Updated October 3, 2026.
PaintMargin is operated by EUGENIO SOLORZANO TENA. Contact paintmargin-privacy@flipiq.us for privacy questions or help with access, correction and deletion.
You can create jobs, review costs, prepare estimates and invoices, and export without an account. PaintMargin does not automatically upload guest jobs. Your device backups and destinations you choose for exported files may keep separate copies. An export containing original files is not encrypted by the app; choose a destination you trust.
If you sign in, we use your email address and an account identifier to authenticate you and separate your cloud records. Supported account jobs sync while the app is open. Guest jobs copy to your account only when you choose that action; sample jobs are excluded. Available cloud features depend on the testing build. Some invoice-enabled jobs remain local until their complete cloud support is enabled.
Job records can include customer names, contact details and addresses; work descriptions; revenue, costs and dates; notes and review decisions; attached receipts; estimates and invoices; original PDFs; revision history; and manual payment or correction entries. We use these records to provide the features you request. Supply only information you are authorized to use. Invoice payment entries record what you enter; they do not move money or confirm bank settlement.
Supabase provides authentication, database and private file storage in the current United States environment (us-west-1). Resend delivers sign-in emails. The operator maintains selected database and original-file backups on the HP workstation, with encrypted offsite copies in iCloud. Providers process request metadata, email-delivery status, security events and errors needed to deliver and protect the service. Information is used to provide the features you request, maintain security and meet applicable legal obligations. Access is limited to the operator and authorized providers; records can also be disclosed when required by law. PaintMargin does not sell your information or share it for targeted advertising.
The current Supabase Free plan provides one day of accessible platform logs. Writing new authentication audit events into the project database is disabled. A dashboard log window is not a promise that every provider-held security, account or service record is erased at that time. Resend describes 30-day email and log retention on its standard plans, and deletion of remaining customer data within 90 days after the operator terminates the Resend account; deleting your PaintMargin account does not terminate that provider account. Providers can retain information needed for security, legal obligations or dispute resolution. Apple and RevenueCat have separate purchase-record retention when subscription testing is enabled.
The policy website is prepared for Vercel hosting. Visiting hosted pages can provide the host with your IP address, browser information and the requested URL for delivery and security. The pages contain no app jobs, sign-in form, advertising, analytics scripts or third-party fonts. Vercel’s runtime-log windows do not describe retention of every security or request record. If you email support or privacy, we receive the sender address and whatever you include; the existing iCloud mailbox and its backups can retain those messages separately from your app account. Do not send credentials or customer documents in an initial request. Contact us if you want help removing a support message.
Paid subscriptions are not enabled in this testing version. When a subscription purchase test is enabled, Apple processes the test purchase and RevenueCat processes subscription status, purchase history and the associated account identifier for access verification and subscription reporting. PaintMargin does not receive your card number. There is no advertising or cross-app advertising tracking in the current app. This does not mean subscription providers have no operational or subscription analytics.
Saved records remain until you remove them using supported controls or delete the account. Archiving a job is not deletion. Removing an attachment reference can leave previously uploaded originals in cloud storage until account deletion. Current HP database exports rotate after 14 days; encrypted snapshots use 7 daily, 4 weekly and 6 monthly retention. A pre-deletion backup can therefore outlive live-account deletion. These are current backup settings, not a guaranteed recovery time or immediate-erasure promise. Backups require deletion checks before they can be returned to live use.
Use the app's export controls to keep available records and originals. Account deletion requires recent authentication and explicit confirmation. Cloud files can be removed before deletion finishes. The app clears the selected account's supported local files after confirmed deletion and preserves separate guest work. If the reply is uncertain, retain and export the local copy while checking the result. Copies on other devices and exports you control may remain; remote-device erasure is not automatic. Deleting an account does not cancel an Apple subscription.
Where enabled in testing, deletion-status receipts use a hashed proof and account identifier with a seven-day status window. Expiry is not a guaranteed erasure date: a live account’s expired proof can remain to prevent reuse. Where subscription testing is enabled, completed billing-event references may be eligible for cleanup after 30 days once they no longer support current subscription state; current references can remain longer. Cleanup eligibility is not proof that cleanup has run. These records do not replace the later-deletion checks required before a backup can return to live use.
You may ask us for access to your information, a copy, correction or deletion using the privacy contact below. Your legal rights and any exceptions depend on your location and applicable law; where applicable, you may also request restriction, object to processing, withdraw consent or appeal a response. We verify ownership before disclosing or changing account information and respond according to applicable requirements. We do not penalize you for exercising applicable privacy rights. Guest work can remain entirely on your device, and exports let you keep your own copies. There is no targeted advertising, sale of personal information or advertising profiling in the current service.
Contact us to request access, correction or deletion assistance. We may need to verify account ownership. Do not send passwords, sign-in codes, card details or unredacted customer documents with an initial request. PaintMargin is intended for painting businesses, not children. Material changes will be reflected in an updated notice and date before the affected public service is offered.