Privacy policy

Who this covers

Staff users: people a contracting company invites to use Bullet Train.

Customers of those companies: homeowners and other people whose details a company keeps in Bullet Train, or who use a booking or signing page a company sends them.

For customer information, the contracting company decides what is collected and how it is used. Bullet Train stores and processes it on that company’s behalf. Questions about that information are best sent to the company you dealt with; we will help them answer.

Information we collect

Account information: your name, email address and, if you sign in with Google, your Google profile picture. If you use a password, we store only a secure hash of it, never the password itself.

Business information a company enters: customer names, addresses, phone numbers, email addresses, job details, photos, measurements, estimates, contracts and notes.

Usage and device information: the pages and features used, error reports, the device and browser type, and IP address, so we can keep the service secure and working.

Signing in with Google

If you choose “Sign in with Google”, Google shares your name, email address and profile picture with Bullet Train. We use them only to sign you in, show who you are inside the app, and connect you to the company that invited you.

We do not request access to your Gmail, Calendar, Drive or contacts, and we do not use Google user data for advertising.

Bullet Train’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

To provide the service: sign-in, storing and showing a company’s records, sending the messages a company asks us to send, and generating documents such as estimates and contracts.

To keep it secure and reliable: detecting abuse, investigating errors, keeping audit records of important changes, and backups.

Some features use artificial intelligence to help staff, for example drafting a message or reading a document. That processing happens on our servers through our AI provider, a person at the company reviews the result before it reaches a customer, and the provider may not use the data to train its models.

We do not sell personal information and we do not use it for advertising.

Who we share it with

Service providers that run parts of Bullet Train for us, under contracts that limit their use of the data to providing their service: database and file hosting, web hosting, background job processing, caching, email delivery, error monitoring and AI processing.

The company you work for or deal with, which controls its own records.

Authorities, when the law requires it, or to protect the rights and safety of people using Bullet Train.

A buyer or successor, if Bullet Train is sold or reorganised, under the same protections described here.

How long we keep it

We keep information for as long as the company using Bullet Train has an account. Deleted records stay recoverable for 90 days so mistakes can be undone, and are then removed. Backups roll over on a regular schedule.

Some records, such as signed contracts and audit logs, may be kept longer where the law or the company’s obligations require it.

Security

Each company’s data is kept separate from every other company’s and is checked on every request. Data is encrypted in transit and at rest, sign-in tokens are stored securely on your device, and access by our own staff is limited and recorded.

No system is perfectly secure. If a breach affects your information, we will tell the affected company and, where the law requires, you.

Your choices and rights

You can ask to see, correct or delete your information, or ask how it is used, by emailing us. If the information belongs to a contracting company’s records, we will pass the request to that company and help them respond.

Depending on where you live, you may have further rights under local law; we will honour them.

Children

Bullet Train is a business tool and is not meant for children under 16. We do not knowingly collect information from them.

Changes to this policy

If we change this policy we will update the date at the top, and tell staff users in the app or by email before a significant change takes effect.

Contact

Questions or requests: hello@bullettraincrm.com.