Legal

Privacy Policy

Effective November 2, 2026 · Version 2026-11-02

This Privacy Policy explains how ScreenFisher LLC (“ScreenFisher,” “we,” “us”) collects, uses and shares personal information in SlopeHQ, FlowClock, FlowClock Go and OutFinder (the “Products”) and on our websites. Capitalized terms not defined here have the meaning given in our Terms of Service.

The short version: we collect what each Product needs to work, we use it to run the Products, and we don’t sell personal information or use it for targeted advertising.

1. Who is responsible for your information

Most information in the Products is entered by or for a business that uses them: a ski resort, an employer or an outfitter (our “Customer”). For that information, the Customer decides what is collected and how it’s used, and we process it on the Customer’s behalf and under its instructions. If you are an employee, a resort guest or an outfitter’s client, the Customer’s own privacy practices also apply to you, and requests about your information should usually go to them first.

We are responsible for information we collect for our own purposes, such as Customer account and billing information, website visits, and OutFinder guest photos used in our own marketing with consent.

2. Information collected in every Product

Account information

Name, email address, phone number (if provided), role and organization. Passwords are stored only as salted hashes.

Profile and employment details

Job title, department or location, manager, start date, and any optional details a person adds, such as a birthday, address, emergency contact or profile photo.

Usage, device and log data

IP address, browser and device type, app version, push notification tokens, pages and features used, and timestamps. We keep audit logs of significant account actions, such as role changes and edits to time records, for security and accountability.

Cookies and analytics

We use essential cookies to keep you signed in. Our websites use Vercel Web Analytics, which counts page views without cross-site tracking cookies. We don’t use advertising cookies or third-party ad trackers.

Billing information

Customer billing contact, plan and payment history. Card details are collected and stored by Stripe, not by us.

Support

Anything you send us when you contact support.

3. SlopeHQ

Staff information

  • Clock events (clock-in, clock-out and break times, department and device) and schedules, shift swaps and time off.
  • Proximity detection: the SlopeHQ app detects the resort’s own registered device to clock staff in and out. It recognizes only that device, only while the app is open in the foreground, and records the signal strength reading that triggered a clock event. It does not use GPS or track location in the background.
  • Department chat and direct messages.
  • Training answers and test results, lesson logs, lift inspection submissions, ski patrol classifications, volunteer hours and lift ticket awards.

Message oversight

Department chat is visible to that department. Direct messages are visible to the people in them. A resort’s super admins, and any admin granted the permission, can also read every department chat and direct message at that resort. Staff are told this before they can send a message, and the notice stays available in their Account settings.

Ski patrol incident reports

Incident reports record information about injured people, who may be guests or minors: name, contact details, date of birth, age, sex, height and weight, occupation, description of the injury and prior injuries, helmet and rental equipment details, whether they have medical insurance, the medical facility they went to, witness details, photos, and signatures (including a parent or guardian’s). This information is collected by the resort’s patrol, is visible only to authorized resort staff, and is used only for the resort’s incident records.

Guest information

When a resort uses SlopeHQ with its guest app, SlopeHQ receives the guest’s name and app account ID when they check in or out (to show live headcount), orders placed through the guest app (processed by the resort’s own Square account. We don’t receive card numbers), and push notification tokens used to send resort news.

4. FlowClock & FlowClock Go

  • Clock events (clock-in, clock-out and break times, location and device) and schedules, shift swaps and time off.
  • FlowClock proximity detection: the FlowClock app detects your employer’s own registered device to clock you in and out. It recognizes only that device, only while the app is open in the foreground, and records the signal strength reading that triggered a clock event. It does not use GPS or track location in the background.
  • FlowClock Go doesn’t use proximity detection or location. Employees clock in and out with a tap, and we record the time and the location they selected.
  • Direct messages between coworkers and company-wide announcements. Your employer controls your account and can export or delete it.
  • If your employer connects QuickBooks, the link between FlowClock and QuickBooks employee records, and a log of what was exported and when.

5. OutFinder

Outfitter information

Business name, contact details, guides, trip listings and Stripe connected-account status. Stripe collects the identity and bank details needed for payouts directly.

Guest and client information

  • Name, email, phone number, party size, trip and booking details, and payment status. Card details go directly to Stripe.
  • Signed waivers, including the signer’s name, signature image and the time of signing.
  • Text-messaging consent: whether you opted in, when, and the exact consent wording you saw. Opting in is never required to book.
  • Messages exchanged with the outfitter by text, reviews and ratings, and photos you send.

