Privacy policy

Canvas Shop Board ("we") helps awning and marine canvas shops track their jobs and the canvas they store for customers. This page explains what we store and why. We don't sell your data and we don't show ads.

What we store

• Your account: your email address and a securely hashed password, handled by Amazon Cognito.
• Your shop's records: the shop name, your customers and their names, phone numbers, email addresses and notes, their boats and sites, every job with its stage, measurements, fabric, quote, dates, notes and pattern photos, the stored pieces with their tag numbers, shelf, condition and photos, and which login made each change.
• Customer logins: when a shop invites a customer to its portal, that customer's email and password are stored like any account, and the login is tied to the customer record the shop chose. A customer sees only their own jobs, the notes the shop marked visible, and their stored pieces.
• Page-view analytics: the page you visited, the referring site, your browser's user agent, rough location when available, and a one-way hash of your IP address that changes daily. We never store your raw IP address.
• Feedback you send us, with your email if you give it.
• Billing: payments are processed by Stripe. We store your Stripe customer and subscription IDs and your plan, never your card number.

Cookies

We use only first-party cookies: one to keep you signed in, and two random IDs that count visits and sessions. No third-party tracking or advertising cookies.

Who processes your data

Amazon Web Services (hosting, database, photo storage, sign-in), Stripe (payments) and Resend (email). Each processes data only to provide its service to us.

How long we keep it

Your shop's records stay until you delete them or ask us to close the account. Photos are deleted with the record they belong to. Analytics are kept in aggregate form for as long as they're useful.

Your choices

You can export your jobs, customers and stored pieces to CSV at any time. To get a copy of everything, correct something, or delete your account and shop data, contact us and we'll handle it within 30 days. A customer who wants their portal login removed can ask the shop or us.

Contact

Questions about privacy: use the feedback form.