TrueBuild Privacy Policy

1. Information We Collect

1.1. Information You Provide

• Account information: Name, email address, phone number, password, and ZIP code.
• Project information (Homeowners): Property type, renovation descriptions, keyword selections, uploaded images, and any other project details you submit.
• Business information (Contractors): Business name, CSLB license number, license classification, areas of service, insurance information, business address, and professional qualifications.
• Lead information (Homeowners): Full name, email, phone number, ZIP code, property address, and consent preferences submitted when creating a lead.
• Payment information (Contractors): Billing address and payment method details. Payment card information is processed by our third-party payment processor and is not stored on our servers.
• Communications: Messages, feedback, support requests, and other communications you send to us.

1.2. Information Collected Automatically

• Usage data: Pages visited, features used, clicks, search queries, timestamps, session duration, and interaction patterns.
• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Approximate location: City, region, country, metropolitan area, and the postal code and provider name associated with your internet connection, derived from your IP address. This is approximate — typically accurate to the metropolitan area rather than a street address, and it may differ from the property address you enter for a project. We use it to understand where demand for the Platform is coming from. We do not collect GPS or other precise device location.
• Cookies and similar technologies: Session cookies for authentication, analytics cookies for Platform improvement, and functional cookies for user preferences. See Section 8 for details.
• Authentication events: Login attempts, authentication method used, success/failure status, and related security telemetry.

1.3. Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google, subject to your Google account settings.
• Licensing databases: We may obtain Contractor licensing and business information from the California Contractors State License Board (CSLB) and other government or third-party databases for verification purposes.
• Analytics providers: We may receive aggregated analytics data from third-party services.

2. How We Use Your Information

We use your information for the following purposes:

2.1. Platform Operations

• Create and manage your account.
• Process project submissions and generate AI-powered summaries and keyword suggestions.
• Facilitate connections between Homeowners and Contractors by sharing Lead information.
• Process payments and manage billing.
• Provide customer support and respond to inquiries.

2.2. Contractor Verification

• Verify Contractor licensing, insurance, and business credentials.
• Monitor ongoing compliance with licensing and regulatory requirements.
• Conduct background and credential checks as permitted by law.

2.3. Communications

• Send transactional emails, including account verification, magic link authentication, password resets, and lead notifications.
• Send marketing and promotional communications about TrueBuild services, features, and offers, unless you opt out (see Section 6).
• Send service announcements, policy updates, and other administrative messages.

2.4. Improvement and Analytics

• Analyze usage patterns to improve Platform features, design, and performance.
• Develop new products, services, and features.
• Conduct research and analytics to understand user needs and behavior.
• Train and improve our AI models and algorithms using aggregated and de-identified data.

2.5. Safety and Legal

• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Enforce our Terms of Service and other policies.
• Comply with legal obligations, court orders, and law enforcement requests.
• Protect the rights, property, and safety of TrueBuild, our users, and the public.

3. How We Share Your Information

3.1. Homeowner-to-Contractor Sharing

When a Homeowner submits a Lead, the following information is shared with Contractors who purchase that Lead:

• Homeowner's full name
• Email address
• Phone number
• ZIP code and/or property address
• Project description, keywords, AI-generated summary, and concept images
• Any other project details submitted by the Homeowner

By submitting a Lead, Homeowners expressly consent to the disclosure of this information to one or more Contractors for the purpose of connecting them with qualified professionals and facilitating consultations. TrueBuild does not control how Contractors use this information after it is disclosed. Homeowners are encouraged to review any Contractor's privacy practices before sharing additional information.

3.2. Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure (e.g., database hosting, file storage)
• Payment processing (e.g., Stripe or similar)
• Email delivery (e.g., Resend)
• AI and machine learning (e.g., OpenAI for project summaries and keyword suggestions)
• Analytics and monitoring (e.g., usage analytics)
• Identity verification (e.g., CSLB license verification services)

These providers are contractually obligated to use your information only for the purposes of providing services to TrueBuild and in accordance with this Privacy Policy.

3.3. AI Processing

Project descriptions, keywords, and related content are sent to third-party AI providers (currently OpenAI) for the purpose of generating summaries, keyword suggestions, and concept images. This data is transmitted securely and is subject to the AI provider's data processing terms. We do not send your personal contact information (name, email, phone) to AI providers.

