What we collect, and who gets to see it.
- Your pricing is yours. We do not sell it, rent it, or hand it to anyone for advertising.
- Your numbers are never pooled with another shop's. One shop, one database.
- If you connect QuickBooks, we read and write only the accounting records needed to raise an invoice.
- Ask us to delete your account and we do it within 30 days, with no charge and no retention clause.
1. Who we are
Vinyl Pig is quoting and job software for sign shops, operated by Group of Pigs LLC, 418 Broadway Suite N, Albany, New York 12207. For anything in this policy, write to hello@vinylpig.com and a person will answer.
2. What we collect
Three kinds of information, and it is worth keeping them separate in your head.
Account information
Name, work email, password hash, and if you turn it on, a two-factor secret. We never store your password itself. We keep a log of sign-ins and administrative changes so you can see who did what.
Shop data
Everything you put into the product: materials and costs, supplier pricing, labor rates, overhead, estimates, jobs, and your customers' names, addresses, and contact details. This is the sensitive part. It is the part we work hardest to keep boring and contained.
Usage data
Which screens you open, which actions you take, and errors the app throws. We also record sessions, meaning a replay of the clicks and screens in your browser with all typed and displayed text masked, because watching where a real estimator gets stuck is the only reliable way to fix it. Password and reset pages are excluded from capture entirely.
3. What we do with it
Run the product, keep it up, bill you, answer you when you write in, and find out what is broken. That is the whole list. We do not build advertising profiles, we do not sell data, and we do not share it with anyone outside the companies named below.
We do not pool one shop's pricing to inform another shop's quotes. If your rates are your edge, they stay your edge. And pushing an invoice to QuickBooks is a direct, deliberate action a person takes in the app — never something that happens on its own.
4. Who else touches it
We use these companies to run the product. Each one gets the minimum needed to do its job, and each is contractually barred from using it for anything else.
| Company | What it does | What it sees | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, backups, file storage | Everything stored in your account | United States |
| Intuit | QuickBooks Online, only if you connect it | Customers and invoices you push | United States |
| Microsoft | Sending estimate emails from your own mailbox | The estimate and the recipient address | United States |
| PostHog | Product analytics and error tracking | Pages visited, actions taken, session recordings with all text masked | United States |
| Resend | Account email: password resets and invites | Your name and work email | United States |
| Slack | Operational alerts to the operator | Error summaries and system status, no shop records | United States |
| Google Analytics | Page-view analytics | Pages visited, no shop records | United States |
Beyond that, we disclose data only when the law requires it, and we will tell you first unless we are legally barred from doing so. If the business is ever sold, your data moves with it under this same policy, and you get notice before anything changes.
5. QuickBooks
Connecting QuickBooks is optional and off until you authorize it. When you do, you approve the connection inside Intuit, not here. We never see or store your Intuit password.
We request one scope, accounting. Within it we read your customer list so an invoice lands against the right customer, and we write customers and invoices you choose to push. We do not read your tax settings, ledger, balances, or reports back into Vinyl Pig, and we do not request payments, payroll, or banking access.
The connection is held as an OAuth token on our server, encrypted at rest. It is never sent to your browser and never shared with another customer. Disconnect from inside Vinyl Pig and we revoke the token with Intuit and delete our copy immediately. If you disconnect from the Apps page in QuickBooks instead, Intuit revokes our access at once and we delete our stored copy the next time we try to use it. Records already written to your QuickBooks stay in your QuickBooks, where they belong to you.
6. How long we keep it
Shop data lives as long as your account does, because a quote you wrote in 2024 is what makes the 2027 quote accurate. Usage data and session recordings are kept while they are useful for fixing and improving the product. We take nightly backups, stored encrypted.
Close your account and we delete your data within 30 days, and the backup copies age out on the normal backup rotation after that. Ask for a copy first and you get one, in a format you can open without us. We do not hold your pricing history hostage to keep you subscribed.
7. How it is protected
Traffic runs over TLS. Each shop's records live in a separate database, so there is no query that can cross from one customer to another. Access is limited to the people who operate the service, two-factor authentication is available on every account and we recommend it for anyone with admin rights, and administrative actions are logged.
No one can honestly promise a breach will never happen. What we can promise is that if one does, and it affects your data, you hear it from us directly and quickly, with what we know and what we are doing about it.
8. Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, or ask us to stop processing it. Write to hello@vinylpig.com. We answer within 30 days and we do not charge for it. Residents of California, Colorado, Connecticut, Virginia, and other states with privacy statutes have these rights by law. We extend the same rights to everyone, because running two standards is more work than running one good one.
Your customers' details reach us because you put them there. For that data you are the controller and we are the processor. We act on your instructions, not theirs, so if one of your customers asks about their information, send them to you and we will support you in answering.
9. Children
This is software for running a sign shop. It is not for anyone under 18 and we do not knowingly collect their information.
10. Changes
When this policy changes we update the date at the top. If a change actually affects how your data is handled, we email you before it takes effect. Silent rewrites are a bad habit and we are not going to pick it up.