Privacy Policy

This Privacy Policy explains how Pink Sunset ("we", "us"), operator of Dowel (the "Service"), handles personal information. We act as a service provider to the trades businesses that use the Service. For data those businesses store about their own customers, the business is the controller and we process it on their behalf.

Account information: name, email address, organization details, and role, collected when you sign up or are invited.

Customer Data: the records you create in the Service, such as customers, jobs, quotes, invoices, files, and messages. This may include personal information about your own clients that you choose to store.

Payment information: processed by our payment provider. We do not store full card numbers.

Usage and device data: log data, approximate location from IP, and similar technical information used to operate and secure the Service.

We use personal information to provide and maintain the Service, authenticate users, process payments, send service and transactional emails, provide support, prevent abuse, comply with legal obligations, and improve the Service. We do not sell personal information.

We process personal information to perform our contract with you, to pursue our legitimate interests in operating the Service, and to comply with the law. Where required, we rely on your consent, which you may withdraw at any time. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We share information with vendors that help us run the Service, under agreements that require them to protect it:

Clerk (authentication and user management), Neon (database hosting), Vercel (application hosting), Stripe (payment processing), Cloudflare R2 (file storage), Pusher (real-time messaging), and Resend (email delivery). We may also use an error-monitoring provider to diagnose problems. We may disclose information if required by law or to protect our rights, users, or the public.

Our infrastructure and our service providers may store and process data in Canada, the United States, and other countries. Where data is transferred across borders, it remains subject to this Policy and to contractual protections with our providers.

We use strictly necessary cookies and similar technologies to keep you signed in, remember preferences, and keep the Service secure. We do not use advertising cookies.

We retain account and Customer Data for as long as your account is active and as needed to provide the Service. After an account is closed, we delete or anonymize personal information within a reasonable period, unless we are required to keep it for legal, tax, or accounting purposes.

We use technical and organizational measures to protect personal information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent. If your information is held within a business's account as Customer Data, please contact that business; we will assist them as their service provider. To exercise your rights with us directly, contact us using the details below.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service or by email. The "Last updated" date above reflects the latest revision.

To ask about this Policy or your personal information, contact us at hello@dowel.build.