Privacy Policy

Last updated: October 24, 2026

Pullboard is run by EZMVP, a sole proprietorship in Ontario, Canada. This policy explains what we collect when your company uses Pullboard, why, and what you can ask us to do with it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

  • Account details for you and the people you invite: names, email addresses, roles and hashed passwords.
  • Your customers' details that you enter: names, phone numbers, email addresses and site, billing and delivery addresses.
  • Your work: work orders, schedules, notes, comments, photos, hours and materials.
  • Billing details: your subscription status and the Stripe customer it belongs to. Card details stay with Stripe.
  • Basic technical information, such as IP addresses used for rate limiting and error reports.

Why we use it

Only to run Pullboard for you: to show your data to your team, send account emails, bill your subscription, keep the service secure and backed up, fix problems, and answer your questions. We don't sell your data and we don't use advertising trackers.

Who processes it for us

  • Render hosts the app and its database.
  • Cloudflare R2 stores photos attached to work order comments and our nightly database backups.
  • GitHub runs the job that makes those backups.
  • Stripe processes subscription payments.
  • Resend sends account emails such as invites and password resets.
  • Sentry records app errors so we can fix them, with personal details removed.
  • Google Places suggests addresses as you type them, when address lookup is turned on.

Some of these providers store data outside Canada, including in the United States.

How long we keep it

We keep your data after you cancel so you can come back. Email us and we'll export it or delete it within 30 days. Backups are kept for 30 days, so deleted data is gone from them within 30 days after that.

Your rights

You can ask to see, correct, export or delete the personal information we hold about you. Contact us and we'll respond within 30 days.

Security

Data is sent over HTTPS, passwords are hashed, each company's data is kept separate from every other company's, and the database is backed up nightly.

Changes

If we change this policy in a significant way, we'll email account admins before it takes effect.