Privacy

Punchlist360 is operated by The Compendium Company, LLC. This page says plainly what we hold, why we hold it, and what we will not do with it. It is short on purpose.

What we store

• Your account: username, name, email address, phone number and the property address you enter on first sign-in. We need these to sign you in, send reminders, and reset a password you have forgotten.
• Your project: the punch items, areas, notes, decisions, photos and documents you add.
• Your money: the budget categories, ledger entries and receipts you record, and the insurance claim details you enter.
• A record of changes: who changed what and when, so a disputed approval can be settled from the file rather than from memory.
• Technical logs: IP address and browser for sign-in attempts and errors, kept for security.
• Website usage: if our own site analytics is on for you, the pages you view and what you click, recorded under a random visitor ID. The next section explains it, and you can turn it off.

Our own site analytics

Our website uses a small analytics tool that The Compendium Co. runs itself, served from this site’s own address. It isn’t Google Analytics or any other outside service. When it’s on, it sets a first-party cookie called _cmk that holds a random visitor ID and lasts up to 13 months. Under that ID it records:

• The pages you view: the page address, keeping only these labels from it if they’re present (utm campaign tags, ref, q, search, asset, coin, symbol, product, sku, category, plan, tier, tab and page), plus the page title, the site that sent you (its domain only), how long you stay on the page, and how far you scroll.
• The links and buttons you click: their visible text, up to 60 characters, and where they lead.
• The forms you submit: the form’s name, the names of its fields, and where it’s sent. It never records what you type into a form, with one exception: when you submit your email address, we link that address to your visitor ID so we can see what you were interested in.
• Your device type, browser, operating system and country. Your country comes from Cloudflare. This analytics doesn’t store your IP address.

We use this to understand what visitors are interested in, to improve our sites and offers, and to tell people about products across The Compendium Co.’s sites that match their interests. If we have your email address, that can include emailing you about them. The data stays with The Compendium Co. and its sites. We don’t sell it, and we don’t share it with advertisers or outside analytics companies.

Your choices. A banner lets you choose Accept all or Necessary only, and we remember your choice for one year in a cookie called _cmk_c. If you’re in the European Union or European Economic Area, the UK or Switzerland, or we can’t tell where you are, nothing is recorded until you choose Accept all. Everywhere else, analytics run unless you choose Necessary only or your browser sends a Global Privacy Control signal, which we honor. Choosing Necessary only, or visiting punchlist360.com/_m/optout, turns analytics off and deletes the activity we’ve recorded under that browser’s visitor ID. There’s a short, plain-language summary at punchlist360.com/_m/privacy.

What we do not do

• We do not sell your information, and we do not share it with advertisers or data brokers.
• We do not give your contractor, your carrier or anyone else access to your account. You invite people; nobody else is added.
• We do not read one customer’s project to inform anything shown to another customer.

Payment

Subscription payments are processed by Stripe. Card numbers go to Stripe directly and are never stored on our systems. We keep the customer and subscription identifiers Stripe gives us, so we know whether your account is active.

Email and text

Email is sent through Amazon SES. Text messages are sent through the Compendium messaging service on AWS. You control whether you receive either, from your profile, at any time.

Where it lives

Data is held on servers in the United States, encrypted at rest, backed up daily to immutable storage, and reachable only over HTTPS.

How long we keep it

For as long as your account is open. If you cancel, your data stays exportable for 30 days and is then deleted. Ask us to delete it sooner and we will.

Your rights

You can export everything you have entered at any time from the Reports screen, without asking us. To correct or delete anything, or to ask what we hold, email [email protected].

Children

Punchlist360 is not intended for anyone under 18 and we do not knowingly collect information from children.

Changes

If this page changes in a way that matters, we will email account holders rather than quietly changing the date at the top.

Contact

The Compendium Company, LLC — [email protected]