Data processing summary

Effective date: to be set at launch.

This page summarises how PoolSketch handles personal data on behalf of builders, and who helps us do it. For the full picture read the Privacy policy.

Roles

For the customer details a builder enters into designs, the builder decides why and how the data is used (the "controller"), and Tegminestar LLC processes it on the builder's behalf (the "processor" or "service provider"). For account, billing and usage data about the builder's own staff, Tegminestar is the controller.

What we process, and what we do not

Data	Whose	Stored where
Email, name, phone	Builder staff	Neon database
Customer name and address inside designs	Homeowners, entered by builders	Neon database
Design layouts, branding, status	Builder	Neon database
Usage events without customer content	Builder staff	Neon database
Anonymous page-speed numbers and website visit counts (no name, account, cookie or IP address; deleted after 90 days)	Anyone who opens the app or the website	Neon database
Share link snapshots and pictures	Builder and homeowner	Neon database and Cloudflare R2
Survey images, AI renders, videos	Builder and homeowner	Builder's device only, except an optional share link picture
Render or composite image, and an optional yard photo, for AI photo finish	Builder and homeowner	Sent to OpenRouter and its image models only when the builder asks. Never customer names or addresses
Description text and, for a change request, a summary of the design (piece names and sizes, no pictures), for Describe your pool	Builder	Sent to OpenRouter and its text model only when the builder presses Create. The text is not kept. Never customer names or addresses
Address text typed into Start from an address (often a customer's address), and the coordinates found from it	Builder, and the homeowner whose address it is	Sent from the device to our Worker, then to OpenStreetMap Nominatim (or, as a back-up for US addresses, the US Census geocoder). Only coordinates go on to OpenStreetMap Overpass and USGS. The answer is cached up to 30 days under a hash of the address text, with no account id. A per-company counter (no address) enforces a daily limit and is removed after 2 days. Never written to logs
Contact form messages	Anyone who writes to us	Emailed to our support inbox. Not stored in the database

Subprocessors

Provider	Purpose	What it receives	Region
Cloudflare	Website and app hosting, the API (Workers), DNS, email routing for our support address, file storage for share links (R2)	Everything that passes through the app and API, including design data in transit, and share link files	Global network. Data stored in R2 is held in a region chosen at set up (to be confirmed)
Neon	Postgres database	Accounts, designs, events, share links, billing identifiers	United States (AWS US East)
Resend	Sends sign-in codes, invitations, reminders and notifications, and delivers contact form messages to us	Recipient email address and the message	United States. To be confirmed
Stripe	Subscriptions, payments and sales tax (Stripe Tax), in Tegminestar's own Stripe account	Billing contact, plan, payment details entered on Stripe's pages	United States and Stripe's global network
OpenRouter	Routes AI photo finish requests to image models and Describe your pool requests to a text model	A render or composite image and an optional yard photo, or the description text and a design summary, only when the builder asks. No names or addresses	United States. To be confirmed
ByteDance (Seedream) and Google (Gemini), through OpenRouter	Make the AI photo finish image	The same image, passed on by OpenRouter	Set by each provider. To be confirmed
OpenStreetMap Foundation (Nominatim, Overpass)	Address search and building outline, for Start from an address	The address text (Nominatim only), then coordinates. No names, no account ids, a User-Agent naming PoolSketch. Independent recipient: it keeps its own logs under its own policy (https://osmfoundation.org/wiki/Privacy_Policy)	Europe and elsewhere, set by the Foundation
US Census Bureau	Back-up address search for US addresses	The address text, only when Nominatim finds nothing. Public-domain service	United States
US Geological Survey (USGS)	Ground elevation (3DEP) for a slope hint, and optional aerial imagery (National Map)	Coordinates only	United States

OpenStreetMap, the Census Bureau and USGS are independent recipients, not subprocessors acting only on our instructions. We list them so the builder can see where an address goes. Building data is (c) OpenStreetMap contributors, ODbL (https://www.openstreetmap.org/copyright).

We will update this list before adding a new subprocessor that handles customer data, and tell account owners by email.

Safeguards

HTTPS in transit.
Row-level security keeps each company's rows apart.
Restricted database role used by the application.
Hashed sign-in codes.
Access by Tegminestar staff limited to what is needed for support and operations, with account changes recorded in an audit log.
A written agreement with each subprocessor, using their standard terms (to be checked by counsel).

Retention, return and deletion

Retention periods are in the Privacy policy. A builder can delete their account in the app or by email, and can ask for an export of designs before deleting. Deleting your account in the app removes the data from our live database at once. A company we mark deleted for you (for example by email request) is removed after 30 days. Provider backups and logs age out on their own schedules, which we do not control. Subprocessors delete on the schedule in their own terms.

Requests from homeowners

A homeowner who asks us about their details should be sent to the builder who collected them. If a builder asks us to help, we will answer within a reasonable time.

Incidents

We will tell affected account owners without undue delay after we confirm a breach of their data, and give what we know so they can meet their own duties.

Contact

info@tegminestar.com