Legal

Privacy Policy

Effective May 28, 2026

Summary in plain English

Pull Different is the operations platform behind your sports-card business. We collect the data your shop generates — inventory, orders, customers, financials — so the platform can do its job. We do not sell that data, we do not share it with advertisers, and we do not use one tenant's data to power another tenant's experience.

Who we are

Pull Different Technologies (“we”, “us”) operates the Pull Different platform at pulldifferent.io. Reach us at hello@pulldifferent.io for any privacy question.

What we collect

  • Account data — email, name, role, password (hashed), authentication factors.
  • Operational data your shop creates — inventory, orders, customers, vendors, purchase orders, returns, stream schedules, financial records.
  • Integration data — credentials and webhook secrets for the third-party services you choose to connect.
  • Usage telemetry — pages visited, API calls, timestamps, error logs. Used to keep the platform reliable.
  • Billing data — plan, invoices, payment status. Card details are handled by our PCI-compliant payment processor; we never see or store them.

How we use it

  • Run the features you signed up for.
  • Sync data to/from the third-party channels you connect.
  • Send transactional email — receipts, security alerts, support replies.
  • Aggregate, anonymized analytics so we can prioritize what to build next. Never tied back to your business.
  • Comply with tax, fraud, and legal obligations when we have to.

Who sees your data

Your tenant's data is visible to: (1) members of your tenant (per the roles you grant them), (2) a small number of Pull Different Technologies staff who need it to operate the platform or help you with support, and (3) the third-party services you explicitly connect.

We do not sell data. We do not use one tenant's data to improve another tenant's experience.

Service providers

We rely on a small number of vetted service providers to run the platform — cloud hosting, database infrastructure, payment processing, email delivery, and network security. Each provider is bound by confidentiality and data-protection obligations, and we share only the data needed for them to perform their function.

Retention + deletion

We keep operational data for as long as your tenant is active. Cancel your account and we delete the tenant within 30 days; some data we're required to retain for tax/legal reasons (invoices, audit logs) for up to 7 years. Email us to request earlier deletion of any record we're not legally required to keep.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. Email hello@pulldifferent.io and we'll respond within 30 days.

Changes to this policy

We'll update this page when something material changes and notify active users by email. Continued use of the platform after a change means you accept the updated policy.