Legal
Privacy Policy
Effective May 28, 2026
Summary in plain English
Pull Different is the operations platform behind your sports-card business. We collect the data your shop generates — inventory, orders, customers, financials — so the platform can do its job. We do not sell that data, we do not share it with advertisers, and we do not use one tenant's data to power another tenant's experience.
Who we are
Pull Different Technologies (“we”, “us”) operates the Pull Different platform at pulldifferent.io. Reach us at hello@pulldifferent.io for any privacy question.
What we collect
- Account data — email, name, role, password (hashed), authentication factors.
- Operational data your shop creates — inventory, orders, customers, vendors, purchase orders, returns, stream schedules, financial records.
- Integration data — credentials and webhook secrets for the third-party services you choose to connect.
- Usage telemetry — pages visited, API calls, timestamps, error logs. Used to keep the platform reliable.
- Billing data — plan, invoices, payment status. Card details are handled by our PCI-compliant payment processor; we never see or store them.
How we use it
- Run the features you signed up for.
- Sync data to/from the third-party channels you connect.
- Send transactional email — receipts, security alerts, support replies.
- Aggregate, anonymized analytics so we can prioritize what to build next. Never tied back to your business.
- Comply with tax, fraud, and legal obligations when we have to.
Who sees your data
Your tenant's data is visible to: (1) members of your tenant (per the roles you grant them), (2) a small number of Pull Different Technologies staff who need it to operate the platform or help you with support, and (3) the third-party services you explicitly connect.
We do not sell data. We do not use one tenant's data to improve another tenant's experience.
Service providers
We rely on a small number of vetted service providers to run the platform — cloud hosting, database infrastructure, payment processing, email delivery, and network security. Each provider is bound by confidentiality and data-protection obligations, and we share only the data needed for them to perform their function.
Retention + deletion
We keep operational data for as long as your tenant is active. Cancel your account and we delete the tenant within 30 days; some data we're required to retain for tax/legal reasons (invoices, audit logs) for up to 7 years. Email us to request earlier deletion of any record we're not legally required to keep.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. Email hello@pulldifferent.io and we'll respond within 30 days.
Changes to this policy
We'll update this page when something material changes and notify active users by email. Continued use of the platform after a change means you accept the updated policy.