Privacy Policy

The short version

• We collect only what we need to run BrushHouseCRM.
• We don’t sell your data or your customers’ data.
• We don’t use your data to train AI models.
• Optional AI features send only the information needed for the task to Anthropic.
• We work with a small number of trusted service providers to run the product.
• Questions, data requests, or deletion: emailJakeTaubner@pm.me.

Who we are

BrushHouseCRM is operated by Jake Taubner as a sole proprietorship based in New Jersey, USA. We are responsible for your account information.

BrushHouseCRM is a tool for managing your own customers and work. The information you put into BrushHouseCRM about your customers is yours — we handle it on your behalf to provide the service, and nothing else.

Contact:JakeTaubner@pm.me.

What we collect

• Account information — your name, email, and (optionally) phone number and profile photo. If you sign in with Google or Apple, we receive your email and name from them so we can create your account.
• What you put into BrushHouseCRM — the contacts, projects, photos, notes, schedules, checklists, messages, proposal and invoice details, and other information you enter. This is yours. We access it only to run the service.
• Information you submit to optional AI features — for AI writing, this is the name and brief you provide. For AI checklist completion, it can include checklist content and voice transcripts, plus photo metadata, but not the photo itself. The speech-to-text step is provided by your browser or device, which may process audio under its own privacy terms; BrushHouseCRM receives the resulting transcript, not an audio recording.
• Basic technical information — things your browser or device shares when you use the app (like your IP address and browser type) so we can keep the service working and investigate problems. We use one cookie to keep you signed in. We don’t use advertising, analytics, or tracking cookies.

How we use your information

• Run the service — signing you in, storing your data, and keeping your web and mobile apps in sync.
• Send service notifications you’ve asked for (email or text).
• Provide optional features you choose to use, such as address suggestions, translation, photo safety checks, connected storage, and AI assistance.
• Diagnose problems and fix bugs.
• Prevent abuse and enforce our rules — which may include reviewing content when we have reason to believe it violates ourTerms of Serviceor the law.
• We don’t sell your data.
• We don’t use your data or your customers’ data to train AI models.

Who we share it with

We work with a small number of trusted service providers to run BrushHouseCRM:

• Amazon Web Services (AWS) — hosts the application and database, stores your uploaded photos, and delivers the emails and text messages we send. AWS also powers address suggestions, translation, and automated photo safety checks. AWS processes this information on our behalf. Our servers are located in the United States.
• Cloudflare — hosts the marketing site, routes and protects traffic to the application, and caches eligible photo sizes so they load quickly. Cloudflare may process basic request information such as IP addresses, URLs, and browser details while doing that work.
• Anthropic — provides the optional AI writing and checklist-completion features. When you choose one of those features, we send the prompt and relevant context described above to Anthropic’s commercial API. Anthropic says it generally deletes API inputs and outputs within 30 days, except when it must keep them longer for safety, abuse prevention, or legal reasons, and doesn’t use that API data to train its models. We don’t opt into model training.
• Google and Apple — if you sign in with Google or Apple, they authenticate you and we receive your verified email and name so we can create or find your account. If you choose Google Drive, the app accesses only the files you select so it can import them.
• Dropbox — if you choose to connect it, the app sends the photos you select to your Dropbox account. Google Drive and Dropbox handle your connected account under their own terms and privacy policies.
• Sentry — when something goes wrong in the app, we send an error report so we can fix the bug. A report may include who you are, device and browser details, and what you were doing when the error happened. Error-triggered session replay masks customer details and other free-form text by default.

We don’t share your data with advertisers or data brokers. Other than the providers described above, we disclose information only at your direction, when the law requires it, or when reasonably necessary to protect a person, investigate abuse, or enforce our rights.

Your choices and rights

• See and edit your information. The app shows you your account info and everything you’ve put into BrushHouseCRM. You can update most of it directly in the app.
• Request a copy or anything extra. If you want something the app doesn’t show you, emailJakeTaubner@pm.meand we’ll work with you.
• Delete your account. EmailJakeTaubner@pm.me. See the next section for how that works.

Keeping and deleting your data

• We keep your account and your data as long as your account is active.
• To delete your account, emailJakeTaubner@pm.me. We’ll remove your data from the service within 30 days.
• Save copies of anything you want to keep before you ask us to delete your account.
• Copies may linger in our backups for a short period afterward as backups rotate out.
• We may keep limited records where the law requires.

Security

• Your connection to BrushHouseCRM is encrypted.
• Your data is isolated from other users’ data.
• We sign you in through Google or Apple — we never see your password.
• Access to our systems is limited to the operator.
• If we ever have a security incident that affects your information, we’ll let you know as soon as we reasonably can.

No service can promise perfect security, so use a trusted sign-in provider and keep your devices secure.

Children

BrushHouseCRM is for adults (18 and over). We don’t knowingly collect information from people under 18. If you believe a minor has created an account, emailJakeTaubner@pm.meand we’ll delete it.

International users

BrushHouseCRM early access is currently offered only to businesses in the United States, and our service runs there. Using BrushHouseCRM means your information is processed in the United States.

Changes to this policy

If we change this policy, we’ll update the “Last updated” date above. For meaningful changes, we’ll email registered users before they take effect.

Contact