Privacy Policy

PaintPipeline ("we", "us", or "our") operates the paintpipeline.com website and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Personal Information

When you create an account or use our Service, we may collect:

• Name, email address, phone number
• Company name and business information
• Billing and payment information (processed securely via Stripe)
• Address and location data
• Any information you voluntarily provide through forms or communications

Information Collected Automatically

• Device information (browser type, operating system, device identifiers)
• IP address and approximate location
• Usage data (pages visited, features used, timestamps)
• Cookies and similar tracking technologies
• Photos and GPS data when using PaintCam (with your permission)

Information from Third Parties

We may receive information from third-party services you connect, including Google Maps (for address autocomplete), Stripe (for payment processing), and Twilio (for SMS messaging).

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process transactions and send related information (invoices, receipts, payment confirmations)
• Send administrative messages (service updates, security alerts, support responses)
• Send marketing communications (with your consent; you may opt out at any time)
• Send SMS messages for appointment reminders and project updates (only with explicit consent)
• Analyze usage patterns to improve the Service
• Prevent fraud and ensure security
• Comply with legal obligations

3. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze site traffic. You can control cookies through your browser settings. Disabling cookies may limit some features of the Service.

Types of cookies we use:

• Essential cookies: Required for authentication and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how you use the Service
• Marketing cookies: Used for partner attribution tracking (60-day window)

4. Information Sharing & Disclosure

We do not sell your personal information. We may share information with:

• Service providers: Stripe (payments), Twilio (SMS), Mailgun (email), Google (maps), Anthropic (AI features), Supabase (database hosting), Vercel (hosting)
• Your customers: When you use the Service to send estimates, invoices, or work orders to your clients, we share the information you include in those documents
• Legal requirements: When required by law, subpoena, or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest, secure authentication, and row-level security policies in our database. Payment information is processed by Stripe and we never store your full credit card numbers.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Opt-out: Opt out of marketing communications at any time
• Do Not Sell (CCPA): We do not sell personal information, but you may still submit a request if you have concerns

To exercise any of these rights, contact us at service@paintpipeline.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

10. International Data Transfers

Your data is stored and processed in the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

PaintPipeline
1940 Fountain View Dr #1053
Houston, TX 77057
Email: service@paintpipeline.com