Privacy Policy
We respect your privacy. This policy explains what information we collect, how we use it, and the choices you have.
Effective Date: March 1, 2026
1. Overview
Pool Canvas ("Company," "we," "us," or "our") operates the Pool Canvas website at poolcanvas.io, web application, mobile application, embedded widgets, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Pool Canvas, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Information You Provide Directly
2.2 Information Collected Automatically
2.3 Information from Third Parties
If you access Pool Canvas through a pool builder's website, we may receive information from that builder such as their company name and your referral source. We may also receive data from analytics providers, advertising partners, and social media platforms in accordance with their privacy policies.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide the Service: Generate AI pool visualizations, save and manage your designs, and deliver the core functionality of Pool Canvas
- Lead Qualification: When you save a design, share your contact and project information with the pool builder whose website you accessed Pool Canvas through (or with builders in your area if using poolcanvas.io directly)
- Improve the Service: Analyze usage patterns, train and refine our AI models, debug issues, and develop new features
- Communications: Send transactional emails (design confirmations, account updates), and with your consent, marketing communications about Pool Canvas
- Security & Compliance: Detect fraud, enforce our Terms, and comply with legal obligations
- Analytics: Understand how users interact with the Service to improve design and user experience
4. Sharing & Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Pool Builders
When you use Pool Canvas on a builder's website and save a design, your contact and project information is shared with that builder. When you use poolcanvas.io directly, your information may be shared with builders in your geographic area.
4.2 Service Providers
We share data with trusted third-party vendors who help us operate the Service, including cloud hosting (Google Cloud Platform), AI processing providers, payment processors, email delivery services, and analytics tools. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
4.3 Legal Requirements
We may disclose your information if required to do so by law, in response to a valid legal process (such as a subpoena or court order), to protect our rights or property, to prevent fraud, or to protect the safety of our users or the public.
4.4 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your personal information.
5. AI Processing & Your Images
When you upload a backyard photograph, it is processed by our AI systems to generate pool design visualizations. Here is what you should know:
- Processing: Your photos are transmitted to our servers and processed using AI image-generation technology hosted on secure cloud infrastructure
- Model Training: We may use anonymized or de-identified versions of uploaded images and generated designs to improve our AI models. You can opt out of this by contacting us
- Storage: Uploaded photos and generated designs are stored on our servers for as long as you maintain an account or as described in Section 7 (Data Retention)
- No Facial Recognition: We do not use facial recognition technology. If people appear in uploaded photos, we do not identify them
- Location from Photos: We do not extract GPS or EXIF location data from uploaded photographs
6. Cookies & Tracking Technologies
We use cookies and similar technologies to operate and improve the Service.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained while your account is active and for up to 12 months after deletion request
- Uploaded photos & designs: Retained while your account is active. Deleted within 90 days of account deletion
- Lead information shared with builders: Once shared, it is subject to the builder's own data retention policies
- Analytics data: Retained in aggregated or anonymized form indefinitely
- Legal obligations: We may retain certain data longer if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution)
8. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security assessments. Our infrastructure is hosted on Google Cloud Platform, which maintains SOC 2, ISO 27001, and other security certifications.
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.
9. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request that we delete your personal information, subject to legal obligations
- Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the link in any email or by contacting us
- Opt-Out of AI Training: Request that your uploaded photos not be used for AI model improvement
- Data Portability: Request your data in a structured, machine-readable format
- Withdraw Consent: Where processing is based on consent, withdraw that consent at any time
To exercise any of these rights, contact us at support@poolcanvas.io. We will respond to requests within 30 days.
10. Children's Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.
11. Third-Party Links & Embedded Use
The Service may contain links to third-party websites or be embedded on third-party pool builder websites. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policy of any website you visit or any builder whose site hosts the Pool Canvas tool.
12. State-Specific Privacy Rights
California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, opt out of the sale or sharing of your personal information, and not be discriminated against for exercising your rights. We do not sell personal information as defined under the CCPA. To submit a request, email support@poolcanvas.io with the subject line "California Privacy Request."
Virginia, Colorado, Connecticut, and Other State Privacy Laws
Residents of states with applicable consumer privacy laws may have additional rights, including the right to access, correct, delete, and opt out of targeted advertising or profiling. Contact us to exercise these rights.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where required, notify you by email or through a prominent notice on the Service. Your continued use after changes are posted constitutes acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: