Privacy Policy

Version 2026.07 Last Updated: July 2026

1. Introduction

BC3D Agency LLC, doing business as pdrOS, including its service divisions pdrOS Tech Support and pdrOS Demo (collectively, "BC3D," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information in connection with:

• our websites, including bc3d.agency and pdrosapp.com [VERIFY: list all public domains], marketing communications, product demonstrations, and SMS programs (the "Sites"); and
• the pdrOS platform and related applications, modules, AI features, communication tools, and services, whether paid, free (including pdrOS Lite), trial, or beta (the "Services," as further defined in our Terms of Service).

This Policy should be read together with our Terms of Service (https://bc3d.agency/terms-of-service) (the "Terms"). Capitalized terms not defined here have the meanings given in the Terms. If this Policy conflicts with the Terms regarding platform data, the Terms control.

By using the Sites or Services, or opting into our communications, you agree to this Privacy Policy.

2. Our Two Roles: Business and Service Provider

We handle personal information in two distinct roles, and your rights and our responsibilities differ depending on which role applies:

(a) BC3D as the responsible business. For information about website visitors, demo prospects, SMS program subscribers, and the account, billing, and administrative information of our customers, BC3D decides how and why the information is used. Sections 3(a), 3(b), and the related provisions below describe this processing.

(b) BC3D as a service provider (processor). pdrOS customers (typically repair shops and related businesses) use the Services to store and process information about their own customers, employees, and business contacts — we call this "User Data," as defined in the Terms. For User Data, our customer is the responsible business, and BC3D processes User Data on the customer's behalf and under the customer's instructions, the Terms, and this Policy.

If you are a customer of a business that uses pdrOS (for example, a repair shop handling your vehicle), that business — not BC3D — is responsible for how your information is collected and used, for the notices you receive, and for responding to your privacy requests. Please direct privacy questions and requests to that business. If you contact us directly about information held in a customer's account, we will refer your request to that customer and reasonably assist them in responding, except where the law requires us to act directly.

3. Information We Collect

(a) Visitors, prospects, and communication subscribers

• Contact information. Name, email address, phone number, company, and mailing address when you submit forms, book appointments or demonstrations, request information, or otherwise provide it to us.
• Communications data. If you opt in, your messaging preferences and records of consent and opt-out activity related to SMS and email communications.
• Usage and device information. Cookies, pixels, and analytics tools may collect your IP address, browser type, pages visited, and interaction data on the Sites (see Section 8).

(b) pdrOS customer accounts

• Account and billing information. Business name, authorized user names and contact details, login credentials, payment method details (processed by our payment processors — we do not store full card numbers), invoices, and transaction history.
• Acceptance and contract records. Records of your acceptance of the Terms and other agreements, which may include IP address, timestamp, user agent, account identifiers, the version accepted, and the text of the acceptance prompt (as described in the Terms).
• Support and training records. Support tickets, chat and email correspondence, and — with the consent provided in the Terms — recordings and transcripts of meetings, video calls, screen-sharing, onboarding, and training sessions.
• Platform usage information. Feature usage, log data, configuration choices, messaging and usage volumes (for billing and abuse prevention), and diagnostic information.

(c) User Data processed for our customers (service-provider role)

Depending on how each customer uses the Services, User Data may include their customers' and contacts' names, contact details, vehicle and repair information, insurance claim information, repair intake documentation (which may include driver's license information collected for repair intake), photos and media, documents, appointment and scheduling information, payment and billing records, and communications — including SMS, email, chat, and voice communications, and recordings and transcripts of calls and conversations handled through the Services, including conversations handled by AI features (see Section 5). The categories of Prohibited Sensitive Information listed in the Terms (such as Social Security numbers and HIPAA-covered health information) are not permitted on the platform.

4. How We Use Information

For information we hold as the responsible business, we use it to:

• Provide requested services, demonstrations, onboarding, and customer support;
• Send appointment confirmations and reminders, technical support notifications, and onboarding communications to pdrOS platform clients;
• Send product demonstration scheduling confirmations and related follow-up communications;
• Send SMS and email communications that you have explicitly consented to receive;
• Create, administer, bill, and secure customer accounts, and maintain records of contract acceptance;
• Improve our websites, Services, and marketing performance using analytics;
• Maintain compliance records related to consent and opt-outs;
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms; and
• Comply with legal obligations and enforce our agreements.

