Agreement E
Privacy Policy
How Core Systems Group Inc. handles personal information across MyFOWApp, FLOWSOR and the public Site.
Linked in the footer of every page · referenced from C.8
E.1
Who holds your information. Core Systems Group Inc., a Florida corporation, [registered address]. Questions, requests and complaints: [privacy@ address].
E.2
What we collect. From property owners: name, email, phone, property addresses and parcel identifiers, and payment records. From maintenance entities: business name, registration details drawn from the Department's public registered-entity list, contact details, approved brands, service rates and bank payout details. From every user: sign-in events, IP address, device and browser type, and how the product is used. From a maintenance event: the checklist answers, photographs with their embedded location and timestamp, the device location captured at the time of capture, the entity's signature, and the owner's signature and comments where given.
E.3
Why we collect it. To operate the platform and perform the agreements; to generate and transmit the compliance record the law requires; to take and settle payment; to verify that an entity is registered and in good standing; to prevent and detect fraudulent records; to support users; and to improve the product. We do not profile users for advertising and we do not run advertising trackers.
E.4
Location capture is deliberate, and it is the point. The platform records where a device was when a maintenance photograph was taken. That single fact is what makes a filed record evidence rather than an assertion, and it is why the record is worth anything to a county. Location is captured during a maintenance event only — not in the background, not between visits, not for property owners. By accepting Agreement A, an Entity consents to it.
E.5
Who we share it with. The receiving county or state authority, as the filing requires. The maintenance entity a property owner engages, and the property owner an entity serves. Our payment processor, which holds card details — Core does not store them. Our hosting, storage, email and error-monitoring providers, under contract and only to run the service. Purchasers of a property record under C.7 and Agreement F. Professional advisers. A successor, if the business or the platform is sold. Anyone else only with your instruction, or where the law or lawful process compels it.
E.6
Once a record reaches a county, it is the county's. A compliance record transmitted to a county health department or a state agency becomes that agency's record. It is then generally subject to Florida's public records law, Chapter 119, Florida Statutes, and to that agency's retention schedule. Core cannot retract it, correct it or have it deleted.
E.7
What we don't do, and exactly what we do sell. Core does not sell personal information. What C.7(c) and Agreement F sell is a property compliance record: the maintenance history of a physical system at an address. The owner's name, contact details and signature are removed before that copy is issued, and the photographs are excluded from it entirely. What remains is the property address, the system and equipment, the event dates, the maintenance entity, the checklist outcomes, the compliance status, and confirmation that photographic evidence is held on file. The owner is notified of every purchase under F.7.
E.8
How long we keep it. Maintenance records are kept for as long as the platform operates, because they are the property's compliance history and are relied on by the authority — see A.7, C.6 and C.11. Account and contact details are kept for [24 months] after an account closes, then deleted or de-identified. Payment records are kept as long as tax and accounting rules require. If Core winds down, A.7b and C.6b apply and the records may be deleted in their entirety after notice.
E.9
Your choices. You may see what we hold about you, correct your account details, download every record on your account at any time under A.7a or C.6a, and close your account. You cannot delete a filed maintenance record. Immutability is the product — a record that can be removed after the fact is not evidence — and a filed copy is in any event already with the authority under E.6.
E.10
Security, and what happens if it fails. Information is encrypted in transit and at rest, access is role-scoped, and administrative actions are logged. No system is perfect. If a breach affects personal information, Core will notify affected individuals and, where required, the Florida Department of Legal Affairs, within the period set by section 501.171, Florida Statutes — not later than 30 days from determination of the breach.
E.11
Children. The platform is for adults acting for themselves or a business. Core does not knowingly collect information from anyone under 18.
E.12
Which privacy laws actually apply. The Florida Digital Bill of Rights, section 501.702, Florida Statutes, applies to controllers above a global revenue threshold that Core is far below, so Core is not a covered controller today. This policy is written to that substance anyway, because the threshold is a question of scale rather than principle and because a county procurement review will ask.
E.13
Changes. Core may update this policy. Material changes are notified by email to account holders [30 days] before they take effect.