Privacy Policy

Last updated: March 28, 2026

Levocraft LLC ("Levocraft," "we," "us," or "our") develops and operates the FACTS Checker, POD Dashboard, and POD Driver applications (the "Apps") on behalf of Tools & Accessories Corp ("T&A"). This Privacy Policy describes how we collect, use, and protect information when you use the Apps.

The Apps are intended solely for authorized T&A employees and are not available to the general public.

Information We Collect

When you use the App, we collect the following information:

Login Credentials: Your username and password are used to authenticate with T&A's internal systems. Passwords are securely hashed using bcrypt and are never stored in plain text.
Usage Data: We log search queries, part number lookups, and related actions for audit and troubleshooting purposes. These logs include your username, IP address, and timestamps.
Email Address: If provided, your email is stored in your user profile for password reset and account invite functionality.
Location Data (GPS): When using the POD Driver app, device GPS coordinates are collected at the time of delivery submission to verify delivery locations. Location data is collected only during active submissions, not continuously.
Delivery Photos: Photos taken as proof of delivery are uploaded and stored on our servers.
Signatures: Electronic signatures captured from delivery recipients are stored as proof of delivery.
Driver PIN: Drivers authenticate using a numeric PIN, which is securely hashed with bcrypt and never stored in plain text.

Information Stored on Your Device

The App stores the following data locally on your device using your browser's localStorage. This data never leaves your device:

Authentication token (for keeping you signed in)
Recent search history
Display preferences (column visibility, column order, theme)
App install prompt dismissal state
Driver session token and PIN authentication state
GPS permission status

You can clear this data at any time by logging out or clearing your browser's site data.

Offline Data Storage

When the POD Driver app is used without an internet connection, delivery data (including photos and signatures) is temporarily stored on your device using IndexedDB until connectivity is restored. This data is:

Automatically synced to our servers when your device reconnects to the internet
Deleted from your device after successful sync
Stored only in your browser's local storage and accessible only through the App

How We Use Your Information

We use the collected information for the following purposes:

Authenticating employee access to T&A's FACTS ERP system
Providing real-time product pricing and inventory data
Maintaining audit trails for security and compliance
Sending password reset and account invitation emails
Troubleshooting technical issues
Verifying delivery locations and proof of delivery
Generating delivery reports and driver performance metrics
Fleet management and route optimization

Cookies

The App does not use cookies. Authentication is handled via JSON Web Tokens (JWT) stored in your browser's localStorage.

Location Data

The POD Driver app requests access to your device's GPS location. Location data is:

Collected only at the moment of delivery submission, not continuously or in the background
Used to verify that deliveries are made at the correct address
Revocable at any time through your device's permission settings

The app functions without location access, but GPS coordinates will not be recorded with delivery submissions if permission is denied.

Data Storage and Security

Your information is stored on secure servers and protected using industry-standard security measures including:

Encrypted connections (HTTPS/TLS) for all data in transit
Bcrypt password hashing (passwords are never stored in plain text)
Rate-limited login attempts to prevent brute force attacks
JWT tokens with automatic expiration (24 hours)
Role-based access control restricting data to authorized personnel

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

With T&A (our client) as necessary for their business operations
With service providers who assist in operating the App and our infrastructure, subject to confidentiality agreements
When required by law, regulation, or legal process
To protect the rights, safety, or property of Levocraft, T&A, our employees, or others

Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect our sign-in pages from automated abuse. Turnstile runs in invisible mode, so in normal use there is nothing for you to click or solve.

To tell a person apart from a bot, Turnstile collects technical signals from your browser and device — for example your IP address, browser and device characteristics, and how the page is interacted with. This data is processed by Cloudflare, is used only for security purposes, and is not used by Cloudflare to build advertising profiles or to track you across websites.

Your use of pages protected by Turnstile is subject to Cloudflare’s Turnstile Privacy Addendum, which is incorporated into this policy by reference.

Data Retention

We retain your information for as long as your employment with T&A is active and as necessary to fulfill the purposes described in this policy. Server logs are retained for operational purposes and may be rotated periodically. When your account is deactivated, your personal data is soft-deleted and no longer accessible through the Apps.

Delivery photos are retained for 90 days and then automatically deleted. Proof of delivery records (signatures, GPS coordinates, delivery status) are retained for business record-keeping purposes.

Account Deletion

You can delete your account at any time directly within the App:

While logged in, click the "Delete Account" link next to the Logout button
Confirm by entering your password
Your account will be immediately deactivated and personal data (email address) will be removed

Upon deletion, your account is deactivated and can no longer be used to sign in. Server-side audit logs (search history, IP addresses) may be retained for security and compliance purposes. Locally stored data (authentication token, preferences) can be cleared by logging out or clearing your browser's site data.

You may also request account deletion by emailing privacy@levocraft.com.

Your Rights

As a T&A employee, you may:

Request access to the personal data we hold about you
Request correction of inaccurate information
Delete your account and personal data through the App or by contacting us
Clear locally stored data at any time through your browser settings

Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App with an updated revision date. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

Levocraft LLC
Email: privacy@levocraft.com

For T&A-specific inquiries:
Tools & Accessories Corp
Email: privacy@tatool.net