Privacy Policy
Effective date: August 16, 2025
Preferred contact channel: Email ([email protected])
Who we are
PaintSignal Inc.
Postal address: PaintSignal Inc., 6-2160 Highway 7 #2007, Vaughan, ON L4K 1W6, Canada
Email: [email protected]
Phone (SMS/voice line): +1 (470) 798-4848 (10DLC-capable and configured to receive inbound SMS and calls)
This Policy explains how we collect, use, disclose, retain, and secure information when you interact with our landing page, forms, emails, SMS/MMS, calls (including prerecorded/automated voice and ringless voicemails), and related services for U.S. operations (with a short Canada note below).
Information we collect
1) You provide via forms/lead ads/ Calls & Text Messages
Name, phone, email, city you wish to reserve.
Qualification prompts you choose to answer (e.g., residential focus, monthly revenue band, operational capacity, optional free-text note).Notice at Collection: We display a short Notice at Collection at or before the point of collection that links to (and is consistent with) the categories/purposes/retention disclosed in this Policy.
2) From your use of our site and messages
Technical/usage data: IP address, device/browser (User-Agent), pages viewed, UTM parameters, cookies (analytics/ads).
Communications: SMS/MMS content and metadata, email headers/content related to our program, call recordings/voicemails, and ringless voicemail audio files.
No precise geolocation (GPS/BLE/Wi-Fi). Region is inferred from IP.
3) Payments
We use processors (Stripe, Wise) and do not store card/bank numbers. We receive limited billing metadata (e.g., last4, status, timestamps).
Notice at Collection: We display a short Notice at Collection at or before the point of form collection that links to (and is consistent with) the categories/purposes/retention disclosed in this Policy.
How we use information
Scheduling & account communications (including confirmations, rescheduling, reminders).
Marketing (availability, “reserve your city,” decision follow-ups) via email/SMS/calls within applicable laws.
Analytics/measurement to improve funnels and ads (e.g., GA4, Meta Pixel/CAPI).
Security/fraud/abuse prevention.
Legal compliance & dispute resolution.
Improving assistant behavior and systems using anonymized or redacted communications to train/evaluate our digital/automated assistant and internal processes.
We do not sell personal information for money. For California sharing (cross-context ads), see State privacy rights.
Notice at Collection (US) & CPRA Disclosures (California)
We provide this notice at or before the point of collection and link to it wherever we collect personal information. It describes the categories of personal information we collect, the sources, purposes of use, categories of recipients, whether we “sell” or “share” (as defined by California law) each category, and how long we retain it.
Definitions (California): “Sell” means disclosing personal information for monetary or other valuable consideration. “Share” means disclosing personal information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals.
Identifiers (e.g., name, phone, email, IP address)
Sources: Directly from you (forms/lead ads); your device/browser (IP).
Purposes (see “How we use information”): Scheduling and account administration; marketing; analytics; security; legal/compliance.
Recipients: Service providers (messaging/telecom, CRM, hosting, analytics); payment processors (limited transaction metadata only).
Sell/Share (CA): We do not sell. We do not share for CA; cross-context advertising is disabled for California traffic.
Retention: 4 years.
Commercial Information (e.g., services of interest; qualification responses such as residential focus/revenue band)
Sources: Directly from you.
Purposes: Scheduling and account administration; marketing; analytics; security; legal/compliance.
Recipients: Service providers (CRM, messaging).
Sell/Share (CA): We do not sell. We do not share for CA.
Retention: 4 years.
Internet/Network Activity (e.g., pages viewed, UTM parameters, cookies, device/user agent)
Sources: Your device/browser; cookies/SDKs; GA4; Meta Pixel/CAPI.
Purposes: Analytics and measurement; advertising/retargeting (retargeting not used for CA residents); security.
Recipients: Service providers (analytics/ads, hosting/CDN).
Sell/Share (CA): We do not sell. We do not share for CA; we disable cross-context behavioral advertising for California traffic and honor GPC.
Retention: 4 years.
