This policy explains what Piknup collects, why, and who we share it with. Piknup is operated by Boltpath LLC, a New Mexico limited liability company. We try to keep this short, plain, and useful, but where the law requires specific phrasing we use it.
1.Who we are
Boltpath LLC operates Piknup. You can reach us any time at contact@piknup.com.
2.What we collect
Account data
Your name, business name, business email, phone number, service area, services offered, hours, pricing template, and emergency keywords.
Voice samples
Past messages you paste or upload so Piknup's AI can match your tone in replies.
Call and SMS data
Inbound caller phone numbers, full conversation transcripts, and qualification data extracted from each conversation: issue, urgency, address, customer name, and preferred window.
Payment data
Handled by Paddle as Merchant of Record. Boltpath never sees or stores your full card number. Paddle shares back only your subscription status, billing email, and country.
Usage data
Sign-ins, dashboard interactions, feature use, and basic technical telemetry (IP address, user agent, page views).
3.How we use it
We use the data above to operate the service (text back callers, run the AI conversation, push leads to your dashboard, send the daily 7am SMS recap), to manage billing and subscriptions through Paddle, to send transactional email, to provide support, and to improve the AI on aggregated, anonymized data only.
4.A2P 10DLC and TCPA
Piknup follows US carrier A2P 10DLC requirements. You are the sender of record for every SMS Piknup sends on your behalf. During onboarding, Piknup registers your brand and campaign with The Campaign Registry (TCR) so carriers do not silently block your messages. Replies to inbound missed callers operate under implied consent because the customer called you first. STOP and HELP keywords are honored automatically within the carrier-required window.
5.Who we share data with
Only the vendors who help us run the service:
- Paddle(paddle.com) is the Merchant of Record for every Piknup subscription. It handles checkout, billing, sales tax and VAT collection, refunds, and chargeback processing on Boltpath's behalf. See Paddle's Privacy Notice.
- Twilio (twilio.com) provides the SMS infrastructure that sends and receives the actual text messages, and the voice infrastructure for emergency call-backs to your phone.
- Anthropic(anthropic.com) provides the AI that generates replies and extracts lead data. Per Anthropic's API policy, customer data sent to the API is not used to train their models.
- Resend (resend.com) sends transactional email (welcome, password reset, daily recaps).
- Vercel (vercel.com) hosts the application and runs the edge / serverless infrastructure.
- Cloudflare (cloudflare.com) provides DNS and inbound email routing for piknup.com.
We never sell your data, never share it with advertisers, and never share it beyond the vendors above.
6.Data retention
We keep account data while your account is active and for 90 days after cancellation, in case you come back. We keep conversation and call data for 12 months unless you ask us to delete it sooner. Paddle keeps payment and transaction records under its own policies and applicable financial-record-keeping law.
7.Your rights
You can request access, export, correction, or deletion of your data at any time. Email contact@piknup.com and we will respond within 30 days. For payment-specific data (invoices, transaction history, billing addresses), Paddle is the data controller and you can request the same from Paddle directly. CCPA and GDPR rights are honored regardless of where you are based.
8.Children's privacy
Piknup is built for licensed contractors. It is not directed to anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has provided data to Piknup, contact us and we will delete it.
9.International transfers
Most data is processed in the United States, where Boltpath, Vercel, Anthropic, Twilio, Resend, and Cloudflare operate. Paddle is headquartered in the United Kingdom and processes payment data there and in the European Union. EU and UK customers acknowledge transfer between these jurisdictions under the standard contractual clauses Paddle uses.
10.Security
We hash passwords with Argon2, encrypt traffic with TLS, and use SOC 2-aligned vendors (Twilio, Vercel, Paddle, Cloudflare) for critical infrastructure. You are responsible for keeping your dashboard credentials secure and for any access from your end.
11.Cookies and tracking
We use Vercel Analytics for first-party usage data only. No third-party advertising cookies.Paddle's checkout may set its own cookies during the payment session; those are governed by Paddle's privacy notice.
12.Changes to this policy
We may update this policy. For material changes, we will email you at least 14 days before the change takes effect. Continued use of Piknup after the effective date counts as acceptance.
13.Contact
Questions or data requests? Email contact@piknup.com.