Privacy Policy

Privacy Policy

Effective Date: April 24, 2026

This Privacy Policy describes how BrushBoss Software, LLC (“BrushBoss,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information in connection with our software platform, website, onboarding, support, integrations, payment features, content, and any other related BrushBoss services (collectively, the “Services”).

BrushBoss Software, LLC is a Texas company with a principal business address of:

5161 San Felipe Street, Suite 320 - 5130

Houston, TX 77056

BY ACCESSING, VISITING, BROWSING, USING OR ATTEMPTING TO INTERACT WITH OR USE ANY PART OF OR USING THE SERVICES, YOU AGREE TO THIS PRIVACY POLICY.

‍

1. Overview

BrushBoss provides a business-to-business software platform for painting companies and related trade service businesses. BrushBoss generally processes Customer Data on behalf of and under the direction of the Customer, acting as a service provider, processor, or similar role as applicable under law. BrushBoss and its Customers are independent parties. BrushBoss does not control and is not responsible for the data handling practices of Customers.

For purposes of this Privacy Policy:

“Customer” means the business entity or organization that subscribes to and controls use of the Services.

“User” means an individual authorized by a Customer to access or use the Services.

“Customer Data” means data submitted, uploaded, stored, processed, generated, or transmitted through the Services by or on behalf of a Customer or its Users. Customer Data may include information about a Customer’s employees, contractors, clients, homeowners, contacts, leads, estimates, jobs, invoices, payments, time entries, costs, notes, documents, and other business records.

‍

2. Information We Collect

2.1 Personal Information We Automatically Collect

We may collect the following personal information, including:

• Identifiers collected automatically, such as
  
  • IP address;
  • device type;
  • browser type;
  • operating system; and
  • security and access logs.

• Internet or other electronic network activity information collected automatically, such as:  
  
  • referring pages;
  • pages viewed;
  • usage activity;
  • log files;
  • session identifiers;
  • timestamps;
  • error reports; and
  • authentication events.

2.2 Personal Information You Provide or Entered Into the Services

We may collect the following personal information you provide, including:

• Identifiers and employment information provided directly to us, such as:
  
  • name, 
  • business email address;
  • business phone number;
  • company name;
  • business address;
  • account credentials; and
  • role assignments and permissions.

• Payment and billing information provided to us, such as:
  
  • Customer and client billing and invoicing information; and
  • Stripe subscription, payment, and billing status information.

• Internet or other electronic network activity information provided to us, such as:
  
  • communications with BrushBoss, including emails, support requests, onboarding communications, and feedback;
  • information shared during training, support, onboarding, consulting, or strategic advisory sessions; and
  • Zoom meeting information and recordings, where applicable and communicated.

• Customer Data entered into or processed through the Services.

BrushBoss does not store full payment card numbers. Payment card information is processed by third-party payment processors such as Stripe.

‍

2.3 Customer Data You Provide or Entered Into the Services

BrushBoss may collect or process Customer Data that you provide, which may include information related to:

• contacts and leads;
• homeowners, clients, and prospects;
• jobsites and addresses;
• estimates and proposals;
• budgets and price items;
• schedules and job records;
• invoices and payment records;
• time entries and timesheets;
• employees, contractors, and team members;
• job costing, materials, labor, expenses, and profitability information; and
• notes, files, tags, tasks, communications, and related business records.

The Customer controls Customer Data and is solely responsible for the legality, security, accuracy, and appropriate use of such data.

2.4 Cookies and Similar Technologies

BrushBoss uses limited cookies and similar technologies for:

• authentication;
• session management;
• security;
• fraud prevention;
• remembering account or session preferences;
• operating and improving the Services.

We do not currently use cookies for behavioral advertising, cross-site tracking, or consumer profiling.

Most browsers allow you to control cookies through browser settings. Disabling cookies may affect certain functionality of the Services.

