terms
We do not use your documents or progress data to train machine learning models, and we do not build advertising profiles from them.
06Who we share it with
We do not sell your personal information. We share it only with service providers that make the product work, and only as much as each one needs:
- Supabase — authentication, database, and document storage
- Payment processor — subscription and one-off payments, when you buy something. Card details go to them directly and never touch our servers.
- Email delivery provider — compliance reminders and account email
- Hosting and analytics providers — serving the site and counting page views
- Google Fonts — typefaces are requested from Google's servers when you load a page, which lets Google see your IP address
We may also disclose information if we're legally required to, or to protect our rights or someone's safety. If the business is ever sold or merged, your information may transfer with it — we'd tell you before that happened.
07Cookies and tracking
We use cookies and browser storage for two things: keeping you signed in, and holding your RouteFlow progress locally so the app works smoothly. We may also use privacy-respecting analytics to count visits.
We do not run third-party advertising trackers or sell data to ad networks. Blocking cookies is fine for reading the site, but it will stop you staying signed in to RouteFlow.
08How long we keep it
- Account and progress data — until you delete your account
- Uploaded documents — until you delete them, or you delete your account
- Messages you send us — up to three years, so we can pick up an old thread
- Payment records — as long as tax and accounting law requires, generally seven years
- Server logs — typically 30 to 90 days
When you delete your account we remove your progress and your documents. Some records may persist briefly in backups before rotating out.
09Your choices and rights
Whether or not a particular privacy statute applies to a business our size, we'll honor these requests from anyone who asks:
- See it — ask for a copy of what we hold about you
- Fix it — correct anything inaccurate
- Delete it — remove your documents, or your entire account
- Take it — get your data in a portable format
- Stop the email — unsubscribe from reminders and updates at any time. We'll still send essential account messages, like a password reset.
Email [email protected] and we'll respond within 45 days. We may need to confirm your identity first, which usually means replying from the address on the account.
10Security
Traffic is encrypted with TLS. Documents are encrypted at rest and access is enforced per account at the database level rather than only in the interface. Passwords are hashed. Reviewer access to submitted documents is logged.
No system is perfect, and we won't pretend otherwise. Use a strong, unique password and tell us immediately if you think your account has been accessed by someone else.
11Children
Our services are for adults. We don't knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we'll delete it.
12Changes to this policy
If we change this policy we'll update the date at the top. For changes that meaningfully affect how your information is handled, we'll email account holders before it takes effect.
13Contact us
MR Web Solutions TX
Prosper, Texas
[email protected]
(940) 290-1953