1. Who We Are

Triskelion Industries LLC is a Louisiana limited liability company doing business as Avoyelles Phone Shop (collectively, “Avoyelles Phone Shop,” “we,” “us,” or “our”). We provide device repair and data-recovery services, technology consulting, website and mobile-application development, hosting and domain services, remote support, customer-support tools, and software products and subscriptions.

Privacy inquiries may be sent to support@avoyellesphoneshop.com.

2. Scope

This Privacy Policy explains how we process personal information through:

• avoyellesphoneshop.com and related company-controlled websites;
• our store, account, licensing, subscription, support, chat, authentication, hosting, provisioning, and remote-support systems;
• the Avoyelles Phone Shop mobile application;
• Family Unison and My Food Math;
• software products that communicate with systems we control; and
• in-person, telephone, email, mobile, and other interactions with our business.

Some products have a supplemental privacy notice. A supplemental notice controls for the product-specific subject it addresses, while this Policy continues to apply to shared company processing.

This Policy does not describe all processing performed independently by a customer on a website or system the customer controls. For example, information entered into a self-hosted Project Portal, Law Enforcement Portal, Ticket System, or Warranty Registration installation generally remains subject to that site operator’s privacy policy unless the information is transmitted to us for licensing, updates, hosting, authentication, support, or another requested service.

3. Information We Process

The information we process depends on the product or service used.

Contact, account, and identity information

This may include a name, business or organization, mailing address, email address, telephone number, username, account identifiers, authentication-provider identifiers, profile image, role, and communications preferences.

Transaction and subscription information

This may include products and services purchased, order and invoice details, subscription status, renewal and cancellation information, discounts, trials, payment status, transaction identifiers, billing address, tax information, and limited payment-method details supplied by a payment processor. When a customer saves a card or enables automatic payment, Stripe or the applicable processor retains the full card number and security code. Our site stores the processor-issued customer or payment-method token needed to initiate authorized later charges and may store the card brand, last four digits, and expiration date so the customer can identify the saved method. We do not store the complete card number or security code in our WordPress database.

Device repair, warranty, and data-recovery information

This may include device type, model, serial or other identifier, condition, reported problem, diagnostic and repair history, parts used, warranty and receipt codes, photographs, pickup and storage records, and credentials or passcodes a customer voluntarily provides so we can perform authorized work. Repair and recovery work may expose us to files, accounts, communications, or other information stored on a device. We access such information only as reasonably necessary to provide the authorized service, troubleshoot, verify functionality, protect the device or data, or comply with law.

Website, application, hosting, and development information

This may include customer-provided text, images, files and business records; domains and DNS information; hosting accounts; website databases and backups; backups; administrator content; administrative and developer credentials; Apple, Google, Firebase, email, and other integration credentials; project requirements; support history; and application-store materials.

Software licensing and technical information

This may include a customer and order identifier, product and version, license key or activation token, activation status, authorized domain or installation, site URL, WordPress and PHP versions, server IP address, update requests, error or abuse-prevention logs, and support information. Optional telemetry or diagnostics will be identified in the applicable product or setting when offered.

Support, ticket, warranty, and chat information

This may include names, email addresses, phone numbers, ticket descriptions, replies, attachments, device and warranty information, internal and public notes, assignment and status history, API activity, notification and delivery logs, and audit records.

Chat and communications information

This may include an email address, message content, conversation history, verification status, account association, support context, and limited IP or device information used for security and rate limiting. Guest conversation history is protected using email verification and a random session cookie.

Authentication and connected-service information

When a user chooses a supported sign-in or connected-service provider, we may receive identifiers, name, email address, profile image, authorization scopes, and access or refresh credentials needed to provide the requested connection. Connected Google Drive features may process authorized file and folder metadata or content at the user’s direction. Available providers may include Google, Apple, Microsoft, Facebook, GitHub, LinkedIn, or X, depending on the product and configuration.

Mobile-application and notification information

This may include device and application identifiers, push-notification tokens, application version, operating system, authentication state, crash or diagnostic information if enabled, and activity needed to provide the app’s customer or employee functions.

