What We Collect, and What We Don't

The short version

• We never sell, rent, or broker your personal information. There is no lead form on this site — when you call a contractor, you call the contractor.
• Homeowners never need an account. Contractors need one to claim or add a listing, and it holds an email address, a name, and the changes made with it.
• Card details go to Stripe and never reach this site. We keep a Stripe customer ID and the status of each subscription.
• We measure page traffic in aggregate with Google Analytics. We do not build a profile of you across sites.

Visiting the site

Aggregate analytics. Page views, referrer, approximate region, and device class, collected through Google Analytics to tell us which pages are useful. This is not tied to a name and is not used to target advertising.

Server logs. Standard web request logs, retained briefly for security and debugging.

Contractor accounts

Your account. Creating an account stores your email address, the name you give, and your password. Sign-in is handled by Supabase, which runs our database and authentication; your password is kept only as a one-way hash, and nobody here can read it.

Claims and new businesses. When you claim a listing or add a business, we keep the request with your account: which business, the email address it was made from, and whether it was approved. Your email's domain is compared with the business's website, which is how a claim can be verified on the spot.

Listing edits. Changes you make to a listing are published on it — that is what they are for. Each change is also kept in an audit history recording which account made it and when, so a listing that is edited wrongly can be put right.

Payments

Featured seats are paid for through Stripe. You enter card details on Stripe's own checkout page and manage the subscription in Stripe's billing portal, so card details never reach this site and we could not see them if we wanted to. Stripe handles that data under its own privacy policy.

What we store is the Stripe customer ID linked to your account, and for each subscription its plan, status, the seat it pays for, and its renewal, cancellation and refund dates — enough to place the seat and show your billing page. We also keep a log of the billing events Stripe sends us.

Email and the contact form

Email we send. Transactional email only: confirming your account, resetting a password, and telling you what happened to a claim, a business you added, or a Featured seat. It is sent through Resend. There is no newsletter and no marketing list. Stripe sends its own receipts and billing notices.

The contact form. A message sent through the contact form is stored with the name and email address you give, and emailed to the people who run the site so they can reply. We also store a one-way hash of your IP address, used only to limit how many messages one connection can send in an hour. We keep messages for as long as it takes to resolve them and to keep a record of what changed and why.

Cookies

Signing in sets a session cookie that keeps you signed in to your account. It is needed for the account area to work and is not used for anything else. If you never sign in, it is never set.

Google Analytics sets its own cookies to count visits in aggregate, as described above. Stripe's checkout and billing pages, which are on Stripe's site, use Stripe's own cookies, including for fraud prevention. There are no advertising cookies on this site.

Contractor records

Business listings on this site are compiled from public business listings and Google Business Profiles for the areas we cover, and corrected by the businesses themselves when they claim a listing. A phone number published here is a business number the business already publishes, not a personal one.

If you are a contractor and something on your listing is wrong, tell us — we will correct it and the listing will show a new date. If you believe information about you on this site is personal rather than commercial, say so in the same message and we will review it.

Third parties

Listing pages show each business's Google rating and review count, refreshed monthly, and link out to its Google profile. Opening that link means you are on Google's site under Google's terms. We do not use Google's advertising products, and we do not copy review text onto this site.

The services that process data on our behalf are the ones named on this page: Vercel, which hosts the site; Supabase, for accounts and the database; Stripe, for payments; Resend, for email; and Google Analytics, for traffic. Each receives only what its job needs.

Your choices

You can ask what we hold about you, ask for it to be deleted, or ask us to stop contacting you, through the contact form. Because we hold so little, most of these requests resolve in a single reply. Deleting an account ends its access to any listing; if it has a Featured subscription, cancel that in the billing portal first. Records we are required to keep, such as billing records, are kept for as long as that requirement lasts.

This site is not intended for children, and we do not knowingly collect information from them. If this policy changes materially, the date at the top of this page changes with it.