3.4. Legal and Safety Disclosures

We may disclose your information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request.
• Enforce our Terms of Service or other agreements.
• Detect, prevent, or address fraud, security, or technical issues.
• Protect the rights, property, or safety of TrueBuild, our users, or the public.

3.5. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, your information may be transferred to the successor entity. We will notify you of any such transfer and any choices you may have regarding your information.

3.6. Marketing Partners

We may share aggregated, de-identified data with marketing partners for advertising and promotional purposes. We do not sell your personal information as defined under the California Consumer Privacy Act (CCPA). However, we may share personal information with marketing partners for targeted advertising purposes, which may constitute a "share" under the CCPA. You have the right to opt out of this sharing (see Section 5).

3.7. With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Data Retention

4.1. We retain your personal information for as long as your account is active or as needed to provide the Platform's services.

4.2. After account deletion or termination, we may retain certain information for a reasonable period as necessary to:

• Comply with legal obligations (e.g., tax, accounting, or regulatory requirements).
• Resolve disputes and enforce our agreements.
• Prevent fraud and abuse.
• Maintain business records for legitimate purposes.

4.3. Lead data shared with Contractors is retained by those Contractors independently, and TrueBuild cannot control or retrieve it once disclosed.

4.4. De-identified or aggregated data may be retained indefinitely for analytics and product improvement.

5. Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

5.1. Right to Know

You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.

5.2. Right to Delete

You may request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, ongoing transactions, security purposes).

5.3. Right to Correct

You may request correction of inaccurate personal information.

5.4. Right to Opt Out of Sharing

You may opt out of the sharing of your personal information for cross-context behavioral advertising purposes.

5.5. Right to Limit Use of Sensitive Information

If we collect sensitive personal information (as defined by the CPRA), you may request that we limit its use to what is necessary to provide the Platform's services.

5.6. Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. However, opting out of certain data sharing may limit our ability to connect you with Contractors or provide certain Platform features.

5.7. How to Exercise Your Rights

To exercise any of these rights, contact us at legal@truebuild.io or submit a request through the Platform. We will verify your identity before processing your request and respond within 45 days, with one 45-day extension if reasonably necessary.

5.8. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require verification of the agent's authority and your identity.

6. Marketing Communications and Opt-Out

6.1. By creating an account, you consent to receive marketing communications from TrueBuild, including emails about new features, promotions, and relevant services.

6.2. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Updating your communication preferences in your account settings.
• Contacting us at legal@truebuild.io.

6.3. Opting out of marketing communications does not affect transactional or service-related messages (e.g., account verification, lead notifications, security alerts, policy updates).

6.4. We may use your information to display targeted advertisements on third-party platforms. You may opt out of this by contacting us or using platform-specific advertising controls.

7. Data Security

7.1. We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Secure session management with HttpOnly cookies.
• Bcrypt password hashing.
• Rate limiting on authentication endpoints.
• Access controls and principle of least privilege for internal systems.

7.2. No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the Platform at your own risk.

7.3. In the event of a data breach that compromises your personal information, we will notify you and relevant authorities as required by applicable law, including California Civil Code § 1798.82.

8. Cookies and Tracking Technologies

8.1. Types of Cookies We Use

8.2. Your Cookie Choices

Most browsers allow you to manage cookie preferences. You can typically:

• Block all cookies (may impair Platform functionality).
• Block third-party cookies only.
• Clear existing cookies.
• Set your browser to notify you when cookies are set.

8.3. Do Not Track

The Platform does not currently respond to "Do Not Track" browser signals. However, you may exercise your opt-out rights as described in Section 5.

9. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, contact us at legal@truebuild.io.

10. Third-Party Links and Services

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform. TrueBuild is not responsible for the privacy practices of third parties.

11. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Platform, you consent to this transfer. U.S. data protection laws may differ from those in your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. The "Last Updated" date at the top of this Policy indicates when it was last revised. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

TrueBuild
[MAILING ADDRESS]
legal@truebuild.io
[PHONE NUMBER]

For CCPA/CPRA requests specifically, you may also submit a request through the Platform's privacy settings or email legal@truebuild.io.