Privacy and cookies

Last updated September 26, 2026

Kitchen Corral is job-tracking software for kitchen and cabinet dealers. It is run by Ervolina Marketing (“we”). This notice explains what we collect when you use kitchencorral.com and the Kitchen Corral apps, why we collect it, who helps us run the service, and the choices you have.

The short version: we collect what it takes to run the service, we don't sell it, we don't use it for advertising, and we use one cookie, which keeps you signed in.

1. What we collect

Your account. Your name, email address and role (admin or field), and your password, which we store only as a salted hash, never as the password itself. We also keep a record of your active sign-ins so you stay signed in.

What your company puts in. Jobs, builder and homeowner names, job addresses, phone numbers, notes, schedules, orders, measurements, documents and photos. Your company (the dealer) decides what goes in and controls it. We hold and process it on the dealer's behalf so the service works. If you are a homeowner or builder whose details are in a dealer's jobs, please contact that dealer first. We will help them respond.

Technical details. Whenever your browser or phone talks to our servers, our hosting provider records standard request details such as IP address, browser type, the page asked for and the time. We use these to keep the service running and secure. Photos taken on a phone can contain the location where they were taken, and that stays inside the photo file.

2. How we use it

• To run the service: sign you in, show your company's jobs, and store its files.
• To send the emails the service needs: password reset links, and the weekly summary if your company's admin turns it on.
• To keep the service secure, fix problems, and help when you ask for support.

We do not sell personal information. We do not share it for advertising, including cross-site behavioral advertising. Kitchen Corral has no ads, no analytics services and no tracking pixels.

3. Cookies

Kitchen Corral sets one cookie:

Name

pm_session

What it does

Keeps you signed in. Strictly necessary: without it you can't sign in. Only kitchencorral.com can read it, and scripts on the page can't.

How long

Until you sign out, or 30 days after you last used the app.

There are no advertising, analytics or third-party cookies. Because the only cookie is strictly necessary, we don't show a cookie banner. The app's fonts and files load from our own domain, so opening a page doesn't send your details to a font or content network. If you block cookies, you won't be able to sign in.

4. Who helps us run Kitchen Corral

These service providers handle information for us, only to run the service:

• Cloudflare, Inc.: hosting, the database, file storage, security and request logs.
• Resend: sends the service's emails. It receives the recipient's address and the email itself, which can include job and customer names.
• Anthropic: only if your company's admin turns on AI order review. When someone runs a review, that job's selected documents and order details are sent to Anthropic to be checked. Anthropic's commercial terms say it does not train its models on this data.

Beyond that, we share information only:

• with your company's admins, who can see all of your company's data;
• when the law requires it, or to protect people, property or the service;
• if the business is sold or merged, with the buyer, who must keep honoring this notice. We will tell you before that happens.

5. Where it's stored

Information is stored with Cloudflare and may be processed in the United States and in other countries where Cloudflare runs data centers.

6. How long we keep it

• Your account: while it is active. Your company's admin can remove it.
• Jobs and files: for as long as your company keeps them. Deleted jobs sit in the Trash for 30 days, then are permanently deleted.
• Sign-ins: 30 days after last use, or when you sign out.
• Password reset links: they stop working after one hour.
• Request logs: a short period set by Cloudflare.
• If your company stops using Kitchen Corral, we delete its data within 90 days of its written request, unless the law requires us to keep something. Backup files your admin downloads are under your company's control.

7. Security

Every connection is encrypted (HTTPS). Passwords are stored as salted hashes, and device keys for connected apps are stored hashed too. Pricing and cost figures are visible to admins only. Changing or resetting a password signs that account out on every other device. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

8. Your choices

• Change your password any time under Your account and password.
• Ask your company's admin to correct your name or email, or to remove your account.
• Ask us for a copy of your information, or to correct or delete it, by emailing privacy@kitchencorral.com. We answer within 45 days. For information your company put in, we will work with your company to respond.

Some states and countries give you specific privacy rights. We honor these requests from everyone, wherever you live, and we won't treat you differently for making one.

9. Do Not Track and Global Privacy Control

We don't track you across other websites, and we don't sell or share your information for advertising, so there is nothing for these browser signals to switch off. The service works the same either way.

10. Children

Kitchen Corral is a tool for businesses. It is not meant for children under 16, and we don't knowingly collect their information.

11. Changes to this notice

When we change this notice, we update the date at the top. If a change matters, we tell company admins by email or in the app before it takes effect.

12. Contact

Ervolina Marketing, privacy@kitchencorral.com