Privacy

Cannonball Software LLC, Cape Coral, Florida. Last updated 25 October 2026.

This is what Cannonball keeps, why, and who helps us run it. "You" is the pool service company using Cannonball and the people it lets in. Your customers' details are in Cannonball because you put them there; you decide what goes in.

What we keep

• The people who sign in: name, email address and phone number.
• Your company's records: your customers' names, addresses, email addresses and phone numbers, their pools, water readings, chemicals added, photos, notes, quotes, invoices and payments.
• Where a technician is while the technician app records a route: the phone's location during the working day, so the office can see the route and the app can record arriving at and leaving each pool. With each position the phone also sends its battery level, whether it is charging and the app's version, so the office can see how the phone's battery held up over the day. A company can turn this off in Settings.
• Messages sent through Cannonball: the reports, emails and texts it sends, and replies that come back to it.
• When a customer opens what they were sent: when somebody opens a quote, an invoice or its pay page, or a service report from the link they were sent, Cannonball keeps when it was first and last opened and how many times, and shows it to the pool company that sent it. It counts a person opening the page in a browser, not a mail program checking the link, and nothing in the emails themselves is tracked.
• Card payments: handled by Stripe. We keep what was paid and when; we never see a full card number.
• The form on this site: your company name and email, and the phone number, counts and note you enter if you give them.
• Visits to this site: counted with Cloudflare Web Analytics, which pages are read, where visitors came from and how quickly the pages load, and with PostHog, which pages a visit went through and which buttons and links were pressed. Neither sets a cookie or keeps anything in your browser. PostHog tells one visit from another by a code it works out on its own servers from your internet address and browser, and keeps the code, not the address. Nothing you type into the form goes to PostHog, and Cloudflare says it does not collect or use visitors' personal data.
• The demonstration company: when somebody signed in to the demonstration, the sample company we give people to try Cannonball, uses its console, PostHog records how the screens are used, as a replay with every word on the screen and everything typed hidden. It notes the town a visit came from and keeps no internet address, and nothing is kept in the browser, so each visit is a replay of its own. A replay is deleted after 30 days. Cannonball's own staff are not recorded, and no other company's console is ever recorded.
• Ordinary technical logs that help us find and fix faults.
• When the console fails: if the console fails in your browser, it sends us a report of what went wrong: the error and where in the console it happened, the screens you had just opened and the requests the page had just made, the browser and the system it ran on, and who was signed in. Email addresses, phone numbers and the private parts of links are taken out before a report is kept. Reports come only to us, and we keep them for ninety days.

The phone apps

Cannonball has two apps, and this notice covers both. Neither shows advertising, and neither follows what you do in other apps or on other sites.

