Privacy

Last updated October 31, 2026

This page says what Punchlyst collects, why, and who else sees it. Punchlyst is a side project run by one person, not a company. "We" just means me.

What we collect

• Your account. Your name, email and firm, and who is on your team.
• Your walks. The video and sound you record, the words we hear in it, photos, drawings, and the punchlist we make from them.
• Your contacts. The names, emails and phone numbers of the contractors and subs you send lists to.
• What contractors send back. Their replies, their fix photos, and when they opened a list.
• Messages. A record of each email and text we send for you.
• Basic logs. Things like your browser type and IP address, so we can keep the service working and safe.

How we use it

We use it to run Punchlyst: to make your punchlist, send it, show you what's fixed, sign you in, and fix problems. That's it.

We don't sell your data. We don't show ads. We don't use your videos or photos to train AI models, and the AI companies we use don't either.

Text messages

We text a list to a contractor or sub only when a Punchlyst user sends it to them. We also text sign-in codes. We never use phone numbers for marketing, and we never share or sell them to anyone for their marketing.

Reply STOP to any text to stop getting them. Reply HELP for help. Message and data rates may apply.

Who else sees it

We use a few companies to run Punchlyst. They only get what they need to do their job for us:

• Vercel hosts the app and stores your videos and photos.
• Turso hosts our database.
• Deepgram turns the sound from your walk into words.
• Anthropic (Claude) turns those words, and a few photos from the walk, into punchlist items.
• Twilio sends texts. Resend sends emails.

The people you send a list to see the items, photos and notes you sent them. A sub sees only their own items. Shared links stop working after 90 days, or sooner if you turn them off. We may also share data if the law makes us.

Cookies

We use cookies only to keep you signed in, and to remember a contractor who has already confirmed who they are. We don't use tracking or ad cookies.

How long we keep it

We keep your data while your account is open. Ask us to delete your account or a project and we'll delete it within 30 days, except what the law says we must keep.

Your choices

You can ask to see, fix, download or delete your data. If you're a contractor who got a list, you can ask us to delete your info too. Email hello@punchlyst.app.

Keeping it safe

Data is encrypted when it moves and when it's stored. Videos and photos are private: only your team and the people you send a list to can see them. No system is perfect, and we'll tell you if something goes wrong that affects you.

Kids

Punchlyst is for work. It's not for anyone under 16.

Changes

If we change this page in a big way, we'll email you first.

Questions

Email hello@punchlyst.app.