Audio/Electronic (e.g., call recordings, voicemails, ringless voicemail audio)
Sources: From your communications with us.
Purposes: Scheduling and support; quality assurance and training; legal/compliance.
Recipients: Service providers (telecom/messaging).
Sell/Share (CA): We do not sell or share.
Retention: 4 years.
Inferences (very limited—e.g., interest level derived from your inputs/interactions)
Sources: Derived from your interactions with us and the information you provide.
Purposes: Prioritizing scheduling; suppressing irrelevant outreach; quality improvements.
Recipients: Internal use only.
Sell/Share (CA): We do not sell or share.
Retention: 4 years.
Sensitive Personal Information (as defined by California law)
Collection: Not collected.
Purposes/Recipients: N/A.
Sell/Share (CA): N/A.
Retention: N/A.
Additional CPRA Statements (California):
We do not sell personal information for monetary consideration.
We do not share personal information for cross-context behavioral advertising for California residents. We disable such advertising for California traffic and honor GPC signals as an opt-out of sale/share.
If our practices change, we will update this Policy and provide the required “Do Not Sell or Share My Personal Information” mechanisms.
Sources and Recipients: Further details about sources of personal information and how we disclose it to service providers and other recipients appear in “How we disclose information.”
Retention: Unless a different period is stated above, we retain each category for 4 years, or longer as required to comply with law, resolve disputes, or protect our rights (including legal holds).
Cookies, analytics, and advertising
We use Google Analytics 4 and Meta Pixel/Conversions API to measure traffic and performance and to run advertising/retargeting outside California. You can adjust browser settings and ad preferences with Google/Meta tools and industry opt-outs.
How we disclose information
We disclose personal information to service providers under contracts that limit use to our instructions and require confidentiality/security. Typical providers include:
Messaging/telecom: GoHighLevel (LeadConnector), Twilio (10DLC SMS/voice transport).
CRM/storage/productivity: GoHighLevel CRM; Google Workspace/Drive; company laptops (access-controlled).
Ads/analytics: Meta; Google Analytics/Ads.
Hosting/CDN: Landing page hosted on GoHighLevel; domain/DNS/edge via Cloudflare.
Payments: Stripe; Wise.
Compliance/records: systems required to log consent, STOP/HELP events, and delivery.
We may disclose information when required by law, to protect rights and safety, or in a business transfer.
Retention
Unless a longer period is required for legal, accounting, or dispute purposes (legal hold), we retain:
Lead/contact records, SMS/email logs, call/voicemail/RVM audio, analytics/cookie data: 4 years.
Upon expiry or request (where applicable), we delete or de-identify per our schedules.
Security
We implement TLS/HTTPS for data in transit; role-based/least-privilege access; MFA for admin/privileged accounts (CRM, messaging, hosting, email); access logs with periodic admin review; retention/deletion schedules; and vendor contracts with confidentiality and security obligations. While no system is perfectly secure, these controls are designed to be reasonable for our operations.
Your communication choices
Email (CAN-SPAM): Promotional emails include our postal address and an unsubscribe link honored within 10 business days. Transactional emails (e.g., meeting links, receipts) may not include unsubscribe, but remain truthful and non-deceptive.
SMS/MMS: See SMS Program Terms below for STOP/HELP and frequency.
Calls/recordings: Calls may be monitored or recorded for quality and training. Our digital/automated assistant may answer to help with scheduling and questions.
State privacy rights (U.S.)
We present a unified rights process covering states with privacy laws (including, as applicable by effective dates: CA, CO, CT, VA, UT, TX, OR, IA, DE, NH, NJ, TN, MN, MD, and others as they come online).
Depending on your state, you may have the right to:
Access and obtain a copy of personal information we maintain.
Delete personal information (subject to lawful exceptions).
Correct inaccuracies.
Data portability (structured copy).
Opt-out of (i) targeted advertising, (ii) “sale” (as defined by state law), and/or (iii) certain profiling for decisions producing legal/similar effects.