• Cannonball Pool Service is for a pool company's technicians, office and owner. From the phone it takes: where the phone is while a route is being recorded, as described above, and at the moment you check in or out of a pool or mark a door hanger as hung; the photos you take or choose for a visit or a job; what you enter, such as readings, chemicals, checklist answers and notes; and a token that lets us send that phone a notification. Your sign-in, your route and anything not yet sent are kept on the phone itself. The app can take a fix from us without a new download from the store: when it looks for one it sends the kind of phone, the app's version and a random number the app made for that install, which we do not keep. And when it opens it tells us, under your name, which version of the app the phone runs, which fix it has taken and the version of the phone's own system, so we can tell whether a fix has reached your phone. If the app fails, it sends us a report of what went wrong: the error and where in the app it happened, the screens it had just shown and the requests it had just made, the kind of phone, its system, memory and battery, the app's version, and who was signed in. Email addresses, phone numbers and the private parts of links are taken out before a report is kept. Reports come only to us, and we keep them for ninety days.
• My Pool by Cannonball is for a pool company's customers. Your pool company has already given us your name, address and email address. The app adds the email address you sign in with, which has to be one your pool company holds; a token that lets us tell your phone when a visit is finished; and anything you write to your pool company through it. It does not use your location, your camera, your photos or your contacts. Paying an invoice by card opens Stripe's page in your browser. If the app fails, it sends us a report of what went wrong: the error and where in the app it happened, the screens it had just shown and the requests it had just made, the kind of phone, its system, memory and battery, the app's version, and who was signed in. Email addresses, phone numbers and the private parts of links are taken out before a report is kept. Reports come only to us, and we keep them for ninety days.
• Cal on the watch, in Cannonball Pool Service on a Wear OS watch, is spoken to. What you say during a call goes to us and from there to Google's Gemini to be understood, and Cal answers in speech. The watch also tells us where it is when a call starts, so Cal knows which pool you are at, and how the call went for the watch (battery, memory and connection). A company can ask us to keep its technicians' calls with Cal, the recording and the words, to make Cal better. Each technician is told on the watch, and their calls are kept only after they agree there. Other calls are not kept. A kept recording is deleted after 90 days; the words stay with the company's records.
• Talk to Cal, in Cannonball Pool Service on an Android phone, is the same call as on the watch. What you say during a call goes to us and from there to Google's Gemini to be understood, and Cal answers in speech. The phone uses its microphone only while a call is open on its screen, and the call ends when the app is put away. It also tells us where it is when a call starts, so Cal knows which pool you are at, and how the call went for the phone (the kind of phone and how its sound played). Calls are kept as they are on the watch: only for a company that asks us to, and only after the technician agrees.
• Saying a request to Cal, in the office part of Cannonball Pool Service on an Android phone: the phone's own speech recognizer writes down what the owner or office says, on the phone itself where it can and otherwise through Google's, as the keyboard's microphone does, and only the words go to us and to Gemini, as typed words do. No sound comes to us. Cal's answer to a request that was said is read aloud by the phone's own voice, on the phone.

To have your own details removed, ask the pool company you work for or are a customer of, or ask us: deleting your data says how, and what is kept.

When Cal answers the phone

A company can have Cal answer its phone when nobody in the office can. Cal tells every caller at the start that the call is recorded.

• What we keep, for the company: the number the call came from, which customer it was when Cal can tell, when the call was and how long it lasted, the words both sides said, what Cal did (such as taking a request for a visit), and a recording of the call.
• A caller who asks not to be recorded is not: Cal stops, and the recording and the words of that call are thrown away. What Cal did for them is kept.
• Who hears it: Telnyx carries the call, and Google's Gemini hears what the caller says, to understand it, and speaks Cal's answers. The company's office reads its calls in Cannonball.
• How long: a recording is deleted after 90 days. The words and the rest stay with the company's records.

Cannonball's own demonstration number works the same way, and its calls are Cannonball's.

Google Sheets

A company can connect its Google account so that Cannonball keeps its customers, invoices, payments and price book (its price list, parts and jobs) up to date in a Google sheet in the company's own Google Drive. It is off until somebody at the company connects it in Settings and approves it on Google's own screen.

• What Cannonball can reach: the address of the Google account that was connected, and only the files the company uses with Cannonball, which is Google's narrowest permission for Drive. Cannonball makes one sheet. It cannot see or open anything else in the company's Drive.
• What it does with it: it writes the company's own lists into the sheet, as they change and every quarter of an hour, and reads the sheet's tab names and the first column of its own tabs, to find where its rows are after the sheet has been sorted. It also reads the price column of its Price list tab and the cost column of its Parts tab, so that a price or a cost the company changes in the sheet is shown in Settings for somebody at the company to accept or put back; nothing read from the sheet changes Cannonball until they accept it. It shows which Google account is connected in Settings. It uses nothing from Google for anything else.
• What it keeps: the Google account's address, the keys Google gives for the connection, stored encrypted, the sheet's name and link, a short fingerprint of each row it has written, so it can send only the rows that changed, and each price or cost changed in the sheet (or what was typed in its place) until the company accepts it or puts it back. It keeps no copy of what is in the sheet beyond that.
• Who else gets it: nobody. What Cannonball keeps from Google is held in its own database, which Cloudflare hosts for us, and goes nowhere else. It is not sold, not shared, not used for advertising, and not read by people at Cannonball, except to fix a problem the company has asked us to look at, or when the law requires it. The sheet itself belongs to the company and lives in its Google Drive, under its own agreement with Google; the company decides who it shares it with.
• Disconnecting: Disconnect Google Sheets in Settings deletes the keys, the fingerprints and any changes waiting to be accepted at once, and gives Cannonball's access back to Google. When another company on Cannonball is connected with the same Google account, the access stays for that company until it disconnects too, because Google takes it back from both at once. The sheet stays in the company's Drive as it last was. Access can also be removed from the Google account's own settings at any time.