‍

3. How We Use Information

We collect most of this personal information directly from you or the Customer—by telephone, text or email and/or via our website, software, and applications. However, we may also automatically collect the identifier and internet or other electronic network activity information outlined in Section 2 from the following categories of sources:

• Our IT systems, or
• The Customer.

‍

4. Why We Use Personal Information

We use the Personal Information for system functionality, authentication, security, debugging, fraud prevention, performance monitoring, analytics, support, and product improvement.

‍

5. How We Use Information

We use the Identifier and Employment information to:

• communicate with Customers and Users;
• detect, investigate, and prevent fraud, abuse, security incidents, and misuse;
• enforce agreements and protect BrushBoss, Customers, Users, and others;
• comply with legal obligations;
• create, manage, and support Accounts;
• authenticate Users and manage access controls;

We use the Internet or other electronic network activity information to:

• communicate with Customers and Users;
• troubleshoot issues and respond to support requests;
• monitor performance, usage, and reliability;
• create aggregated, anonymized, or de-identified analytics and business insights.

We use the Payment and Billing Information to:

• process subscriptions, billing, invoices, and payments;
• send account, billing, product, security, support, and administrative notices;
• detect, investigate, and prevent fraud, abuse, security incidents, and misuse;
• comply with legal obligations;
• create, manage, and support Accounts;

We use the Customer Data Information to:

• provide onboarding, support, training, consulting, and strategic workflow guidance;
• troubleshoot issues and respond to support requests;
• monitor performance, usage, and reliability;
• enforce agreements and protect BrushBoss, Customers, Users, and others;
• develop, test, and improve product functionality;
• create, manage, and support Accounts;
• authenticate Users and manage access controls;
• provide, operate, maintain, and improve the Services;

‍

BrushBoss does not sell personal information.

‍

6. Customer Data Ownership and Use

Customers retain ownership of Customer Data.

BrushBoss processes Customer Data to provide, maintain, secure, support, and improve the Services.

BrushBoss may create and use aggregated, anonymized, or de-identified information derived from Customer Data or use of the Services for:

• analytics;
• benchmarking;
• product improvement;
• security;
• research;
• operational insights;
• business planning.

‍

Aggregated, anonymized, or de-identified information will not identify any individual or Customer.

Customers are solely responsible for:

• providing required privacy notices to their employees, contractors, clients, homeowners, contacts, and other individuals whose data may be entered into the Services;
• obtaining any legally required consents;
• ensuring the legality, accuracy, and completeness of Customer Data;
• determining whether Customer Data may legally be collected, stored, processed, or used;
• responding to data subject requests, including requests for access, correction, deletion, portability, or objection, where applicable;
• managing User access, permissions, and deactivation; and
• complying with applicable privacy, employment, contractor, tax, accounting, payment, and customer-facing disclosure obligations.

BrushBoss does not control how Customers collect, use, disclose, or manage information about their own employees, contractors, clients, homeowners, contacts, or other individuals.

If you are an employee, contractor, client, homeowner, contact, or other individual associated with a BrushBoss Customer, you should direct privacy-related requests or questions to that Customer. BrushBoss may assist the Customer where appropriate, but the Customer is responsible for responding to such requests.

‍

7. Legal Bases and Business Purposes

BrushBoss processes information for the business purposes described in this Privacy Policy, including to perform contractual obligations, operate the Services, protect the Services, comply with legal obligations, and pursue legitimate business interests.

Where legally required, BrushBoss or the Customer may rely on consent or another lawful basis for processing. Customers are responsible for obtaining any consents required from their employees, contractors, clients, homeowners, contacts, or other individuals whose information is entered into the Services.

‍

8. How We Share Information

BrushBoss may share information in the following circumstances.

1. Service Providers

We use third-party service providers to operate and support the Services. These may include:

• Amazon Web Services;
• Supabase;
• Stripe;
• Resend;
• Google Cloud Services;
• Zoom;
• Namecheap; and
• website, hosting, analytics, support, security, communication, and infrastructure providers.