Family Unison information

Family Unison may process adult accounts, child or managed profiles, household relationships, PINs and sessions, chores, rewards, schedules, pet information, join codes, photographs submitted as chore proof, device tokens, and subscription identifiers. Family Unison is intended for household use and may be used by children. Only an authenticated administrator who certifies that they are the child’s parent or legal guardian can create a child profile, and that deliberate creation is the parent or guardian’s consent action for the child’s participation. The creation flow presents direct notice, requires one explicit confirmation, and records the consenting administrator and child identifiers, the parent-or-legal-guardian certification, notice version and hash, acceptance time, client platform, IP address, and user agent. The dedicated Family Unison Privacy Notice describes this process and continuing access, withdrawal, and deletion controls.

Family Unison’s configured proof-photo retention period is currently 30 days by default. A daily cleanup permanently removes the image file for an approved or rejected chore after the configured period measured from review, or from creation when no review timestamp exists, and clears the stored photo reference. The underlying chore record is retained under the applicable record-retention rules. Cleanup is suspended for a family or member subject to an active preservation hold, and the photo may then be retained until the hold is released or expires and ordinary cleanup resumes. Administrators may configure a different retention period; the dedicated Family Unison notice must display the production value rather than promise a fixed period that does not match configuration.

My Food Math information

My Food Math may process account and profile information, household membership, managed profiles, meals, consumption logs, nutrition targets and history, progress records, saved meals, labels or photographs, meal plans, groceries and inventory, device tokens, and subscription identifiers. Premium features may submit information needed for AI meal suggestions or nutrition-label analysis to OpenAI. Food searches may use USDA FoodData Central. My Food Math’s dedicated Privacy Notice explains these features, household visibility, managed profiles, retention, and deletion.

Remote-support information and access

APS Remote Support may process customer and organization names, technician identity, device name and platform, device status, RustDesk identifier, enrollment and session credentials, connection status and timestamps, network and security logs, and audit events. During an authorized remote session, a technician may be able to view or control the device and encounter information displayed or stored on it. The exact capabilities and authorization requirements are described in the Remote Support Notice presented before access.

Usage, security, and cookie information

This may include IP address, browser and device type, operating system, referring and visited pages, timestamps, session identifiers, cookie choices, login and authentication events, errors, audit logs, and information used to secure, maintain, measure, and improve our services.

4. How We Use Information

We use information to:

• provide, provision, maintain, secure, and support requested products and services;
• create and administer accounts, authentication, licenses, subscriptions, sites, domains, applications, support sessions, and customer records;
• process orders and payments, issue receipts, manage renewals and cancellations, prevent fraud, and keep business and tax records;
• perform authorized diagnostics, repair, recovery, warranty, hosting, development, maintenance, and remote-support work;
• deliver software, updates, notifications, messages, and customer support;
• personalize user-selected settings and maintain household or organization permissions;
• monitor reliability, investigate errors or misuse, enforce agreements, and protect users, systems, property, and legal rights;
• comply with applicable legal, accounting, regulatory, court, and lawful government requirements; and
• use analytics or marketing technologies when enabled and permitted by applicable consent and settings.

We will not use personal information for a materially incompatible purpose without providing appropriate notice and obtaining consent where required.

5. Legal Bases for EEA and UK Processing

Where European Economic Area or United Kingdom law applies, our legal basis depends on the activity and may include performance of a contract, steps requested before entering a contract, compliance with law, our or another person’s legitimate interests, protection of vital interests, or consent. A user may withdraw consent at any time, without affecting processing already performed lawfully.

6. Payments

Stripe processes online checkout payments. Square processes in-person and mobile checkout payments. These providers receive payment and transaction information under their own privacy notices and security obligations. We receive transaction status and information necessary to complete the purchase, administer subscriptions, prevent fraud, issue refunds where applicable, and maintain required records.

Apple and Google process purchases made through their respective application stores. We may receive a transaction or purchase token, product identifier, subscription status, renewal or expiration information, and an account-association identifier. We do not receive full card details from the app stores.

7. Service Providers and Other Recipients

We disclose information only as reasonably necessary for the purposes described here, at a user’s direction, or as required by law. Recipient categories may include:

• payment processors, including Stripe and Square;
• IONOS, which provides server infrastructure and some domain-registration services used in delivering company-managed hosting, email, and on-server backups;
• NameSilo, which provides domain-registration services for some domains;
• Brevo and Google/Gmail, which support delivery of some company-managed email;
• Google Drive, which stores off-site copies of company-managed backups;
• Google Analytics, which provides public-site usage analytics subject to the applicable cookie preference;
• Google/Firebase services used for authentication, databases, notifications, APIs, and connected features;
• Apple and Google for application distribution and in-app purchases;
• OpenAI for enabled My Food Math AI features;
• USDA FoodData Central for food and nutrition lookup;
• email and SMS delivery providers selected for a site or service;
• remote-support, identity, analytics, CAPTCHA, and fraud-prevention providers;
• professional advisers, insurers, auditors, and vendors supporting our operations;
• a buyer, successor, or adviser involved in a proposed or completed merger, financing, reorganization, sale, or transfer; and
• courts, regulators, law-enforcement agencies, or other parties when disclosure is legally required or reasonably necessary to protect rights, safety, users, systems, or property.

