Privacy policy
Effective 17 October 2026 · Version 1.0 (waitlist)
Burlly Inc. built this site and we’re building the Burlly app. Right now the only thing this site asks you for is an email address, so this is a short policy. It gets longer when the app opens, on this same page, and the version number moves with it.
1. Who’s responsible
Privacy Officer, Burlly Inc.
B-4103 Longview Drive, Saanich, BC V8N 2K8, Canada
privacy@burlly.com
Write or email for anything here: a question, a copy of what we hold about you, a correction, to withdraw your consent, or to complain.
2. What we collect
Your email address, when you join the waitlist. It’s the only way we can tell you when Burlly opens.
Where you came from. With your email we store which page you landed on first, the site that referred you, and any campaign tag that was in the link. If you got here by scanning one of our cards, we store that too, as a short tag like “card”. The tag sits in your browser until you submit the form, and nothing is stored on our side until you do.
What you agreed to. We keep a record of the wording you saw and the time you joined, because the law asks us to be able to show it.
Server records. Our host logs the usual web-server details for every request: the IP address, the browser’s user agent, the page, and the region that served it. That’s how any website stays up and stays safe. When you load the page or submit the form, we also use your IP address to check that you’re outside Quebec, where Burlly isn’t available. We don’t store the result.
If you unsubscribe and tell us why. The page you land on after unsubscribing asks why you left. Answering is optional. If you do, we keep the reason you picked and anything you typed, stored apart from your email address and not linked to it.
If you reply or write to us. We keep the emails you send us, so we can answer you.
That’s the whole list. There are no analytics scripts, no advertising pixels, no social trackers, and no third-party embeds on this site. The fonts are served from here, so loading a page doesn’t tell anyone else you visited.
3. What we do with it
We email you about Burlly, and we look at which pages and links brought people in so we know what’s worth writing. We read why people unsubscribe and what they write to us, to make Burlly better. We don’t sell personal information, and we don’t share it for anyone else’s advertising.
4. Who else handles it
| Who | What they do for us | Where |
|---|---|---|
| Supabase | Runs the database that holds the waitlist | Canada (Montreal) |
| Vercel | Hosts and serves the site | Our code runs in Canada (Montreal). Pages are served from whichever of Vercel’s locations is closest to you, worldwide, and Vercel’s own operations are in the United States |
| Resend | Sends our email | United States |
| Google (Workspace and Drive) | Holds our email, including anything you send us, and our encrypted nightly backups, which include the waitlist | United States |
| Backblaze B2 | Holds a second copy of our encrypted nightly backups | United States |
Supabase
What they do for usRuns the database that holds the waitlist
WhereCanada (Montreal)
Vercel
What they do for usHosts and serves the site
WhereOur code runs in Canada (Montreal). Pages are served from whichever of Vercel’s locations is closest to you, worldwide, and Vercel’s own operations are in the United States
Resend
What they do for usSends our email
WhereUnited States
Google (Workspace and Drive)
What they do for usHolds our email, including anything you send us, and our encrypted nightly backups, which include the waitlist
WhereUnited States
Backblaze B2
What they do for usHolds a second copy of our encrypted nightly backups
WhereUnited States
While information is outside Canada it’s subject to the laws of the country it’s in, which can include lawful access by that country’s courts and authorities. If you want the written detail of our arrangements with these providers, ask and we’ll send it.
5. How long we keep it
Your email address stays until you unsubscribe or ask us to remove you. The record of your consent stays for seven years after the last email we sent you, because that’s how long we may need to show it. Your unsubscribe we keep indefinitely, since it’s the list that stops us emailing you again; it survives a deletion request on purpose. Unsubscribe reasons are deleted after twelve months. Emails you send us are kept only as long as they’re useful for answering you. Server records live about a day in our host’s logs, and the encrypted backups run on a ninety-day cycle.
6. Your choices
Every email has a one-click unsubscribe, it works without signing in, and we act on it right away.
Under Canada’s PIPEDA and British Columbia’s Personal Information Protection Act you can ask us what we hold about you and for a copy of it, ask us to correct it, ask us to delete it, or withdraw a consent you gave us. Email privacy@burlly.com and we’ll answer within 30 days. If we need longer, we’ll tell you why. If you aren’t satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.
We don’t show a cookie banner, because there’s nothing here to consent to beyond what section 2 describes, and your browser can clear or block it any time.
7. If you have a Burlly account
The app isn’t open to customers yet. The accounts that exist today belong to us and to the people testing it with us, and the emails the app sends carry a link to this page.
What the app holds, in categories: the business details a contractor enters, their clients and jobs, the quotes and invoices they create, and the documents their clients open through a link. Our email provider (Resend) sends those messages. An AI provider (Anthropic) processes the text and photos sent to the quote features; it’s prohibited by contract from training its models on that content and deletes what it receives within 30 days by default. Error monitoring (Sentry) runs inside the app, not on this site.
The full detail for all of that is being written now and lands on this page before the app opens to anyone outside our own testing. If you have an account today and want to know what we hold, email privacy@burlly.com and we’ll tell you.
8. Children
Burlly is a tool for businesses. This site isn’t aimed at children and we don’t knowingly collect personal information from them.
9. Changes
When this policy changes we move the version and the date at the top, and we keep the dated history below. If a change matters to you, we’ll say so rather than leave you to spot it.
History. v1.0, 17 October 2026: first published. Covers the waitlist, this website, and what the app holds while it’s closed.