These providers may process information as necessary to perform services on our behalf and are expected to safeguard information according to their contractual obligations and applicable law. 

The Services may also contain links to third-party websites or services. We have no control over the privacy practices or the content of these third parties. As such, we are not responsible for the content or the privacy policies of those third parties. You should check the applicable third party’s privacy policy and terms of use when visiting any other websites or using other services. You may be subject to the applicable third party’s terms and privacy policy.

‍

2. Stripe and Payment Providers

Subscription billing, payment processing, and certain customer payment features may be provided through Stripe or other payment providers.

BrushBoss may share information with Stripe or other payment providers to process payments, manage subscriptions, calculate taxes, support billing, verify accounts, manage payment features, detect fraud, handle disputes, and comply with payment, risk, and legal requirements.

Payment processing is subject to the applicable payment provider’s terms, privacy policy, onboarding, verification, compliance, dispute, refund, chargeback, payout, reserve, and account requirements.

BrushBoss does not store full payment card numbers.

‍

3. Customers and Account Administrators

Customer Data is accessible to and controlled by the Customer that provided it.

Account Owners, Admins, and authorized Users may access Customer Data according to permissions configured within the Services.

BrushBoss may provide Customer Data or account information to the Customer, Account Owner, Admins, billing contact, or other individuals BrushBoss reasonably believes are authorized to act on the Customer’s behalf.

‍

4. Third-Party Integrations

If Customer enables integrations with third-party services, BrushBoss may share information with those services as necessary to operate the integration or as BrushBoss determines to provide the Services.

We have no control over the privacy practices or the content of these third parties. Any User’s use of third-party integrations is subject to the third party’s own terms and privacy policies, which we recommend you review. BrushBoss is not responsible for the privacy or security practices of third-party services.

‍

5. Legal Requirements and Protection

We may disclose information if we believe disclosure is necessary or appropriate to:

‍

• comply with applicable laws, regulations, subpoenas, court orders, or legal processes;
• respond to lawful requests by authorities;
• enforce agreements;
• investigate fraud, abuse, or security incidents;
• protect the rights, safety, or property of BrushBoss, Customers, Users, or others; and
• prevent harm, illegal activity, or misuse of the Services.

‍

6. Business Transfers

Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other business transaction involving all or part of BrushBoss.

‍

7. Aggregated or De-Identified Information

We may share aggregated, anonymized, or de-identified information for analytics, benchmarking, research, marketing, product improvement, or business purposes. Such information will not identify any individual or Customer.

‍

8. With Consent

We may share information for other purposes with consent or at the direction of the Customer.

‍

9. Communications

BrushBoss may send you:

• transactional communications, including account notices, billing notices, service updates, security alerts, support messages, and administrative notices;
• onboarding, training, and implementation communications; and
• optional product updates, newsletters, marketing messages, or promotional communications.

Transactional and administrative communications are necessary to provide the Services and may not be opted out of while using the Services.

Optional marketing communications may include opt-out instructions where required.

‍

10. Data Retention and Deletion

BrushBoss retains information for as long as BrushBoss determines is reasonably necessary to provide the Services, operate the business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

Customer Data may be deleted after account termination or expiration. Customer Data will generally be deleted within sixty (60) days after termination, unless retention is required by law or BrushBoss determines is reasonably necessary for legitimate business, security, backup, dispute-resolution, or compliance purposes.

BrushBoss does not guarantee data export, portability, retention, or recovery after termination. Customers are responsible for exporting any Customer Data they wish to retain before termination or expiration of the Services.

Backups, logs, and residual copies may persist for a limited period according to backup, security, disaster recovery, legal, or compliance practices.

‍

11. Data Security

BrushBoss implements reasonable administrative, technical, and organizational safeguards designed to protect information.