Customer-installed products may connect to providers selected and configured by the customer. The customer is responsible for describing those connections to its own users.

8. Sale, Sharing, and Targeted Advertising

We do not sell personal information for money. We do not sell or share SMS opt-in data or consent with third parties for their own marketing. We do not currently use advertising or retargeting pixels on the public site.

Some privacy laws define “sale,” “sharing,” or targeted advertising more broadly than an exchange for money. If we later enable advertising or cross-context behavioral advertising that falls within those definitions, we will provide the required notice and choice mechanism and honor applicable opt-out signals. Optional analytics technologies are subject to the Cookie Policy and preference center where required.

9. Cookies and Similar Technologies

We use necessary cookies and similar storage for checkout, account sessions, security, load balancing, preferences, chat verification, and cookie choices. We use Google Analytics to understand use of the public site. Google Analytics will be classified as optional analytics and, where consent is required, will not load until the visitor accepts that category. We do not currently use advertising cookies or pixels on the public site.

The Cookie Policy and cookie preference center identify the categories in use and allow visitors to accept or reject optional technologies and later change their choice. Necessary technologies cannot be disabled through the preference center because they are required to provide or secure requested functions.

Browser tracking signals and third-party tracking

Some browsers transmit a legacy “Do Not Track” signal. Because no uniform standard governs how that signal should be interpreted, our services do not currently change their behavior in response to it. Use the cookie preference center to reject or withdraw optional analytics consent. If a legally recognized opt-out preference signal applies to a future sale, sharing, or targeted-advertising practice, we will process it as required by applicable law.

Third-party providers may collect information about activity on our services only as described in this Policy and the Cookie Policy. On the public website, Google Analytics may measure activity after the required consent. We do not currently permit third-party advertising or retargeting pixels to track visitors across unaffiliated websites or services for targeted advertising.

10. Retention

We retain information only for as long as reasonably necessary for the purpose collected, including to provide an active account or service, complete a repair or support matter, maintain security and audit records, satisfy warranty and subscription obligations, enforce agreements, resolve disputes, and meet legal, tax, accounting, backup, and regulatory requirements.

Retention varies by record type and product. Product-specific notices may state shorter or fixed periods. When information is no longer required, we delete, anonymize, or securely isolate it, subject to lawful exceptions and limited backup cycles. Account deletion does not automatically cancel a subscription purchased through Stripe, Apple, Google, or another seller; cancellation must be completed through the applicable seller’s process.

11. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information and service. These may include encryption in transit, access controls, authentication, logging, backups, least-privilege access, rate limiting, and software maintenance. No system, transmission, device repair, recovery process, or remote session can be guaranteed completely secure or error-free.

Customers operating self-hosted software are responsible for securing and maintaining their WordPress installation, hosting environment, accounts, integrations, and authorized users.

12. International Processing

We are based in the United States and do not categorically exclude customers because they are located outside the United States. Information may be processed in the United States or another country where a service provider operates. Privacy protections and government-access rules in those countries may differ from those in a user’s location. Where applicable law requires it, we use an approved transfer mechanism or other lawful safeguards.

13. Privacy Rights

Depending on location and applicable law, a person may have rights to request access, correction, deletion, portability, restriction, or information about processing; object to certain processing; withdraw consent; or opt out of sale, sharing, targeted advertising, or certain profiling.

Requests may be submitted to support@avoyellesphoneshop.com. We may verify identity and authority before responding. We will respond within the period required by applicable law and will explain when an exception applies. Authorized agents may submit requests where permitted. A person will not receive unlawful discriminatory treatment for exercising a privacy right.

Users may also manage applicable account information, app permissions, connected-provider access, subscriptions, cookies, and marketing preferences through the relevant account, device, provider, or preference settings.

