Privacy Policy

Effective May 6, 2026

Who we are

PunchFinal is operated by Martello Systems, LLC. Contact: martelloartie@gmail.com.

What this policy covers

How we collect, use, store, and share information when you use PunchFinal at punchfinal.com and related domains.

Information we collect

Account information: name, email, password hash, optional company and phone.
Project content: project names, addresses, client info you enter, punch items, photos, signatures, invoice data, notes.
Payment information: handled by Stripe. We receive subscription status, customer ID, and invoice metadata from Stripe; we do not store full card numbers.
File uploads: photos and documents are stored with our file-hosting provider (UploadThing).
Technical data: IP address, browser type, session cookies, server logs.

How we use information

To provide and operate the service.
To authenticate you and protect accounts.
To process payments and manage subscriptions.
To respond to support requests.
To improve reliability and security (rate-limiting, abuse prevention).
To comply with legal obligations.

We do not sell your personal information.

Sub-processors

Neon — managed PostgreSQL database (project data, account info).
Stripe — payment processing.
UploadThing — file uploads (photos, documents).
Hostinger — server infrastructure.

Each sub-processor only receives the information necessary to perform its function.

Cookies and similar technology

We use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Data retention

We retain account and project data for as long as your account is active. If you close your account, we delete or anonymize personal data within 30 days, except where we are legally required to keep records (for example, billing records).

Your choices

You can update your account information from the account page. To delete your account or request a copy of your data, email martelloartie@gmail.com. Depending on where you live, you may have rights under GDPR, CCPA, or similar laws (access, correction, deletion, portability, objection). We honor those requests.

Security

We use TLS for data in transit, hashed passwords (bcrypt), and access controls on databases. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Children

PunchFinal is not directed to children under 13, and we do not knowingly collect personal information from them.

International users

If you access PunchFinal from outside the United States, your information will be processed in the United States. By using the service you consent to that transfer.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will post a notice and update the effective date.

Contact

Privacy questions, data requests, or concerns: martelloartie@gmail.com.

PunchFinal is a product of Martello Systems, LLC.