However:

• no system is completely secure;
• internet transmissions cannot be guaranteed secure;
• third-party services may experience breaches, outages, or failures;
• Users are responsible for safeguarding login credentials; and
• Customers are responsible for managing User access and permissions.

If you believe there has been unauthorized access to an Account or Customer Data, contact us at support@getbrushboss.com

‍

12. Data Subject Requests

Depending on applicable law, individuals may have rights to access, correct, delete, obtain a copy of, or restrict certain uses of personal information.

Because BrushBoss primarily processes Customer Data on behalf of Customers, individuals associated with a Customer should direct privacy requests to that Customer.

If BrushBoss receives a request relating to Customer Data, we may refer the request to the relevant Customer or assist the Customer as appropriate.

Requests relating to information BrushBoss controls directly, such as information submitted through our website, support communications, or billing communications, may be sent to support@getbrushboss.com.

We may need to verify your identity or authority before responding to a request.

‍

13. Children's Privacy

The Services are intended for business use and are not intended for individuals under eighteen (18).

BrushBoss does not knowingly collect personal information from children under thirteen (13).

‍

If we learn that we have collected personal information from a child in a manner that violates applicable law, we will take appropriate steps to delete it. If a child has provided us with Personal Information, a parent or guardian of that child may contact us at support@getbrushboss.com and request that such information be deleted from our records. For more information about the Children’s Online Privacy Protection Act, please visit www.ftc.gov.

‍

14. International Data Processing

BrushBoss operates from the United States and the Services are not marketed to users outside the United States. If you are located outside the United States you should not use the Services.

Information may be processed, stored, or transferred in the United States or other jurisdictions where BrushBoss or its service providers operate.

For Users located outside the United States, including Canada, Customer Data and other information may be transferred across borders and processed in jurisdictions that may have data protection laws different from those in your jurisdiction.

By using the Services, you acknowledge that information may be processed and stored in the United States and other jurisdictions.

Where required by law, BrushBoss will use appropriate safeguards for cross-border transfers.

‍

15. State Privacy Notices

Certain U.S. state privacy laws may provide residents with rights regarding personal information, such as rights to access, correct, delete, obtain a copy of, or opt out of certain processing. For Users in States with these protections, the Users are entitled to the following:

The right to access. You have the right to request copies of your personal data.

The right to rectification. You have the right to request that we correct any information you believe is inaccurate. You also have the right to request we complete information you believe is incomplete.

The right to erasure. You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing. You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing. You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability. You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please don’t hesitate to contact us. 

Email us at: support@getbrushboss.com

Or write to us at: 5161 San Felipe Street, Suite 320 – 5130, Houston, TX 77056

BrushBoss is a B2B software provider and primarily processes Customer Data on behalf of Customers. If your information was submitted to BrushBoss by a Customer, please contact that Customer to exercise any applicable rights.

BrushBoss does not sell personal information.

‍

BrushBoss does not process personal information for behavioral advertising, cross-site tracking, or consumer profiling.

If you believe BrushBoss controls your personal information directly and you wish to exercise applicable privacy rights, contact us at support@getbrushboss.com.

‍

16. Third-Party Services and Links

The Services may contain links to, rely on, or integrate with third-party websites, platforms, applications, payment processors, accounting software, communication providers, or other services.

BrushBoss is not responsible for the privacy, security, or data practices of third parties. Your use of third-party services is governed by their respective terms and privacy policies.

‍

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes may be communicated through the Services, by email, or by posting an updated Privacy Policy.

The updated Privacy Policy will be effective as of the effective date stated at the top unless otherwise required by law.

Continued use of the Services after updates constitutes acceptance of the revised Privacy Policy.

‍

18. Contact Information

If you have questions about this Privacy Policy or BrushBoss’s privacy practices, contact us at:

Email: support@getbrushboss.com

Mailing Address:

BrushBoss Software

5161 San Felipe Street, Suite 320 - 5130

Houston, TX 77056

‍