ONE PPF Privacy Policy

Effective: July 7, 2026 Supersedes: Privacy Policy v3.6 (eff. June 23, 2026) and prior versions. Authority: Mark Bonamici, ONE PPF Inc.

This Privacy Policy describes how ONE PPF Inc. ("ONE PPF," "we," "us," or "our") collects, uses, shares, and protects personal information through its websites, applications, dealer portal, and wholesale ordering surface. This Policy supplements and should be read together with the ONE PPF Cookie Policy, Wholesale Terms of Service, and Wholesale Terms of Sale.

ONE PPF Inc. is a Connecticut corporation transitioning to a Florida limited liability company taxed as an S-Corporation under Subchapter S of the Internal Revenue Code, with current operating address at 1187 Tallevast Road, Suite 1187, Sarasota, Florida 34243.

---

1. INTRODUCTION

This Privacy Policy (this "Policy") explains how ONE PPF collects, uses, stores, shares, and protects information when you access our websites, submit inquiries, apply for dealer programs, purchase products, or otherwise interact with our services (collectively, the "Services").

"Services" includes our public website at onepaintprotection.com, our authorized dealer portal at onepaintprotection.com/portal, and our internal administrative system. By using the Services, you agree to the practices described in this Policy. If you do not agree, do not use the Services.

---

2. WHO WE ARE AND SCOPE

ONE PPF Inc. is a Connecticut corporation transitioning to a Florida limited liability company taxed as an S-Corporation under Subchapter S of the Internal Revenue Code. Current operating address: 1187 Tallevast Road, Suite 1187, Sarasota, Florida 34243.

ONE PPF develops, distributes, and supports a paint protection film product line for the automotive aftermarket. We operate a public marketing website, an authenticated dealer portal, and a wholesale ordering surface, each subject to this Policy.

This Policy applies to website visitors, leads, customers, and dealers; governs data handling only; and does not create dealer rights, employment rights, or warranty coverage. Dealer obligations are governed solely by executed Dealer Agreements. Employee data is governed by employment agreements and HR policies.

---

3. INFORMATION WE COLLECT

3.A Information You Provide

We may collect information you voluntarily provide, including: name; email address; phone number (including mobile number); business name and contact details; billing and shipping address; payment method details (processed by our payment processor; we do not store full card numbers); dealer application information; support inquiries, warranty claim information, and communications; preferences and opt-in selections.

3.B Information Collected Automatically

When you use the Services, we may automatically collect: IP address; browser type and device information; operating system; pages viewed and time spent; referring URLs; approximate geographic location (derived from IP).

3.C Cookies and Similar Technologies

We use cookies and similar technologies for site functionality, analytics and performance monitoring, and user-experience improvements. You may disable cookies in your browser, but some features may not function properly. See the ONE PPF Cookie Policy for additional detail.

3.D Dealer Admission Form (Roll Purchases)

If your cart contains any roll SKU, before checkout completes we collect an eleven-field dealer admission form. This applies to wholesale roll purchasers, not to public-SKU sample or training buyers. We collect: business name (legal entity name); business type; business EIN or tax identification number; business mailing address; years in business; self-reported monthly PPF volume; current film brands used; certifications held; install facility type; intended use channel; and how you heard about us.

Purpose. We use this information for dealer qualification, tier assignment, and fraud prevention. It is not used for third-party marketing.

Retention. For approved dealer orders, admission-form data is retained for the duration of the business relationship and for a reasonable period thereafter consistent with our records-retention policy and applicable law. For rejected or abandoned applications, we retain the record for twelve (12) months and then purge.

Sensitivity of EIN and tax ID. We treat business EIN and tax identification numbers as sensitive data. These fields are encrypted at rest, access is restricted to personnel with a documented need for dealer qualification, tier assignment, or tax reporting, and access events are logged.