Cannonball's use and transfer of information received from Google APIs keeps to the Google API Services User Data Policy, including its Limited Use requirements.

What we use it for

Only to run Cannonball for your company: routes, readings, reports, invoices, texts, your customers' own pages, support, and billing you for Cannonball. We do not sell any of it and we do not show advertising.

Who helps us run it

These companies handle data on our behalf, only for the part of the service they provide:

• Cloudflare: hosting, the database, stored photos, and counting visits to this site.
• PostHog: counting visits to this site and recording the demonstration company's console (above), sent through our own servers to its servers in the United States.
• Clerk: signing in.
• Stripe: card payments and billing you for Cannonball.
• Resend: sending email.
• Telnyx and Twilio: sending and receiving texts; Telnyx also carries the phone calls Cal answers.
• Google: maps, address lookup and drive times; notifications on the phone apps; and Gemini, an AI service, which reads what is typed to Cal, the assistant in the console and in the phone app, and hears what is said to Cal on the watch, in the technician app and on the phone line, to work out what is being asked.
• Intuit QuickBooks: only if you connect your QuickBooks, to keep your books in step.
• Google Sheets: only if you connect it, to keep your lists in a sheet in your own Google Drive (above).

How it is shared

Only with the companies above, and only the part each needs for its job: an email address and the message to the company that sends email, a phone number and the text to the companies that send texts, an address to Google to put it on a map, the words typed to Cal to Google's Gemini (the words only: the records Cal then reads or changes are not sent to Google), on the watch and in the technician app what is said to Cal, as sound, to Gemini with the day's stops and the visit being worked, and on the phone line what the caller says, as sound, to Gemini with the company's name, the number calling and, for a caller who is a customer, their name, their street and their service days, which Cal needs to answer, and to PostHog what a visit to this site or to the demonstration did, which it keeps without the visitor's internet address. It goes to them over encrypted connections, under their own terms, which allow them to use it only to provide their service to us. A card number goes from your customer's browser straight to Stripe and never reaches Cannonball.

We do not sell personal information and we do not share it for advertising. We give it to anyone else only when the law requires it, such as a court order, or when you ask us to. If Cannonball is ever sold or merged, the records pass to the new owner, who must keep to this notice.

How it is kept safe

• Every connection to Cannonball is encrypted: the console, the phone apps and your customers' pages all use HTTPS.
• The database and stored photos are held by Cloudflare and encrypted at rest (AES-256).
• Signing in is handled by Clerk, so Cannonball never sees a password. Card numbers are handled by Stripe and never reach Cannonball.
• Each company's records are kept apart: somebody signed in to one company cannot reach another's, and automated tests check that.
• Only Cannonball staff can open a company's records to help with a problem, and each time they do, it is logged.
• The keys that connect a company's QuickBooks or Google Sheets are stored encrypted, and the keys to the outside services are kept as encrypted secrets, not in the code.

No system is perfectly secure. If we learn of a breach that affects your information, we tell you promptly.

How long we keep it

For as long as your company uses Cannonball, and afterwards so you can come back. Ask us and we delete your company's records. The trail of where a technician drove is deleted after 30 days. Recordings of calls Cal answers, on the phone line, on the watch or in the technician app, are deleted after 90 days. A replay of the demonstration company's console is deleted after 30 days.

Your customers

If one of your customers asks what we hold about them or wants it removed, they can ask you or us. We help you answer.

Children

Cannonball is for businesses and is not meant for children under 13.

Changes to this notice

We post any change here with a new date, and email you before a change that matters takes effect.

Questions

Email [email protected], or see the support page.