EEA and United Kingdom rights

Where the GDPR or UK GDPR applies, you may request access to and a copy of personal information, correction of inaccurate or incomplete information, deletion when no lawful reason for continued processing applies, restriction of processing, and portability of information you provided to us when processing is automated and based on consent or contract. You may object to processing based on legitimate interests because of your particular situation and may object to direct marketing at any time. You may withdraw consent without affecting processing already performed lawfully. You may complain to the data-protection authority where you live, work, or believe an infringement occurred.

When we rely on legitimate interests, we consider the purpose, necessity, and effect on individual rights. Providing certain information may be necessary to enter into or perform a contract or satisfy a legal obligation; if required information is not provided, we may be unable to supply the requested product or service. We do not currently make decisions producing legal or similarly significant effects based solely on automated processing unless we provide the notice and safeguards required by law.

California and other United States state rights

Residents of California and other states with applicable comprehensive privacy laws may have rights to know or confirm whether we process personal information; access categories and specific pieces of information; learn the categories of sources, purposes, and recipients; correct inaccuracies; delete information subject to exceptions; obtain a portable copy; and opt out of sale, sharing, targeted advertising, or certain profiling. We will not unlawfully discriminate against a person for exercising a privacy right. Where permitted, an authorized agent may submit a request, but we may require proof of authority and verification directly from the individual.

For the preceding 12 months, the categories we may have collected and disclosed for the business purposes described in this Policy include identifiers and contact information; customer-record information supplied for a transaction or service; commercial and subscription records; internet, device, cookie, and application activity; approximate location inferred from an IP address; photographs, audio, video, or other content a user submits; professional or organizational information supplied for a business or public-safety account; nutrition and progress information submitted to My Food Math; household and child-profile information submitted to Family Unison or My Food Math; and inferences or preferences used to provide requested functionality. Sources include the individual, an authorized household or organization administrator, devices and browsers, payment and app-store providers, connected services, customer-controlled installations, and vendors described in this Policy. We disclose applicable categories to the service-provider and legal-recipient categories described in Section 7. We do not collect every example included in a statutory category merely because the category is listed here.

We do not sell personal information for money and do not currently share it for cross-context behavioral advertising. If that changes, we will provide the required notice and opt-out method. We honor legally required browser-based opt-out preference signals when they apply to an enabled practice. California residents may also request, once per calendar year where applicable, information about disclosures for another business’s direct-marketing purposes. California users under 18 may request removal of content they publicly posted, but removal may not be complete where another user reposted it or law permits retention.

Brazil rights

Where Brazil’s Lei Geral de Proteção de Dados applies, processing may be based on consent, compliance with law, contract or pre-contract steps, regular exercise of rights, protection of life or physical safety, protection of health where applicable, legitimate interests that do not override fundamental rights, credit protection, or another basis authorized by the LGPD. You may request confirmation of processing; access; correction; anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed information; portability subject to applicable rules and trade-secret protections; information about recipients and the consequences of withholding consent; deletion of consent-based information subject to lawful exceptions; withdrawal of consent; opposition to unlawful processing; review of qualifying automated decisions; and complaint to the ANPD or an appropriate consumer-protection body.

We will respond in the form and within the period required by the LGPD. Where required and feasible, we will notify recipients of a correction, deletion, anonymization, or blocking request. International transfers from Brazil occur only through a mechanism or circumstance permitted by the LGPD, including an adequate destination or safeguards, contractual necessity, legal obligation, protection of life or safety, regular exercise of rights, or authorized cooperation.

Request verification, timing, and appeals

Describe the request with enough detail for us to understand and evaluate it. We may request information reasonably necessary to verify identity, account association, parental or administrator authority, or an agent’s authorization. We use verification information only for that purpose. We ordinarily provide responses without charge, but may charge or decline a manifestly unfounded, excessive, or repetitive request where law permits. We will respond within the legally required period and provide any available appeal instructions when we deny a request and applicable law requires an appeal process.

14. Children

The general Avoyelles Phone Shop website and business services are not directed to children under 13. Family Unison is an exception: it is designed for household use and may include children. Only an authenticated administrator who certifies that they are the child’s parent or legal guardian can create a child profile. Creating that profile after reviewing the child privacy notice is the parent or guardian’s affirmative consent action. The creation flow captures the versioned consent record before the profile is created. A parent or guardian may withdraw consent and stop further collection by deleting the child profile or contacting us, subject to lawful preservation requirements.

