Who we are
PaintBoss is operated in New Zealand by Andre Lingman trading as PaintBoss (NZBN 9429049604962). Our Privacy Officer can be contacted at admin@paintboss.co.nz.
Written to be clear and practical
These policies explain how PaintBoss operates, protects information and supports the people and businesses using the platform.
Information we collect
Account and organisation details, customer and contractor contact information, job addresses, job descriptions, photos and files, time and travel records, costs and invoices, health and safety records, marketplace applications, messages, support requests, login and security records, and information supplied through connected services.
We do not ask for or store online-banking passwords. Card details are entered into and handled by Stripe rather than PaintBoss.
Why we collect it
We use information to provide and secure PaintBoss, operate business accounts, manage jobs and marketplace listings, create records and documents, deliver notifications, support users, prevent abuse, improve the service, meet legal obligations and perform actions a business administrator requests. We only collect information reasonably necessary for those purposes.
Business responsibilities
Each organisation controls the business records it enters and decides which authorised users may access them. Business administrators must have authority to provide customer, contractor, employee and job-site information and must keep user permissions current.
Services and disclosure
Information may be processed by contracted hosting, email, security, payment, accounting, storage, maps, transcription and artificial-intelligence providers where needed to provide enabled features. Current examples include Xero, Google services, Stripe and Cloudflare. PaintBoss does not sell personal information.
Some providers may process information outside New Zealand. PaintBoss will use contractual, technical or other safeguards required by New Zealand privacy law and will describe material subprocessors before activating paid public business accounts.
Security
PaintBoss uses access controls, business account separation, password hashing, multi-factor authentication for staff users, encrypted integration credentials, private file storage, audit records, backups and monitoring. No internet service can guarantee absolute security. Users must protect their credentials and promptly report suspected misuse.
Retention and deletion
Business records are retained while needed to provide the service, meet contractual or legal obligations, resolve disputes and maintain required safety and financial records. Short-lived chat records are normally removed after six months. Deleted business accounts will enter a documented export and deletion process before paid public business accounts are activated; backups expire through their retention cycle rather than being edited in place.
Access and correction
You may ask for access to or correction of personal information PaintBoss holds about you by contacting admin@paintboss.co.nz. We may need to verify your identity. Business records may also need to be handled through the organisation that controls the business.
Privacy incidents and complaints
Report a suspected privacy or security incident to admin@paintboss.co.nz. PaintBoss will assess, contain and document it and will notify affected people and the Office of the Privacy Commissioner where required. You may also complain directly to the New Zealand Office of the Privacy Commissioner.
Changes
Material changes will be published with a new version date. Where a change materially affects existing business account use, PaintBoss will provide notice and request renewed acceptance when appropriate.