3.E Cryptographic Access Tokens

When you sign up to see our wholesale pricing, we issue your browser a cryptographic signed token valid for 30 days that lets you see MSRP pricing on our catalog pages. The token does not grant access to any order information, account management, or administrative functions. You can invalidate the token at any time by signing up again (which reissues) or by requesting revocation through the contact address in Section 13. The signed payload contains only your email address, an issued-at timestamp, an expires-at timestamp, and a policy version identifier; no payment data, order data, or third-party identifiers are included.

3.F Information We Obtain From Other Sources

To evaluate and support dealer applications and to reduce manual data entry, we may obtain information about your business and the people associated with it from sources other than you, including:

• publicly available business information, such as your business website and public online listings;
• publicly available social media profile information associated with the business (for example, Instagram, Facebook, or LinkedIn business profiles); and
• business contact information for individuals identified on those public sources.

We use this information to assess program fit, qualify and score leads, and prepare for outreach. We combine it with the information you provide and the information we collect automatically. We do not purchase consumer profiles from data brokers for advertising.

---

4. HOW WE USE INFORMATION

We use collected information to: operate and maintain the Services; process purchases, shipping, warranty claims, and dealer orders; process dealer admission applications, qualify applicants, assign dealer tiers, and prevent fraud; respond to inquiries and support requests; authorize access to wholesale pricing (via the cryptographic token described in Section 3.E); communicate service-related updates; send marketing communications where permitted or consented; improve products, services, and user experience; debug and maintain reliability of the Services; prevent fraud and protect security; and comply with legal and regulatory obligations.

---

5. INFORMATION SHARING (SERVICE PROVIDERS AND THIRD PARTIES)

We share information only in limited circumstances. The following service providers may process information on our behalf:

Service Provider	Purpose	Data Categories
Stripe	Payment processing; Customer objects for repeat buyers with a saved default payment method; PaymentIntents for authorize-then-capture flows on roll orders	Name, billing address, payment card details (tokenized by Stripe; we never see full PAN), email, purchase details, Stripe Customer ID
Resend	Transactional email delivery; broadcast email delivery (commercial-marketing with CAN-SPAM compliant opt-out); per-template engagement aggregation (see Section 5.D)	Name, email, message content
ShipEngine / UPS	Shipping label generation, carrier coordination, tracking; carrier rate aggregation; tracking webhooks	Name, ship-to and ship-from addresses, phone, order contents, carrier tracking number
Google Places API	Address validation and lookup	Partial address input
Google Search Console	Search ranking and organic traffic analytics (aggregated; non-PII)	Search queries and click-through data
Cloudflare	Website hosting / content delivery network	IP address and request metadata processed to deliver and protect the site
Google Workspace	Business email and document collaboration	Name, email, message content for ONE PPF business correspondence
Hetzner (Hetzner Online GmbH), US region	Cloud server infrastructure (Infrastructure-as-a-Service) hosting the ONE PPF backend application and the dealer portal data store, located in Hetzner's United States region (Hillsboro, Oregon)	Dealer canonical record (business name, EIN, tier, activation source, contact); order and Stripe-derived spend aggregates; portal audit logs -- all stored on US-located infrastructure
Sentry	Application error monitoring and performance telemetry; limited on-error session-replay sample (replaysSessionSampleRate zero; replaysOnErrorSampleRate 0.1)	Stack traces, request path, user agent, pseudonymous session identifier; error context; no form values, no payment data, no customer PII in request bodies (see Section 5.B)
PostHog	Product analytics; funnel attribution; user behavior aggregates (no session recording per current config)	Pseudonymous user identifier; page interactions; session metadata
Google Analytics 4 (Google LLC)	Aggregate traffic, funnel and conversion measurement; consent-gated, IP-anonymized, Google signals disabled	Cookies _ga and _ga_<container>; truncated IP address; device and browser metadata
Microsoft Clarity	UX heatmap and session interaction patterns	Page interactions; click, scroll, and form-fill patterns; pseudonymous session identifier
HelpScout Beacon (not currently enabled; see 5.F)	Live chat widget and support inbox	Chat transcript; name; email; URL of conversation; user agent
Google Calendar Appointment Scheduler (Google LLC)	Consent-gated scheduling embed on the Contact and Dealer Program Overview pages; the Google iframe is not rendered until you explicitly click "Load the scheduler", so no Google cookie is set before that click	IP address, user agent, and Google cookies set by Google on load; any details you enter into Google's booking form are processed by Google as its own controller
YouTube (Google LLC), youtube-nocookie.com	Consent-gated video embed for product and install videos on colour pages and the Headlight PPF page. The player is not rendered until you explicitly click "Load video", so no request reaches Google before that click. When you load it, the player is served from Google's no-cookie domain, which sets no Google cookie unless you press play	Nothing before you click to load. After you click: IP address and user agent; on playback, Google cookies and viewing data processed by Google as its own controller
Google Maps (Google LLC)	Consent-gated dealer location map on Reserve dealer pages. The map is not rendered until you explicitly click "Load map", so no request reaches Google before that click. A separate "Get directions" link is offered alongside the map; it contacts Google only if you choose to follow it	Nothing before you click to load. After you click: IP address, user agent, and Google cookies set by Google on load
HubSpot CRM	Dealer relationship management; mirror of dealer canonical schema and Stripe-derived aggregates	Dealer business name; EIN; tier; activation source; relationship mode; Stripe LTV and rolling spend aggregates; CDA-signed and Reserve Class invitation tracking
Public-records enrichment (planned; not yet active)	Dealer business verification and onboarding context	Business name; address; phone; website; Google Business profile; state SOS filing; LinkedIn and social media business profile
Dealer Network (Authorized Installing Dealers)	Installation, warranty claim submission, service delivery	Customer name, vehicle, contact, installation or claim details (limited to the dealer servicing the customer)

