Privacy Policy

Account information. When you sign up we collect your name and email address. If you sign in with Google, we receive your name, email address, and profile picture from your Google account. We never see or store your Google password.

Business data. The content you create in Paint — estimates, job records, crew schedules, production rates, budgets, planning data, team member names and emails, and files you upload (such as your company logo or imported spreadsheets). This data is yours; we store and process it only to provide the service.

Payment information. Subscriptions are billed through Stripe. Your card details are collected and stored by Stripe, never by us. We store only your subscription status and a Stripe customer reference.

Usage and log data. Standard server logs — IP address, browser type, pages requested, and timestamps — used for security, rate limiting, and debugging.

We use the information we collect to:

• Provide, maintain, and improve Paint;
• Authenticate you and keep your account secure;
• Process subscription payments and manage your trial;
• Send transactional email — sign-in links, team invitations, exports you request, and important service notices;
• Respond to support requests and messages you send us;
• Prevent abuse, fraud, and violations of our terms.

We do not sell your personal information, and we do not use your business data for advertising.

We share data only with the service providers we use to run Paint, and only to the extent needed:

• Vercel — application hosting, database, and file storage;
• Stripe — payment processing and subscription billing;
• Resend — transactional email delivery;
• Upstash — caching, rate limiting, and real-time sync;
• Google — sign-in, if you choose to authenticate with Google.

We may also disclose information if required by law, or to protect the rights, safety, and security of Paint, our users, or others.

If you invite teammates to your store, they can see the business data in that store according to the role you assign them.

Paint uses only essential cookies: a session cookie to keep you signed in and security cookies (such as CSRF protection). We do not use advertising or cross-site tracking cookies.

We keep your data for as long as your account is active. If you cancel, your data remains available so you can come back — or export it — until you ask us to delete it. To delete your account and its data, contact us and we’ll take care of it. Backups are purged on a rolling basis after deletion.

All traffic to Paint is encrypted in transit with TLS, and data is encrypted at rest by our hosting providers. Access to production systems is limited to the small team that builds Paint. No system is perfectly secure, but we treat your business data the way we’d want ours treated — if we ever become aware of a breach affecting your data, we will notify you promptly.

You can access and update your account information in the app at any time. You may also request a copy of your data, ask us to correct it, or ask us to delete it by contacting us. Depending on where you live (for example, Colorado, California, or the EU), you may have additional rights under local privacy law — we honor reasonable requests regardless of jurisdiction.

Paint is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children.

If we make material changes to this policy, we’ll notify you by email or with a notice in the app before the changes take effect. The “Last updated” date at the top reflects the most recent revision.

Questions about this policy or your data? Reach out through the contact form and you’ll hear back from the people who build Paint.