Privacy Policy
Last updated: August 16, 2026
This policy explains what information Pydak collects, why, and what happens to it. Pydak is a CRM for contractors, operated by Tim DiSabatino in Monterey, California. It's written in plain language on purpose. If anything is unclear, email hello@pydak.com and I'll answer.
Two different kinds of information
There are two kinds of personal information involved in Pydak. They function differently and it's important to understand the distinction.
Information about you. Your name, email address, business name, and how you use the service. You gave me this directly, I decide what to do with it, and this policy covers all of it.
Information about your customers. The contacts, jobs, notes, and addresses you enter about the people you do work for. That data is yours. I store and process it on your behalf so the software can do its job, and nothing more. You decide what goes in, what it's used for, and when it gets deleted. This policy describes how I safeguard it, but you're the one responsible for it, including having the right to collect it in the first place. If your business needs a formal data processing agreement covering that relationship, email me.
What I collect
When you sign up: your name, email address, business name, and a password. Passwords are stored hashed, so I never see or store the actual password.
When you use the service: the contact, deal, job, and activity records you create. Basic technical information that comes with any web request, including IP address, browser type, and the pages you visit inside the app.
When something breaks: error reports, which can include the URL, the action being attempted, and technical details about the failure. These sometimes contain fragments of the data involved.
On the marketing site: standard analytics about visits to www.pydak.com. This is separate from the app and covered in the cookies section below.
What I don't collect: payment information, because there's no payment processing during early access. I don't buy personal data from third parties, I don't combine your data with data from outside sources, and I don't run advertising pixels or tracking scripts on the marketing site beyond the analytics described below.
Why I collect it
To create and maintain your account, to run the software you're using, to send you transactional email like signup confirmations and password resets, to diagnose problems when something goes wrong, to keep the service secure and prevent abuse, and to reply when you contact me. On the marketing site, to understand which pages people visit and where they came from.
I don't sell personal information. I never have and I have no plans to. I don't use your data or your customers' data to build anything for anyone else.
Who else touches your data
Running Pydak means relying on a few service providers. Each one receives only what it needs to do its part.
- A cloud hosting provider for the servers and database, located in the United States
- A deployment platform for server configuration
- An email service for transactional messages like confirmations and password resets, which processes recipient email addresses
- A network provider for DNS, TLS, and content delivery
- An error monitoring service that receives technical reports when something fails
- An analytics provider (Google Analytics) for the marketing site only, not the application
None of them use your data for their own purposes. If you need specifics, I am happy to provide information on any of them if you ask. If your business needs a data processing agreement listing them, please email me.
Cookies
Inside the app at app.pydak.com, the only cookies are the ones needed to keep you logged in and to protect against request forgery. They're strictly necessary, they're not used for tracking, and there's no analytics running in the app.
On the marketing site at www.pydak.com, Google Analytics sets cookies to measure visits. If you'd rather it didn't, you can block cookies in your browser settings, use Google's opt-out browser add-on, or use any of the common content blockers, which stop it. Nothing on the site breaks if you do.
Fonts are self-hosted, so loading a page here doesn't send a request to any third-party font service.
How long I keep it
Account information is kept while your account is open. If you close your account or ask me to delete your data, I remove it from the live system, and copies in routine backups age out on their own schedule rather than being extracted individually. Error reports and analytics data expire according to the retention settings at our vendors.
If you want your data gone sooner or in a specific way, email me and we'll work it out.
How it's protected
Traffic between your browser and Pydak is encrypted with TLS. Passwords are hashed rather than stored. Each account's data is separated so that one account cannot access another's records. Access to production systems is limited to me.
Being straight with you about the limits: Pydak is a one-person operation in early access. There is no SOC 2 report, no third-party security audit, and no formal certification. I take this seriously and build carefully, but I'm not going to claim assurances I haven't earned. If a breach affected your data, I would tell you promptly and tell you what I knew.
Your choices
You can ask me at any time to:
- Give you a copy of the data associated with your account
- Correct anything that's wrong
- Delete your account and its data
- Tell you specifically what's held about you
Email hello@pydak.com. I'll respond within thirty days and usually much sooner. I may need to confirm who you are before acting on a request, which is a protection for you rather than an obstacle.
If you're a California resident, the CCPA, as amended by the CPRA, gives you rights to know, delete, correct, and opt out of sale or sharing of personal information. I honor those requests regardless of whether the law's thresholds formally apply to a business this size, and there's nothing to opt out of on sale or sharing because neither happens.
If someone's information is in a contractor's Pydak account and you want it accessed or removed, contact that business directly. They control that data and I act on their instructions. If you reach me instead, I'll pass the request along to them.
Children
Pydak is a business tool and isn't directed at anyone under 18. I don't knowingly collect information from children. If you believe a child's information has ended up here, email me and I'll remove it.
Changes to this policy
If this changes in a meaningful way, I'll update the date at the top, and for significant changes I'll let account holders know by email.
Contact
Questions, requests, or concerns about privacy: hello@pydak.com.