ONE PPF previously named FilmForce as a processor for a Reserve Member Dealer portal; FilmForce has been decommissioned and the dealer portal now runs on ONE PPF infrastructure at onepaintprotection.com/portal. No third-party processor is involved in the dealer portal beyond the providers named in this Section 5.

Each third-party vendor maintains its own data processing terms or Data Processing Agreement (DPA). The ONE PPF Vendor DPA register tracks the disposition of vendor-specific terms.

We may also share information: to comply with legal obligations, legal process, or lawful government requests; to protect the rights, property, or safety of ONE PPF, our customers, or others (including fraud prevention); and in connection with a business transaction (merger, acquisition, reorganization, or asset sale).

No sale of personal information. We do not sell personal information for third-party marketing and do not rent, trade, or share mobile phone numbers with third parties for marketing or promotional purposes.

5.A Wholesale Ordering Data Handling

The ONE PPF wholesale ordering surface (cart, checkout, order history) collects and processes dealer business information for order fulfillment, payment, and dealer account management:

• Cart data: SKU, quantity, displayed tier-discounted net price, and timestamp of cart actions; retained for the duration of the dealer session plus thirty (30) days for cart-recovery purposes.
• Checkout data: ship-to address, billing address, payment method on file (tokenized via Stripe), order subtotal, shipping charges, taxes, promo code applied (if any), and order total; retained for the duration required by tax, audit, and warranty obligations (typically seven years).
• Order history: all orders submitted by the dealer, including acceptance status, line items, ship date, carrier tracking number, delivery confirmation, return status, and refund status; retained for warranty support and dealer account history.
• Order status updates: transactional email and in-portal notifications regarding order acceptance, shipment, delivery, backorder, and return status.

The wholesale ordering surface is restricted to authenticated dealers in good standing. Public site visitors do not have access to it.

5.B Sentry Telemetry: Data Minimization

Our Sentry integration is configured with a data-minimization posture: no form field values are captured; no request bodies containing personal information are captured; no payment data is captured; user identification is limited to a pseudonymous session identifier. Sentry is used solely for application error monitoring and performance telemetry, and is not used for advertising or behavioral profiling.

