Privacy & Data Protection

Privacy Policy

Last Updated: September 22, 2026 · Effective Date: Immediate

🛡️ Our Zero-Sharing & Data Isolation Commitment

At BullParkIt, we respect contractor privacy and client confidentiality. We do NOT sell, rent, monetize, broker, or share your data or your customers’ lead information with any third party, marketing network, or other contractor accounts. Each contractor tenant operates in a cryptographically isolated environment with strict database-level partition controls.

1. Introduction

BullParkIt (“we”, “us”, or “our”) operates the BullParkIt SaaS platform located at bullparkit.com. This Privacy Policy describes how we collect, process, store, and safeguard information when you use our website estimate calculators, contractor admin dashboard, and related services.

2. Information We Collect

We collect only the minimum necessary information required to operate the estimating platform:

A. Contractor Account Data:

When contractors register, we collect work email addresses, business names, contact phone numbers, company branding assets (logos, colors, tagline), and custom pricing rates (square foot costs, minimum job fees, service add-ons).

B. Homeowner & Lead Inquiries:

When a homeowner uses an embedded calculator on a contractor’s website to request an estimate, the calculator collects the customer’s name, phone number, email address, city/postal code, project dimensions (square footage, room type), coating preferences, and any floor condition photos they voluntarily upload.

C. Payment Information:

All subscription transactions are processed directly by our payment processor, Stripe, Inc. BullParkIt does not capture, process, or store raw credit card numbers or CVVs on our servers. Stripe retains billing data in compliance with PCI-DSS Level 1 standards.

D. Technical & Usage Telemetry:

To provide analytics (such as session counts, calculation views, and form completions), we collect basic browser telemetry and IP addresses solely for fraud prevention and performance monitoring.

3. How We Use Information

We use the collected information solely for the following business purposes:

To generate accurate ballpark price estimates based on the contractor’s custom pricing matrix.
To route incoming homeowner leads directly to the contractor via email, webhooks, or CRM integrations.
To manage subscription access, authentication magic links, and billing lifecycle.
To maintain platform security, prevent abuse, and provide technical customer support.

4. Data Processing Roles (GDPR / PIPEDA / CCPA)

Under modern data protection frameworks:

The Contractor is the “Data Controller”: You own the customer relationship, determine what information to capture on your site, and maintain sole responsibility for the leads you generate.
BullParkIt is the “Data Processor”: We process and securely store homeowner lead submissions strictly on your behalf and in accordance with your configured preferences.

5. Third-Party Sub-Processors

We do not share data with advertising agencies, brokerages, or marketing trackers. We only transmit data to audited, enterprise infrastructure providers strictly necessary to deliver the Service:

Supabase Inc.

Encrypted PostgreSQL database storage and authentication with Row Level Security (RLS).

Stripe, Inc.

PCI-DSS Level 1 compliant subscription processing and customer billing portal.

Vercel Inc.

Secure edge cloud application hosting, CDN, and TLS encryption delivery.

6. Automated Photo Purging & Data Retention

To safeguard consumer privacy and eliminate excessive data hoarding, photos uploaded by homeowners are automatically purged from our cloud storage after a fixed retention window:

Basic Plan: Uploaded floor photos are permanently deleted after 3 days.
Pro Plan: Uploaded floor photos are forwarded to your connected CRM (if enabled) and permanently deleted after 7 days.

Lead text records (name, contact, specifications) remain accessible in the contractor dashboard for review or CSV export until deleted by the contractor.

7. Data Security & Encryption

We employ industry-standard technical and organizational security measures:

Encryption in Transit: All web traffic and API endpoints strictly require HTTPS with TLS 1.3 encryption.
Row Level Security (RLS): PostgreSQL database policies verify tenant authentication tokens on every single query to guarantee that contractor A can never read or query records belonging to contractor B.
Passwordless Authentication: We utilize secure, time-limited cryptographic magic links for dashboard access, eliminating vulnerabilities associated with compromised or reused passwords.

8. Your Data Rights & Deletion

Contractors have full control over their data:

Export: You may export all leads and customer records to CSV at any time from your dashboard.
Deletion: You can delete individual leads or request complete account eradication by emailing support@bullparkit.com.

9. Contact our Privacy Officer

For questions regarding this Privacy Policy, data access requests, or privacy inquiries, please contact:

BullParkIt Software Inc. — Privacy & Compliance
Website: https://www.bullparkit.com
Privacy Inquiries: support@bullparkit.com