Privacy Policy

Account information. When you sign up we collect your name and email address. If you sign in with Google, we receive your name, email address, and profile picture from your Google account. We never see or store your Google password.

Business data. The content you create in Paint — estimates, job records, crew schedules, production rates, budgets, planning data, invoices, client contact details you enter so we can send an invoice or estimate approval, team member names and emails, and files you upload (such as your company logo or imported spreadsheets). This data is yours; we store and process it only to provide the service.

Payment information. Paint subscriptions are billed through Stripe. Your card details for the Paint subscription are collected and stored by Stripe, never by us. We store only your subscription status and a Stripe customer reference. When you collect job payments from homeowners, Stripe processes those charges on your connected account. Paint stores invoice amounts, status, and Stripe payment identifiers so we can show you what was paid — we do not store homeowner card or bank numbers, and we do not hold job funds.

Usage and log data. Standard server logs — IP address, browser type, pages requested, and timestamps — used for security, rate limiting, and debugging.

Electronic signature records. When you review or sign an estimate, we record the document version, customer and signer names, stated signing capacity, recipient email, consent wording, timestamps, and available IP address and browser information. We retain the signed PDF and related activity, delivery, and staff follow-up records to document the transaction, provide copies, and support the parties in resolving disputes. Link access may be automated and is not independent identity verification.

Connected accounting data. If you connect QuickBooks Online, we store encrypted OAuth tokens, the selected company and service-item references, synchronization identifiers, and error status. We send the client contact, invoice, and payment data you direct us to synchronize. We never receive your Intuit password.

We use the information we collect to:

• Provide, maintain, and improve Paint;
• Authenticate you and keep your account secure;
• Process subscription payments and manage your trial;
• Send transactional email — sign-in links, team invitations, invoice and estimate approval links, signed copies, exports you request, and important service notices;
• Respond to support requests and messages you send us;
• Prevent abuse, fraud, and violations of our terms.

We do not sell your personal information, and we do not use your business data for advertising.

We share data only with the service providers we use to run Paint, and only to the extent needed:

• Vercel — application hosting, database, and file storage;
• Stripe — Paint subscription billing and, if you enable it, invoice payments to your connected Stripe account (homeowners pay you, not Paint);
• Resend — transactional email delivery;
• Upstash — caching, rate limiting, and real-time sync;
• Google — sign-in, if you choose to authenticate with Google.
• Intuit QuickBooks Online — accounting synchronization, only if a store owner or admin connects a QuickBooks company.

We may also disclose information if required by law, or to protect the rights, safety, and security of Paint, our users, or others.

If you invite teammates to your store, they can see the business data in that store according to the role you assign them.

Estimate documents and signed PDFs are shared with the customer and contractor; signed PDFs include signature audit information. Full evidence exports and internal follow-up notes are available to store owners and admins and authorized support personnel. Anyone holding a document link can access its records until access is disabled. Do not forward these links to people who should not receive the records.

Paint uses only essential cookies: a session cookie to keep you signed in and security cookies (such as CSRF protection). We do not use advertising or cross-site tracking cookies.

We keep business data while needed to provide the service. Contact us to request an export, account closure, correction, or deletion. Closing an account does not automatically delete transaction evidence or cancel an agreement. Issued estimates, signed records, and related audit data are protected from routine editing and deletion.

We assess retention and deletion requests based on the type of record, the parties' access needs, applicable legal obligations, and actual or reasonably anticipated disputes. Records may be retained after account closure for those purposes, subject to applicable law, and reviewed for deletion when no longer needed. We explain any applicable retention exception when responding to a request. There is no automatic purge of signature records; controlled deletion requires an administrative review. Backups are purged on a rolling basis after approved deletion, subject to applicable preservation obligations.

All traffic to Paint is encrypted in transit with TLS, and data is encrypted at rest by our hosting providers. Access to production systems is limited to the small team that builds Paint. No system is perfectly secure, but we treat your business data the way we’d want ours treated — if we ever become aware of a breach affecting your data, we will notify you promptly.

You can access and update your account information in the app at any time. You may also request a copy of your data, ask us to correct it, or ask us to delete it by contacting us. Depending on where you live (for example, Colorado, California, or the EU), you may have additional rights under local privacy law — we honor reasonable requests regardless of jurisdiction.

Paint is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children.

If we make material changes to this policy, we’ll notify you by email or with a notice in the app before the changes take effect. The “Last updated” date at the top reflects the most recent revision.

Questions about this policy or your data? Reach out through the contact form and you’ll hear back from the people who build Paint.