5.C Behavioral Analytics and Funnel Attribution

ONE PPF uses PostHog and Microsoft Clarity for product analytics and UX behavior analysis:

• Funnel-stage attribution (signup to portal activation to first order): retention 180 days. Decline via the cookie banner Reject control or portal preferences.
• Catalog browse tracking: retention 90 days. Decline as above.
• Dashboard interaction tracking: retention 90 days. Decline as above.
• Cart abandonment tracking: retention 30 days recovery operations plus 60 days analytics aggregates. Decline as above.

These analytics load by default and stop on an explicit Reject (consistent with our Cookie Policy and the Global Privacy Control / Do Not Track signals; see Section 5.H and the Cookie Policy).

5.D Email Engagement Aggregation

ONE PPF ingests Resend webhook events (delivered, opened, clicked, bounced, complained) for per-template engagement aggregation (open rate, click rate, bounce rate, spam-complaint rate per dealer per rolling 30-day window); retention 365 days. Dealers may opt out of open-tracking pixels via portal email preferences. This does not apply to transactional events per the CAN-SPAM 15 USC 7702(2)(B) transactional carve-out. Commercial-marketing email opt-out is honored within 10 business days per CAN-SPAM 16 CFR 316.5.

5.E Derived Financial Metrics

ONE PPF ingests the Stripe invoice stream and computes per-dealer financial aggregates for account management and business analytics. Stripe invoice data is retained 7 years (tax/audit/warranty); derived per-dealer aggregates (LTV, AOV, repeat-rate, rolling and trailing volume) are retained coterminous with the active dealer relationship plus one year archival; the HubSpot CRM mirror is retained coterminous with the active dealer relationship. Dealers may request a comprehensive list of derived aggregates per CCPA Section 1798.110.

5.F Live Chat and Support Inbox

ONE PPF maintains a shared support inbox. A live chat widget powered by HelpScout Beacon is disclosed here because it may be enabled; it has NOT been enabled since 2026-05-24 and no chat transcripts are being collected through it. While enabled, chat transcript and support correspondence are retained 3 years post-case-close. Dealers may request erasure of chat transcript or support correspondence on closed cases via the contact form at onepaintprotection.com/contact or support@onepaintprotection.com; ONE PPF responds within 30 days subject to legitimate-business-purpose exceptions.

5.G Dealer Business Verification (Public Records)

ONE PPF performs business verification on dealer applications using public records and publicly available business information (Google Business profile; state Secretary of State filing; LinkedIn and social media business profiles); retained coterminous with the active dealer relationship. Dealers may flag inaccurate enrichment data via the contact form at onepaintprotection.com/contact; ONE PPF corrects within 30 days per CCPA Section 1798.106. Enrichment data is sourced exclusively from public records and publicly available business information; ONE PPF does not purchase personal data from data brokers or consumer data aggregators.

5.H First-Party Website Analytics

ONE PPF operates a first-party, self-hosted website-analytics function (collected on ONE PPF infrastructure, not shared with any third-party advertising provider) that records page views, navigation paths, and aggregate funnel behavior to improve the site. This data is retained for 12 months and then deleted or de-identified. This first-party analytics data is not itself shared with any third-party advertising provider and is not used for cross-context behavioral advertising; third-party advertising and conversion measurement, where you have opted in, is described separately in Section 5.I. These analytics load by default and stop on an explicit Reject, and are suppressed while a Global Privacy Control (GPC) or Do Not Track (DNT) signal is present (see Section 12).

