Privacy Policy

1. Information We Collect

We collect information in the following ways:

• Lead form submissions. When a homeowner submits a quote request, we collect their name, email address, phone number, and project details. This information is shared with the contractor they are contacting.
• Contractor accounts. When a contractor claims a listing, we collect their name, email address, phone number, and business information (photos, service area, coating types, pricing).
• Payment information. If you subscribe to a paid plan, payment details are collected and processed by Stripe. We do not store card numbers or banking information on our servers.
• Usage data. We automatically collect standard server log data including IP address, browser type, pages visited, and referring URLs. This data is used to improve the Service and is not linked to individual identities.
• Cookies. We use session cookies to keep contractors logged in and functional cookies required for authentication. We do not use tracking or advertising cookies.

2. How We Use Your Information

• To connect homeowners with contractors by forwarding lead inquiries.
• To send transactional emails — claim confirmations, lead notifications, and account updates — via Resend.
• To process subscription payments and manage billing via Stripe.
• To display and maintain contractor listings in the directory.
• To analyze aggregate usage patterns and improve the Service.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

The Service relies on the following third-party providers, each with their own privacy policies:

• Supabase — database, file storage, and authentication. Data is stored in U.S.-based servers.
• Stripe — payment processing and subscription management. Stripe is PCI-DSS compliant.
• Resend — transactional email delivery.
• Vercel — web hosting and infrastructure.

4. Data Retention

• Lead inquiry data is retained as long as the associated contractor listing is active.
• Contractor account data is retained until the account is deleted.
• Server log data is retained for up to 90 days.
• You may request deletion of your personal data at any time by emailing us at epoxylocator@gmail.com. We will process deletion requests within 30 days.

5. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data.
• Opt out of non-essential communications at any time.

To exercise any of these rights, email epoxylocator@gmail.com.

6. Security

We implement reasonable technical and organizational measures to protect your information — including encrypted connections (HTTPS), row-level security on our database, and restricted access to administrative systems. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

9. Contact

Questions about this Privacy Policy? Email us at epoxylocator@gmail.com.