My Food Math is not directed to children under 13 as independent users. A parent or legal guardian may create and supervise a managed profile for a child under 13 after checking the child designation, reviewing the direct child privacy notice, and providing an unchecked affirmative certification that the adult is at least 18 and is the child’s parent or legal guardian. The service records the parent, child, and household identifiers, the fixed parent-or-legal-guardian certification, notice version and hash, time, client platform, IP address, and user agent. The managed child profile may contain the child’s profile name and login, nutrition goals, meal and progress records, household activity, and support or security records. The child does not create an independent account. The parent or legal guardian controls the profile and may review, correct, export, or delete it, subject to security and lawful preservation requirements. We do not sell this information or use it for targeted advertising. Consent may be withdrawn by deleting the profile or contacting support@avoyellesphoneshop.com; withdrawal ends further collection and requires deletion or deactivation unless retention is legally required.

We do not knowingly sell or share a child’s personal information for targeted advertising.

15. Customer-Controlled and Public-Safety Systems

Project Portal, Law Enforcement Portal, WP Ticket System, and Warranty Registration are generally self-hosted products. The organization deploying the product controls its users, content, retention, access, integrations, and legal obligations. Avoyelles Phone Shop does not automatically receive the operational records stored in those installations merely because it developed or licensed the software.

We may receive limited licensing, update, security, and support information. If a customer asks us to host, maintain, troubleshoot, migrate, or remotely support an installation, we may access additional information as necessary to perform that request and under the applicable service agreement.

Law Enforcement Portal is not a records-management system, computer-aided dispatch system, evidence-management system, or a representation that a deployment is automatically CJIS compliant. Agencies remain responsible for their environment, access, retention, public-records duties, policies, and regulated information.

16. Legal Requests, Preservation, Account Restrictions, and Disclosure

Family Unison and My Food Math provide a public intake process for sworn law-enforcement officers, government agencies, courts, attorneys, and other authorized legal entities to submit preservation requests or identify legal process. Submission of a request does not confirm that an account exists, authorize disclosure, waive formal service requirements, or guarantee action. We may independently verify the requester, authority, scope, identifiers, jurisdiction, and legal process and may reject requests that are incomplete, overbroad, unlawful, fraudulent, or insufficiently authenticated.

When we reasonably believe preservation or restriction is authorized or required by applicable law, valid legal process, an emergency involving danger of death or serious physical injury, protection of users or the service, or advice of counsel, we may:

• preserve existing account, household, family, activity, content, photo, device, notification, security, and audit records;
• prevent deletion or alteration of records subject to a preservation requirement;
• restrict or freeze login and API access and revoke active sessions for an affected account, user, member, family, or household;
• maintain the restriction or hold for the required or approved period;
• generate a scoped evidence package containing responsive records and, where applicable, uploaded photographs;
• exclude or redact passwords, PIN hashes, session credentials, license keys, API secrets, push tokens, and other authentication material not appropriate for disclosure;
• create a manifest and cryptographic hashes to document the evidence package’s contents and integrity; and
• log the creation, release, and export of a compliance control.

A preservation hold does not by itself authorize disclosure. We disclose records only when we reasonably believe disclosure is permitted or required by applicable law, valid legal process, a properly evaluated emergency request, the user’s direction, or another lawful basis. We may narrow a request, seek clarification, object to process, or consult counsel before disclosure.

We may notify the affected person unless notice is prohibited by law or court order, would create a risk of harm, would compromise an investigation or the service’s security, or is otherwise inappropriate under the circumstances. We do not promise advance notice in every case.

Evidence packages are administrative export tools. Their availability does not guarantee that responsive records exist, are complete, have been retained outside ordinary periods, are admissible, or satisfy an authority’s evidentiary requirements. Requesting authorities remain responsible for lawful service, chain of custody after delivery, and secure handling of disclosed records.

17. Changes to This Policy

We may update this Policy to reflect changes in products, practices, providers, or law. We will post the revised version with a new effective date. When a change materially affects how previously collected information is used or when law requires additional notice or consent, we will provide an appropriate notice and obtain consent where required. Prior versions will be retained in our legal-document records.

18. Contact and Complaints

Questions, complaints, and privacy requests may be sent to:

Triskelion Industries LLC DBA Avoyelles Phone Shop support@avoyellesphoneshop.com

Individuals may also complain to an applicable privacy or data-protection regulator where that right is available.