5.I Third-Party Advertising and Conversion Measurement (Meta Pixel)

ONE PPF uses the Meta (Facebook) advertising and conversion-measurement pixel to measure the effectiveness of its marketing and to support advertising campaigns. The pixel loads only after you provide affirmative marketing consent through the cookie banner. It does not load if you decline, if you have not yet answered the banner, or if your browser transmits a Global Privacy Control (GPC) or Do Not Track (DNT) signal; a GPC or DNT signal overrides a prior acceptance for as long as the signal is present (see Section 12). When active, the pixel may share limited event and device-identifier data with Meta for cross-context behavioral advertising and conversion measurement. You may decline or withdraw consent at any time through the cookie banner, and we honor a GPC signal as a request to opt out of that sharing (see Sections 9 and 12). ONE PPF also uses Google Analytics 4 (Google LLC) for aggregate traffic, funnel and conversion measurement. The GA4 tag loads through the same consent-gated loader as the Meta pixel: it loads only after you provide affirmative marketing consent through the cookie banner, and it does not load if you decline, if you have not yet answered the banner, or if your browser transmits a GPC or DNT signal. IP anonymization is enabled and Google signals are disabled. No Google Ads conversion tag is configured at this time; if ONE PPF enables one, this Policy will be updated to disclose it before it is set.

5.J Uploaded Images and Image Metadata

When you submit a warranty claim, you may upload photographs. We collect and process these images to evaluate and service the claim. To minimize data, precise geolocation metadata (GPS/EXIF) is stripped from uploaded images on ingest before the image is stored; we do not retain the precise-location metadata that a camera may embed in a photo. Uploaded images are retained for the duration necessary to service and document the warranty claim consistent with our records-retention obligations.

---

6. SECURITY, BOT-DETECTION, AND DATA STORAGE

ONE PPF maintains reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, alteration, and destruction, including transport-layer encryption (HTTPS/TLS), encryption at rest for sensitive business data (including EIN and tax identification numbers), role-based access controls, multi-factor authentication for privileged access, vendor security reviews, and access logging for sensitive-data fields. No system is completely secure, and we cannot guarantee absolute security. We store personal information on systems hosted in the United States.

Automated-abuse protection. We apply rate-limiting and standard automated-abuse protections to our public forms. These operate on ONE PPF infrastructure and do not share the information you enter in a form with any third party.

6.A Data Breach Notification

If we become aware of a data breach affecting your personal information, we will notify affected individuals and relevant regulators as required by applicable law, including, where applicable, Florida Statutes Section 501.171 and other applicable state or federal breach-notification laws.

---

7. DATA RETENTION

We retain each category of personal information for the period below, or for as long as reasonably necessary for the purpose for which it was collected, whichever is appropriate, then delete or de-identify it (subject to legal-hold and recordkeeping obligations).

Category	Retention period
Prospect / lead data (non-converting)	24 months from last contact, then delete or de-identify
Enrichment / third-party-sourced data	tied to the lead/dealer record it supports; same window
Dealer account + contact records	duration of the dealer relationship + 24 months after closure
Wholesale ordering (cart + checkout + order history)	7 years (tax / audit / warranty)
Order / invoice / tax records	7 years
Consent / ESIGN evidence records	duration of relationship + 4 years after revocation/closure
Cart / abandonment data	30 days recovery + up to 60 days aggregate analytics
Behavioral analytics (funnel-stage)	180 days
Behavioral analytics (catalog / dashboard)	90 days
First-party website analytics	12 months, then delete or aggregate/de-identify
Email engagement aggregation	365 days
Automatically-collected device/usage data (logs, IP, analytics IDs)	12 months, then delete or aggregate/de-identify
Chat transcript + support correspondence	3 years post-case-close
Sentry error telemetry	90 days
Marketing / suppression (opt-out)	suppression list retained indefinitely (CAN-SPAM compliance)
Support / inquiry communications	24 months from resolution

These periods are maximums; where you exercise a right to deletion (see Section 8), we delete or de-identify your information earlier, except where we are permitted or required to retain it (for example, tax/financial recordkeeping, ESIGN evidence, legal hold, or CAN-SPAM suppression).