For User Data we process as a service provider, we use it only as necessary or useful to provide, operate, maintain, secure, support, troubleshoot, and improve the Services for the customer; to process transactions, communications, automations, reports, exports, and integrations at the customer's direction (including by AI features the customer has enabled); to prevent fraud, abuse, and security incidents; to comply with law and legal process; and to enforce our agreements — consistent with the license and limits in the Terms.

Aggregated and de-identified data. We may create and use aggregated, anonymized, or de-identified data derived from use of the Services — data that does not identify our customers or their customers — for analytics, benchmarking, product development, performance monitoring, security, reporting, business intelligence, marketing, and improvement of the Services.

5. AI Features, Automation, and Call Recording

The Services include artificial intelligence and automation features — for example, AI-assisted customer communication, insurance claims calling, and operations assistants. In connection with these features:

• Processing at time of use. AI features process User Data at the time of use to generate outputs and take actions for the customer that enabled them. We do not use identifiable User Data to train generalized AI or machine-learning models made available to other customers, except with consent or in aggregated or de-identified form as described in Section 4. [VERIFY: matches actual practice, including any third-party AI features enabled through underlying platform providers.]
• Recording and transcription. Calls, conversations, and messaging sessions handled through the Services — including conversations handled by AI features — may be recorded, transcribed, and stored as part of the Services. Under the Terms, each customer is responsible for providing any legally required recording notices to, and obtaining any required consents from, participants in its communications, and for complying with laws requiring disclosure that a communication is automated.
• Third-party AI providers. AI features may be delivered using third-party AI service providers, which process data for us as described in Section 9. [VERIFY: confirm provider terms prohibit their training on this data, or adjust the statement above.]
• BC3D's own communications. As described in the Terms, we may record meetings, video calls, and screen-sharing sessions between BC3D and customers for training, quality assurance, record-keeping, support, and dispute resolution.

6. SMS Communications

We operate SMS messaging programs under BC3D Agency, pdrOS Tech Support, and pdrOS Demo. By opting in to any of these programs, you consent to receive text messages related to that program's stated purpose. Message and data rates may apply. Message frequency varies. You may opt out at any time by replying STOP. Reply HELP for assistance.

Messages sent by pdrOS customers. Businesses that use the Services send their own SMS, email, voice, and other communications to their customers through the platform. Those communications are sent by and on behalf of the business, not BC3D, and the business is responsible for obtaining required consents and honoring opt-outs. If you receive messages from a business that uses pdrOS, you may opt out by replying STOP, and you should direct questions about those messages to that business.

7. pdrOS Lite, Free, and Trial Accounts

pdrOS Lite and other free, trial, beta, or promotional accounts are provided under the Terms, which permit us to suspend, modify, or delete such accounts and their data at any time. If you store your customers' information in a Lite, free, or trial account, you are responsible for your own notices to your customers and for maintaining independent copies of information that matters to your business.

8. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to personalize your experience, operate and secure the Sites and Services, and understand how our websites are used, including through third-party analytics and advertising tools. You can control cookies through your browser settings; some features may not work correctly if cookies are disabled. Where required by applicable law, we honor opt-out mechanisms for targeted advertising. [VERIFY: list the actual analytics/advertising tools in use (e.g., Google Analytics, Meta pixel, PostHog, Hyros) and whether any constitutes "targeted advertising"/"sharing" under state privacy laws — if so, a "Your Privacy Choices" link/mechanism may be required.]

9. How We Share Information

We do not sell your personal information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may share information only in the following limited circumstances:

• Service providers. We share information with trusted vendors who help us deliver the Sites and Services — such as cloud hosting and platform infrastructure, SMS/voice/email delivery providers and carriers, AI service providers, payment processors, customer support tools, scheduling tools, and analytics providers. These providers may only use information to perform services on our behalf and are bound by contractual obligations consistent with this Policy.
• At a customer's direction. For User Data, we transmit information to the recipients our customers direct — for example, when a customer (or an AI feature the customer has enabled) sends a communication, estimate, or document to its customer, an insurance carrier, or another recipient through the Services.
• Legal and safety. We may disclose information if required by law or valid legal process, or to protect the rights, safety, security, and property of BC3D, our users, or others. Our handling of subpoenas and other third-party legal demands relating to customer accounts is described in the Terms.
• Business transfers. If BC3D is involved in a merger, acquisition, financing, reorganization, or asset sale, information may be transferred as part of that transaction. Any successor will be required to honor this Privacy Policy or provide notice of changes.
• With your consent, or as you otherwise direct.

