Punchkard is a text-message work-record service for skilled tradespeople and their customers. This policy describes what we collect, how we use it, and how we share it.
From tradespeople (account holders): name, business name, mobile number, email address, payment information, GPS location during job punches, photos of completed work, and the records of jobs you perform on the platform.
From customers (recipients of texts): mobile number provided by the tradesperson at the time of service booking, with the customer's consent. We log delivery and engagement events (delivered, opened, replied, opted out) for each message we send.
Customers receive SMS messages only after a tradesperson has explicitly entered their phone number into Punchkard at the time of service booking, with customer consent. The first message in any conversation includes opt-out instructions.
Opt out anytime. Reply STOP to any message and you will be removed from all future Punchkard messages from that tradesperson. Reply HELP for assistance. Message and data rates may apply.
SMS data, including opt-in records, message content, and delivery status, is shared only with our SMS infrastructure provider (Telnyx) and the mobile carriers required to deliver the message. We do not sell or share mobile information with third parties or affiliates for marketing or promotional purposes.
We share data only with: (a) the tradesperson who collected it, (b) the customer involved in a specific job, (c) infrastructure providers (telecommunications, payments, hosting, analytics) under contract, and (d) law enforcement when required by valid legal process. We do not sell personal information.
You can export and delete your account data at any time from the Punchkard app. Account deletion removes your account and personally identifying information; aggregated, anonymized records may be retained for system integrity.
Active job records are retained for the life of your account. Inactive accounts are purged 24 months after last activity. SMS delivery logs are retained 12 months.
We use industry-standard transport encryption (TLS) and at-rest encryption for sensitive fields. Access to production data is restricted to authorized personnel.
Punchkard is not directed to children under 13. We do not knowingly collect data from children.
We will notify users of material changes to this policy by email or in-app notice 30 days before they take effect.
Questions? privacy@punchkard.app