Privacy Policy
What PainterOS collects when you ask for a setup call or use the product, why we have it, who we share it with, and how to get it deleted.
Last updated August 31, 2026
1. Scope
This policy covers this website and the PainterOS application. It applies to visitors, to people who request a setup call, and to account holders (“you”). Where we process information about your customers on your behalf, you are the controller and we are the processor / service provider, and the customer agreement governs that processing rather than this policy.
2. What we collect
We do not knowingly collect information from anyone under 16. This site is a business tool and is not directed at children.
3. Why we have it
- To answer your request and call or text you about setting up an account (your consent).
- To provide, secure and support the product you signed up for (performance of contract).
- To prevent spam, fraud and abuse of our forms and payment rails (legitimate interests).
- To keep records the law requires us to keep, including proof of messaging consent (legal obligation).
We do not use your information to train advertising profiles, and we do not run third-party ad-tech trackers on this site.
4. Calls and texts
When you submit the setup form we store the disclosure you agreed to, verbatim. As of this version it reads:
Consent to marketing calls or texts is never a condition of buying anything. See the SMS Terms for frequency, opt-out and carrier details.
5. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined by U.S. state privacy laws.
6. How long we keep it
- Setup-call requests that never become accounts: 24 months, then deleted.
- Messaging consent and opt-out records: at least 5 years after the last message, because that is the exposure window for a messaging claim.
- Account and transaction records: for the life of the account plus the period tax and accounting rules require.
- Server logs: 90 days, except records retained for an active security or abuse investigation.
7. Your rights
Depending on where you live, you can ask us to confirm what we hold about you, give you a copy, correct it, delete it, or limit how we use it, and you can appeal a refusal. You will not be treated differently for asking. We answer within 45 days and may take one extension where the law allows.
How to ask
Use the contact channel published on this site, quoting the phone number or email you gave us and what you want done. Requests are honored regardless of how they reach us. We verify requests by matching the number or email on file; we do not require you to create an account to make one. An authorized agent may act for you with written permission.
We do not use automated decision-making that produces legal effects about you, and we do not need or use a “Do Not Sell” mechanism because we do not sell or share your information in the statutory sense.
8. Security
Data is encrypted in transit, form submissions are signed and rate-limited, payment card data is tokenized by our PCI DSS-certified payments partner and never reaches our systems, and access to production data is limited to people who need it. No system is perfectly secure, and we do not claim otherwise; if a breach affects you we will notify you as the law requires.
9. Where data is processed
We operate in the United States and our providers may process data there. If you contact us from outside the U.S., you are asking us to process your information in the U.S., where privacy law differs from your own.
10. Changes
We will update the date at the top of this page when it changes, and we will tell you before a change materially reduces your rights. PainterOS is the party responsible for the processing described here.