Your data
Your records belong to your account. We never sell them or use them for ads, and we don't use them to train AI.
Where it lives
Your account, clients, quotes, invoices, stock and files are kept in Puffin's database and file store at Cloudflare. The quote and invoice pages your clients open come from the same place. Some of it may be stored outside the UK and EU; ourPrivacy policy explains how it stays protected.
Who can see it
- You, through your own ChatGPT, once you've connected with your email and a 6-digit code.
- Your clients see only the quotes and invoices you send them, through long random links that can't be guessed.
- What you type in ChatGPT, and the cards Puffin sends back, pass through ChatGPT. Your ChatGPT settings decide whether OpenAI may use your chats to improve its models.
- If you connect Stripe, card payments go through your own Stripe account. Puffin never sees card numbers.
Nothing is sent without you
Quotes, invoices, reminders, payments and account changes wait for you to tap a button on a card. The one exception is Pro's automatic payment reminders, which you can switch off for any client.
Take it with you
Ask ChatGPT to “export my data”. You get a link to download everything as spreadsheets. It works on any plan, any time. The link works for 15 minutes.
Delete it
Ask ChatGPT to “delete my account”. You get a page with one button, and a link to download your data first. Your account, records, clients' details, files and copies of emails are deleted right away. Cloudflare's backups can hold them for up to 30 days, then they're gone for good.
If someone tries to get in
There's no password to steal. Each sign-in code works once, for 10 minutes. When you connect from a browser we haven't seen before, we email you. You can add a backup email in case you lose your main one.
The full details are in our Privacy policy. Questions? Email hello@puffinhq.com.