Privacy
Privacy Policy
Punchkard is a text-message work-record service for skilled tradespeople and their customers. This policy describes what we collect, how we use it, and how we share it.
What we collect
From tradespeople (account holders): name, business name, mobile number, email address, payment information, GPS location during job punches, photos of completed work, and the records of jobs you perform on the platform.
From customers (recipients of texts): mobile number provided by the tradesperson at the time of service booking, with the customer's consent. We log delivery and engagement events (delivered, opened, replied, opted out) for each message we send.
How we use it
- To send job-status notifications and review requests by SMS to customers, on behalf of the tradesperson serving them.
- To produce a verified, time-stamped, GPS-stamped record of each job — accessible to the tradesperson and the customer involved.
- To prevent fraud and abuse, comply with carrier and regulatory requirements, and improve service reliability.
SMS messaging — what to know
Customers receive SMS messages only after a tradesperson has explicitly entered their phone number into Punchkard at the time of service booking, with customer consent. The first message in any conversation includes opt-out instructions.
Opt out anytime. Reply STOP to any message and you will be removed from all future Punchkard messages from that tradesperson. Reply HELP for assistance. Message and data rates may apply.
SMS data, including opt-in records, message content, and delivery status, is shared only with our SMS infrastructure provider (Telnyx) and the mobile carriers required to deliver the message. We do not sell or share mobile information with third parties or affiliates for marketing or promotional purposes.
How we share it
We share data only with: (a) the tradesperson who collected it, (b) the customer involved in a specific job, (c) infrastructure providers (telecommunications, payments, hosting, analytics) under contract, and (d) law enforcement when required by valid legal process. We do not sell personal information.
Data ownership and export
You can export and delete your account data at any time from the Punchkard app. Account deletion removes your account and personally identifying information; aggregated, anonymized records may be retained for system integrity.
Retention
Active job records are retained for the life of your account. Inactive accounts are purged 24 months after last activity. SMS delivery logs are retained 12 months.
Security
We use industry-standard transport encryption (TLS) and at-rest encryption for sensitive fields. Access to production data is restricted to authorized personnel.
Children
Punchkard is not directed to children under 13. We do not knowingly collect data from children.
Changes
We will notify users of material changes to this policy by email or in-app notice 30 days before they take effect.
Contact
Questions? [email protected]