10. Data Retention

We retain information for as long as needed for the purposes described in this Policy, and specifically:

CategoryRetentionPaid customer User DataFor the life of the subscription, then six (6) months after cancellation (per the Terms), after which it may be permanently deletedLite, free, trial, and beta account dataMay be deleted at any time (per the Terms)Account, billing, contract-acceptance, and consent/opt-out recordsAs long as needed for legal, tax, accounting, billing, and compliance purposes, and to establish and enforce agreementsSupport correspondence, session recordings, and transcriptsAs long as reasonably needed for support, quality assurance, record-keeping, and dispute resolutionWebsite analytics dataPer the retention settings of the analytics tools usedBackupsBackup copies persist for a limited period after deletion, per backup rotation schedules

We may retain information longer where necessary to comply with legal obligations, resolve disputes, prevent fraud or abuse, maintain security, or enforce agreements. Deletion of data from active systems does not immediately remove it from backups.

11. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit and access controls. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. If we confirm a security incident involving unauthorized access to your unencrypted personal information, we will notify affected customers without undue delay, consistent with applicable law, as described in the Terms.

12. Your Choices and Rights

• SMS opt-out. You can opt out of SMS messages from our programs at any time by replying STOP to any message. After you send STOP, we will send a confirmation message and you will no longer receive SMS messages from that program unless you opt back in.
• Email opt-out. You can unsubscribe from marketing emails by clicking the unsubscribe link in any email. We may still send you non-promotional messages relating to your account or transactions.
• Access, correction, deletion, and portability. You may contact us using the information in Section 16 to request access to, correction of, deletion of, or a copy of your personal information, subject to applicable law. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.
• State privacy rights. Depending on where you live, you may have additional rights under state privacy laws (such as the Texas Data Privacy and Security Act or the California Consumer Privacy Act), including rights to know, access, correct, delete, and obtain a copy of your personal information, to opt out of targeted advertising or "sales" of personal information, and to appeal a refusal. To the extent such a law applies to our processing, you may exercise these rights using the contact information in Section 16, and you may appeal a decision by replying to our response.
• End customers of pdrOS customers. If your information is held in a pdrOS customer's account as User Data, your rights are exercised against that business. We will refer your request to the business and reasonably assist it in responding.
• Platform data export. pdrOS customers can export their User Data using self-service tools as described in the Terms.

13. Children's Privacy

Our Sites and Services are business tools and are not intended for children under 13. We do not knowingly collect personal information from children under 13, and the Terms prohibit customers from processing information relating to children under 13 on the platform. If you believe a child's information has been provided to us, contact us and we will delete it.

14. International Users

The Sites and Services are operated from the United States and are intended for users in the United States. If you access them from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your jurisdiction.

15. Data Processing Addendum

Where applicable data protection law requires a data processing agreement between a customer and BC3D with respect to personal data in User Data, we offer a standard data processing addendum upon written request, as described in the Terms. [VERIFY: same DPA prerequisite as ToS §22.]

16. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact:

BC3D Agency LLC 1320 Lake St., Fort Worth, Texas 76101 Email: michael@bc3d.agency Phone: 817-961-1196 [VERIFY: this number appears in the live policy and may be tied to SMS campaign registrations; the Terms list (877) 478-8614 — confirm which number(s) to publish, or list both.] Website: https://bc3d.agency

17. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new Last Updated date and version identifier. For material changes that reduce your rights, we will provide reasonable advance notice — by email, dashboard notice, or website posting — before the change takes effect. Your continued use of the Sites or Services after the effective date constitutes acceptance of the updated Policy.

END OF PRIVACY POLICY

‍

Heading 2

Heading 3

Heading 4

Heading 5

Heading 6

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

1. Item 1
2. Item 2
3. Item 3

Unordered list

• Item A
• Item B
• Item C

Text link

Bold text

Emphasis

^Superscript

_Subscript