---

8. DATA SUBJECT RIGHTS

Right-to-know: request a comprehensive list of all data categories ONE PPF collects (per Section 3 and Section 5) and the third parties with whom data is shared. ONE PPF responds within 45 days per CCPA Section 1798.130. Right-to-delete: request deletion of personal data, subject to legitimate-business-purpose exceptions per CCPA Section 1798.105(d) (open warranty claims, tax/audit retention, active dealer relationship). Responds within 45 days. Right-to-opt-out (per category): per the Section 5 category-specific paths. Commercial-marketing email opt-out honored within 10 business days per CAN-SPAM 16 CFR 316.5. Right-to-correct: correct inaccurate personal data or enrichment data via the contact form at onepaintprotection.com/contact. Corrected within 30 days per CCPA Section 1798.106. Right-to-portability: request a copy of your data in a portable format per CCPA Section 1798.130. Responds within 45 days. Right-to-limit use of sensitive personal information / Right to non-discrimination: we do not use sensitive personal information for purposes beyond providing the Services, and we will not discriminate against you for exercising any privacy right.

Operational scope: US-only. Framework-readiness for GDPR Articles 15-21 preserved in spec; operational gating is currently US-only. Contact for data subject requests: support@onepaintprotection.com or the contact form at onepaintprotection.com/contact. ONE PPF maintains a request log for audit purposes; we may verify your identity before responding.

---

9. US STATE PRIVACY RIGHTS

Rights vary by state; to exercise any right, see Section 8.

• California (CCPA/CPRA): right to know; delete; correct; opt out of sale/sharing (we do not sell personal information for money; we share limited personal information for cross-context behavioral advertising through the Meta pixel described in Section 5.I only where you have opted in through the cookie banner, and you may opt out at any time through the banner or a Global Privacy Control signal); limit use of sensitive personal information; non-discrimination. You may use an authorized agent.
• Colorado (CPA), Virginia (CDPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA): rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling, substantially as described for California.
• Other states: where any comprehensive state consumer-privacy statute applies to our processing, we honor the rights it provides.

---

10. CHILDREN'S PRIVACY (COPPA)

The Services are not intended for individuals under 18, and in particular are not directed to children under 13. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act ("COPPA"). If you believe we have inadvertently collected information from a child under 13, please contact us and we will promptly delete it.

---

11. INTERNATIONAL TRANSFERS / GDPR (FRAMEWORK-READINESS)

ONE PPF's operational scope is US-only; it does not currently solicit or accept orders from EU/UK residents through its public-facing e-commerce. Personal information is hosted in the United States. If and when ONE PPF expands its market presence to EU/UK customers, the GDPR / UK GDPR framework (legal bases, data subject rights under Articles 15-22, international-transfer safeguards such as Standard Contractual Clauses, and consent capture) becomes operative; that framework is preserved in spec for futureproofing and is not an active requirement today.

---

12. GLOBAL PRIVACY CONTROL (GPC) AND DO NOT TRACK

The Site honors the Global Privacy Control (GPC) signal and the browser-level Do Not Track (DNT) signal. When either signal is detected, analytics scripts are suppressed and third-party advertising and conversion pixels (including the Meta pixel described in Section 5.I) do not load, regardless of any prior choice, for as long as the signal is present. We treat a GPC signal as a valid request to opt out of the sale or sharing of personal information where that concept applies under your state's law, consistent with the ONE PPF Cookie Policy.

---

13. CONTACT US

ONE PPF Inc. 1187 Tallevast Road, Suite 1187 Sarasota, Florida 34243 sales@onepaintprotection.com (commercial inquiries) support@onepaintprotection.com (data subject requests + privacy concerns) (475) 988-7856

ONE PPF Inc. is a Connecticut corporation transitioning to a Florida limited liability company; the Sarasota, Florida operating address above is current. Governing law transitions from Connecticut to Florida on completion of the entity transition, as set out in the dealer agreements.

---

14. CHANGES TO THIS POLICY

We may update this Policy periodically. Material changes are notified via dealer portal banner and email to active dealer accounts at least 30 days prior to the effective date. Continued use of the Services after the effective date constitutes acceptance. Existing dealers signed under prior versions are preserved at signed terms per the ESIGN Act 15 USC 7001 and UETA.