Privacy Policy

Last updated: September 12, 2026

This Privacy Policy explains how Cloud Bedrock, LLC ("Cloud Bedrock", "we", "us") collects, uses, shares, and protects information in connection with the PewPros platform, the pewpros.com website, and the related applications (together, the "Service"). Words defined in our Terms of Service (Customer, End User, Visitor, Customer Content, Customer Data) have the same meaning here.

1. Two kinds of information, two roles

The Service holds information about two different groups, and our role is different for each:

• Information our Customers enter about their own customers (Customer Data). A training business that uses PewPros enters its students' names, contact details, course records, certificates, purchases, and signed documents. That business decides what to collect and why. We process Customer Data only on the Customer's instructions, to provide the Service to that Customer. Section 2 covers this.
• Information about our own Customers and Visitors. When a business signs up for PewPros, or someone browses pewpros.com or contacts us, we collect information for our own purposes: to provide, bill, support, and improve the Service. Section 3 covers this.

2. Customer Data: information our Customers enter about their End Users

What we do with it. We host, store, back up, display, transmit, and process Customer Data as needed to run the Customer's PewPros site and as the Customer directs through the Service's features, for example sending a class reminder the Customer scheduled, or issuing a certificate the Customer awarded.

What we do not do with it. We do not sell Customer Data. We do not use it to market our own or anyone else's products or services to End Users. We do not use it to generate leads, build marketing audiences, or for advertising. We do not share it with anyone except the sub-processors in section 5 that are needed to run the Service, or as the Customer directs, or as the law requires. These commitments continue after a Customer stops using the Service.

If you are an End User. The business you dealt with is responsible for the information it holds about you. To access, correct, or delete your information, or to ask how it is used, contact that business directly. If you are not sure how to reach them, or if you believe a business is misusing the Service, contact us at support@cloudbedrock.com and we will help.

3. Information about our Customers and Visitors

What we collect.

• Account information a Customer gives us at sign-up: business name, contact name, email address, phone number, and mailing address.
• Billing information for the PewPros subscription. Card details are entered on our payment processor's form and are held by the processor, not by us. We keep the processor's token, the last four digits, and the transaction history.
• Support and correspondence, including emails and support tickets you send us.
• Usage and device information collected automatically when you use the Service: IP address, browser and device type, pages viewed, actions taken, and timestamps, in server logs and application audit records.
• Cookies, described in section 4.

How we use it. To create and administer your account; to provide, secure, and improve the Service; to bill you; to answer your questions and provide support; to send service notices such as receipts, renewal reminders, security alerts, and notices of changes to our terms; to send you product news and offers about PewPros, from which you can opt out at any time; to prevent fraud and abuse; to enforce our Terms; and to comply with the law.

We do not sell this information and we do not share it with data brokers or advertising networks.

4. Cookies and similar technologies

The Service uses cookies and browser storage to keep you signed in, remember your preferences, protect against fraud and abuse, and understand how the Service is used. pewpros.com uses Google reCAPTCHA on public forms to block automated abuse; reCAPTCHA receives the visitor's IP address, browser information, and interaction signals under Google's privacy policy. The pewpros.com marketing pages use Google Analytics to measure traffic and page use; it sets its own cookies and receives the visitor's IP address, browser information, and the pages viewed, under Google's privacy policy, and you can opt out with Google's browser add-on at https://tools.google.com/dlpage/gaoptout. Those pages also load a chat widget and web fonts from third parties listed in section 5. Customer sites on the Service load no analytics or advertising tags by default. A Customer may add its own analytics or advertising tags to its own PewPros site; those are the Customer's choice and are governed by the Customer's own privacy policy. You can control cookies through your browser settings, though some features may not work without them. We do not respond to Do Not Track signals.

5. Sub-processors and other third parties

We share information only with the service providers needed to run the Service ("sub-processors"), each bound to use it only to provide their service to us. The always-on sub-processors are:

A Customer may also enable integrations with vendors of its own choosing, using its own account with that vendor, for example Mailgun for email delivery in place of our default, Twilio or GoHighLevel for text messages and calls, GoHighLevel or Salesforce for contact sync, Google Calendar and Zoom for scheduling and online classes, USCCA and Delta Defense for members the Customer enrolls in a USCCA-backed membership, outbound webhooks to an endpoint the Customer supplies, and tracking scripts the Customer adds to its own site. Data flows to those vendors only if the Customer turns the integration on.

We may also disclose information when the law requires it, to protect the rights, safety, or property of Cloud Bedrock, our Customers, or others, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to the information transferred. We will update this list when it changes.

6. Security

• In transit: all traffic to the Service is encrypted with TLS. Plain HTTP requests are redirected to HTTPS.
• At rest: our database cluster and file storage are encrypted at rest.
• Credentials you store with us (payment gateway keys, calendar and messaging credentials) receive an additional layer of application-level AES-256-GCM encryption, with a documented key rotation procedure.
• Card numbers are entered on the payment processor's tokenized form and never pass through the Service.
• Isolation: each Customer runs on its own application instance with its own database.
• Access: access to Customer Content is limited to a small Cloud Bedrock operations team and used only for support, maintenance, and security.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as the law requires.

7. Retention and deletion

We keep Customer Data for as long as the Customer's account is active and the Customer directs. On a Customer's written request, or within 30 days after a Customer's account closes, we delete its Customer Content from active systems, including its deployment, database, and uploaded files. Backup copies expire no later than 35 days after that. We keep transaction, tax, and other records for as long as the law requires. Information about our own Customers and Visitors is kept for as long as needed for the purposes in section 3 and then deleted or anonymized.

8. Your choices and rights

Customers can review and update their account information in the Service, export their records, and request a complete copy or deletion of their data as described in the Terms. Anyone may unsubscribe from our marketing email using the link in each message; service notices about your account will still be sent. Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to certain uses. To exercise a right, email support@cloudbedrock.com. If your information was entered by a business using PewPros, we will refer your request to that business and assist it. We will not discriminate against you for exercising your rights.

9. Children

The Service is for a general audience and Customer accounts are for adults. We do not knowingly collect personal information from children under 13 for our own purposes. Customers who serve minors are responsible for obtaining the consents their programs require.

10. Changes to this policy

We may update this policy. For a material change, we will email the account owner of each Customer at least 30 days before it takes effect and post the updated policy here with a new "Last updated" date.

11. Contact

Cloud Bedrock, LLC
PO Box 230103, Fair Haven, MI 48023, United States
support@cloudbedrock.com