Appeal our decision on your request (within the timelines your state requires).
Your Privacy Choices (California)
No sale/share: We state we do not sell or share Californians’ personal information; therefore we are not required to display a “Do Not Sell or Share” link.
GPC honored: If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of sale/share for that browser/device.
If our practices change, we will add the required “Your (California) Privacy Choices” link and present additional options.
How to submit a request (two methods)
Email (preferred): [email protected]
Phone: +1 (470) 798-4848
Verification: We verify by reply from the same email or phone already on file. If we cannot verify, we will explain what additional steps are available.
Timelines: We respond within 45 days of receipt (we may extend once by 45 days where permitted and will notify you).
Authorized agents: Where your state permits, authorized agents may submit requests with proof of authority and identity.
California-specific notes
Sharing/Targeted Ads: We do not “sell” or “share” personal information of California residents as those terms are defined under the CPRA because we disable cross-context advertising for California traffic.
Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as an opt-out of any sale/share and targeted ads for that browser.
If our practices change, we will update this Policy and, where required, present additional choices.
Canada (PIPEDA) — brief note
For Canadian individuals, you may request access to and correction of your personal information and submit complaints to us at [email protected] or to the Office of the Privacy Commissioner of Canada. We process/store data in the U.S. and Canada and use service providers subject to contractual protections.
Cross-border transfer
We may process and store information in the United States and Canada. Your information may therefore be subject to laws of those jurisdictions.
Children
Our services are not directed to children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has provided information to us, contact [email protected] and we will take appropriate action.
Changes
We may update this Policy. We will revise the “Effective date” above and, if changes materially affect your rights, provide additional notice.
Contact us
Preferred: [email protected]
Phone: +1 (470) 798-4848
Postal: PaintSignal Inc., 6-2160 Highway 7 #2007, Vaughan, ON L4K 1W6, Canada
SMS Program Terms
Program name: PaintSignal SMS — City Reservation & Scheduling
Sender: PaintSignal Inc. via a 10DLC-capable number that receives inbound SMS and calls +1 (470) 798-4848.
Purpose / message categories
Scheduling and availability; appointment confirmations/rescheduling; reminder notices; city-reservation status; qualification follow-ups; decision follow-ups; operational support updates.
Opt-in
By submitting your phone number on our forms or by messaging our number, you agree to receive messages from PaintSignal. Consent is not a condition of purchase.
Frequency
Message frequency varies. During active scheduling and reminder windows, messages may be more frequent; otherwise typically 2–4 messages per month. Messages may be recurring.
Opt-out (STOP)
Reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to cancel at any time. A single opt-out confirmation message will be sent, after which you will no longer receive messages.
HELP / Customer care
Reply HELP for information about this program (no marketing content will be sent in response to HELP). You can also contact [email protected]. (Phone: +1(470) 798-4848.
Rates & carrier disclaimer
Msg&Data rates may apply. Carriers are not liable for delayed or undelivered messages.
Voice & voicemail notifications
Your consent to our SMS program also covers prerecorded/automated voice calls and ringless voicemail messages related to the purposes above. Calls to and from PaintSignal may be monitored or recorded for quality and training.
Quiet-hours and attempt policy (operational)
We send outbound marketing messages 8:00 a.m.–8:00 p.m. recipient-local and limit combined outbound attempts per recipient (SMS + calls + voicemail) to no more than 3 in any 24-hour period. If you message us after hours, we may send a single neutral acknowledgment and resume during allowed hours.
Data use
We log consent status, delivery, and STOP/HELP events to comply with carrier and legal requirements. See our Privacy Policy above for how we collect, use, disclose, and retain information.
Governing law & venue
This Policy is governed by the laws of Ontario, Canada, and disputes shall be heard in Vaughan, Ontario (or another competent court in Ontario). However, nothing in this Policy limits any non-waivable consumer privacy rights or remedies under applicable U.S. state or federal law (e.g., CPRA/CCPA or other state privacy laws) for residents of those jurisdictions.