1. Introduction
ProBuilder Software ("we", "us", "our") operates the My Glow Up platform. This Privacy Policy explains how we collect, use, disclose, and protect personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.
By using our Service, you consent to the collection and use of information as described in this policy.
2. Information We Collect
Information you provide:
- Name, email address, phone number, and job title (during account creation or access request)
- Store name, location, and position
- Customer names and return details entered into the follow-up system (first name and last initial only recommended)
Information collected automatically:
- Device information (browser type, screen size, operating system)
- Usage data (search queries, brands viewed, skin types selected, session timestamps)
- Login activity and session logs
- Application deployment fingerprint data
- Push notification subscription tokens (for web push alerts)
- Silent alert data (alert type, store location, timestamps, sender identity, responders)
- Inventory cycle count data (product quantities, expired, damaged, missing counts, barcode scans)
- Barcode/UPC data scanned via device camera
Payment information:
Payment details (credit card numbers, billing addresses) are collected and processed directly by Stripe, Inc. We do not store, access, or process credit card numbers on our servers. See Stripe's Privacy Policy for details.
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Providing the Service | Name, email, PIN, store info |
| Staff authentication | Email, PIN, store access code |
| Usage analytics and reporting | Search data, session logs, device info |
| Customer follow-up management | Customer name, return dates, notes |
| Billing and subscription management | Email, store name (via Stripe) |
| Service improvement | Aggregated usage patterns, brand demand data |
| Security and fraud prevention | Login attempts, device fingerprints, access code logs |
| Loss prevention alerts | Alert type, store section, staff name, timestamps, post-incident notes |
| Push notifications | Push subscription tokens, device identifiers |
| Inventory management | Product quantities, UPC codes, expired/damaged/missing counts, cycle count history |
| Communication | Email (welcome messages, support, updates) |
4. Data Storage and Security
Your data is stored on servers operated by Supabase, Inc. with infrastructure hosted in secure data centers. We implement the following security measures:
- Store-level data isolation — each store's data is separated from all other stores
- Two-step authentication (store access code + individual PIN)
- Encrypted data transmission (HTTPS/TLS)
- Instant access revocation for deactivated staff
- Full audit trail of all logins, searches, and actions
- Row-level security on database tables
5. Local Storage
The application uses your browser's localStorage to save your store access code and session information for convenience. This data stays on your device and is not transmitted to third parties. You can clear this data at any time through your browser settings.
The application also uses a service worker for offline functionality. Cached data is stored locally on your device and is used solely to enable the app to function without an internet connection.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share data with:
- Stripe, Inc. — for payment processing only
- Resend — for transactional email delivery (PIN delivery, welcome emails, notifications)
- Supabase, Inc. — for database hosting and edge function execution
- Firebase (Google) — for web hosting only, no personal data stored
We may also disclose information if required by law, court order, or government regulation.
7. Data Retention
We retain your personal information for as long as your store's subscription is active. Upon cancellation:
- Staff accounts are deactivated immediately
- Analytics and usage data are retained in anonymized form for service improvement
- Personal information (names, emails) is deleted within 90 days of subscription cancellation upon request
- Payment records are retained by Stripe per their retention policy
8. Your Rights Under PIPEDA
As a Canadian user, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate or incomplete information
- Withdrawal of consent — withdraw consent for data collection (note: this may impact your ability to use the Service)
- Deletion — request deletion of your personal information, subject to legal and contractual obligations
- Complaint — file a complaint with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, contact us at fastest.quotes@gmail.com. We will respond within 30 days.
9. Push Notifications
The Service uses web push notifications to deliver time-sensitive alerts to staff devices. Push notification subscription tokens are stored in our database and associated with your user account. These tokens are used solely for delivering alerts through the Service. You may revoke push notification permissions at any time through your browser settings. Revoking permissions will prevent you from receiving push-based alerts but will not affect other Service functionality.
10. Silent Alert Data
When a silent alert is triggered, the following information is collected and stored: the type of alert (suspicious activity, theft in progress, or distraction), the store section where the alert was triggered, the name and email of the staff member who sent the alert, the names of staff who responded, manager acknowledgment details, post-incident notes, and timestamps. This data is retained as part of the store's incident history and is accessible to store managers through the alert history panel.
11. Inventory and Barcode Data
The Service collects inventory data including product quantities, expired, damaged, and missing product counts, reorder thresholds, and UPC barcode codes. Barcode scanning uses your device camera locally — no images are stored or transmitted. Only the decoded UPC number is saved to the product record. Inventory reports generated by the Service contain aggregated store data and may be downloaded or shared by authorized staff.
12. Customer Data (Follow-Up System)
The follow-up system allows staff to save a customer's first name, last initial, preferred return date, and notes. We strongly recommend that staff do not enter full customer names, addresses, or other personally identifiable information. The data entered into the follow-up system is the responsibility of the subscribing store and its staff.
13. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to the account holder. The "Last updated" date at the top reflects the most recent revision.
15. Contact Us
For privacy-related questions or requests, contact:
ProBuilder Software
Port Hope, Ontario, Canada
Email: fastest.quotes@gmail.com