Text messaging

Texts are sent on the outfitter’s behalf through Twilio. Reply STOP to opt out at any time, or HELP for help. Message frequency varies, and message and data rates may apply. We do not share mobile phone numbers or text-messaging opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Mobile numbers are shared only with the service providers that deliver the messages.

Photos

If you agree when you book, photos you send may be used in marketing by the outfitter and by ScreenFisher to promote OutFinder. To withdraw consent for future use, contact the outfitter or email legal@screenfisher.com.

6. How we use information

  • To provide the Products, including clocking time, scheduling, messaging, bookings, payments, waivers and reports.
  • To send service emails, texts and push notifications, such as invites, password resets, schedule changes, booking confirmations and reports.
  • To secure the Products, prevent fraud and abuse, and debug problems.
  • To provide support and communicate with Customers about their accounts.
  • To understand usage in aggregate and improve the Products.
  • To bill Customers and meet legal, tax and accounting obligations.

We don’t sell personal information, don’t share it for cross-context behavioral advertising, and don’t use Customer Data to train third-party AI models.

7. Who we share it with

Within your organization: as described above, according to the roles and permissions the Customer sets.

Service providers that process data for us under contract, only to provide their services:

  • Vercel: hosting, file storage and website analytics
  • Neon: database hosting
  • Resend: email delivery
  • Stripe: subscription billing and OutFinder payments
  • Twilio: OutFinder text messaging
  • Apple, Google and Expo: mobile push notifications

Services the Customer connects, such as QuickBooks or Square, receive the data the Customer chooses to send them.

Legal and safety: when required by law or valid legal process, or when needed to protect the rights, safety or property of our users, the public or ScreenFisher. Where the law allows, we tell the Customer before disclosing its data in response to legal process.

Business transfers: if ScreenFisher or a Product is merged, acquired or sold, information may transfer as part of that transaction, subject to this policy.

8. How long we keep it

We keep Customer Data while the Customer’s account is active, so that historical timesheets, schedules, reports and records stay available. When an account closes, the Customer can export its data for 30 days. We then delete it within 90 days, except for routine backups, which expire on their normal schedule, and data we must keep for legal, tax or dispute reasons.

Employers are often required to keep payroll and time records for several years, and resorts may need to keep incident reports longer. Customers are responsible for exporting records they need before closing an account. When someone leaves an organization, their records stay with that organization’s account.

9. Security

We encrypt data in transit (HTTPS) and at rest, hash passwords, keep each Customer’s data separate from every other Customer’s, and limit staff access to what is needed to run and support the Products. No system is perfectly secure, so we can’t guarantee absolute security.

If we learn of a breach affecting personal information, we will notify affected Customers without undue delay, and notify individuals and regulators as the law requires.

10. Your choices and rights

  • Staff can view and update their own profile details from the Account page in the app.
  • To access, correct, export or delete information a Customer holds about you, contact that Customer (your employer, resort or outfitter). If you contact us instead, we’ll pass your request to them and help them respond.
  • Depending on where you live, you may have additional rights, such as to know what we hold about you, to get a copy, or to have it corrected or deleted. Email legal@screenfisher.com and we’ll respond within the time the law requires. We may need to verify your identity first. We won’t treat you differently for using these rights.
  • You can opt out of texts by replying STOP, and out of marketing email using the link in the email.

The Products are hosted in the United States. If you use them from elsewhere, your information is transferred to and processed in the United States.

11. Children

The Products are not directed at children under 13, and children under 13 may not have accounts. Some Customers employ minors aged 14 and older, and are responsible for any consent the law requires to do so.

Information about minors can also be entered by Customers. Examples include incident reports, school group visits, and bookings or waivers a parent or guardian makes for their family. That information is collected by the Customer for its own records, and we handle it under this policy. A parent or guardian who wants to review or delete it should contact the Customer, or email legal@screenfisher.com.

12. Changes and contact

We will update this policy as the Products change. If a change is material, we’ll notify Customers by email or in the Products before it takes effect. The version and effective date are shown at the top of this page.

Questions or requests: ScreenFisher LLC, Idaho, United States. Email legal@screenfisher.com.