Privacy Policy

1. Information We Collect

We collect information in several ways depending on how you interact with the Service:

• Contractor Business & Registration Information: Legal business name, trade type, physical address, business telephone numbers, Employer Identification Number (EIN) or tax identifiers submitted for 10DLC carrier registration, billing address, and authorized user credentials.
• Customer Records & Project Data: Homeowner contact details (names, phone numbers, email addresses, service locations), project inquiries, job notes, quotes, invoices, payment requests, uploaded project photos, and customer correspondence submitted by or on behalf of contractors.
• AI Copilot Text, Photo & Voice Memo Data: Text messages, voice recordings, material receipts, and site photos transmitted to the AI Copilot via SMS, MMS, or in-app voice to update job files, sort photos, and draft quotes.Users must not transmit unencrypted credit card numbers, CVVs, or Social Security numbers via SMS.
• AI Voice & Telephony Data: Inbound and outbound call metadata (calling numbers, call duration, timestamps), audio recordings where enabled, and machine-generated transcripts created by our 24/7 AI Voice Dispatcher.
• Workforce, GPS & Dispatch Information: Crew member names, phone numbers, roles, timeclock records, and device GPS location data transmitted for route dispatch and arrival window updates.
• Technical & Usage Data: IP addresses, browser and device types, authentication tokens, system event logs, and operational telemetry used for platform security, fraud prevention, and service diagnostics.

Payment card details are entered directly into and processed by Stripe via Stripe Connect; Let's Get Quoted does not store full credit card numbers or CVVs on our servers.

2. How We Use Information

• Provide, operate, and maintain contractor workspaces, scheduling tools, and published websites.
• Process customer inquiries, quote requests, appointment bookings, and Quick Stop priority reservations.
• Power AI Copilot and generative AI features (including automated quote drafting, estimate calculations, photo tagging, call transcription, and inquiry triage) through secure API endpoints with provider commitments not to train public models on customer business data.
• Deliver automated and transactional SMS/MMS messages, voice calls, and transactional/marketing emails.
• Verify business identity and register messaging brand profiles with carrier 10DLC registries.
• Prevent fraud, secure accounts, detect unauthorized access, and satisfy legal and tax accounting rules.

4. Data Sharing, Subprocessors & AI Zero-Retention Policy

We share personal information only with authorized service providers and subprocessors that process data under strict contractual instructions to help us deliver the Service, including:

• Hosting and Serverless Compute: Vercel, Inc. (global edge network, secure serverless execution).
• Database & Cloud Storage: Supabase, Inc. / AWS (PostgreSQL database with Row Level Security, encrypted in transit via TLS 1.3 and at rest with AES-256).
• Payment Processing: Stripe, Inc. (PCI-DSS Level 1 certified payments, deposits, and merchant payouts under Stripe Connect).
• Telephony & Voice Communications: SignalWire, Inc. (carrier 10DLC messaging, programmable SIP, and real-time voice dispatching).
• Accounting Integrations: Intuit Inc. (bi-directional QuickBooks sync for customers, invoices, and payments, where authorized by contractor).
• Artificial Intelligence Inference Platforms: Google LLC (Google Gemini API) and OpenAI, LLC. Customer data, prompts, job notes, photos, and voice transcripts are not used to train public foundation models.
• Transactional Email Delivery: Resend, Inc. (DKIM/SPF-signed transactional and notification emails).
• Property Intelligence: RentCast, Inc. (address-level structural and valuation baselines for estimating).
• Mapping & Geocoding: Google Maps Platform (server-side geocoding and browser mapping with referrer restrictions).
• Homeowner Financing Marketplace (Optional Referral): Acorn Finance Inc. When a contractor enables homeowner financing, homeowners may voluntarily click through to Acorn Finance's lending marketplace to prequalify for personal home improvement loans. Outbound referral links convey estimated project totals and partner attribution codes; Let's Get Quoted never transmits customer personal identifying information (such as name, email, or address) in prequalification link parameters. Any application information submitted by the homeowner is handled directly by Acorn Finance and its participating lenders under Acorn's privacy policy.

For contractors processing personal data subject to state privacy regulations (such as the CCPA), our Data Processing Addendum (DPA) governs our obligations as a Service Provider / Data Processor.

5. Data Retention, Storage Security & Deletion Lifecycle

We retain personal information for as long as your account remains active and as necessary to fulfill the business purposes outlined in this policy.

10DLC EIN handling: EINs submitted for messaging registration are encrypted before temporary storage in a separate tax-identity vault, isolated from the application database. The full EIN is not available in staff tools and is excluded from the primary database and application logs. It is deleted after SignalWire accepts the brand-verification request, or automatically after 30 days if it is not submitted. We retain only limited nonsecret audit evidence, such as the last four digits, disclosure version, and provider reference, after verification. Encrypted-vault backups follow the vault provider's encrypted backup lifecycle and cannot be selectively purged ahead of that lifecycle.

Media & Photo Storage Security: Homeowner project photos, material receipts, and site videos are stored in encrypted, tenant-isolated storage buckets (`job-photos`, `lead-photos`, `site-videos`, `site-images`, `insurance-proof`, `crew-photos`, `account-attachments`). Direct object access is protected by Row Level Security and short-lived cryptographically signed URLs.

Account Deletion & 30-Day Grace Period: When a contractor requests account closure, a 30-day soft deletion grace period begins. During this quarantine window, public sites and scheduling links are deactivated while account owners retain the ability to restore their workspace or complete full DSAR data exports. Following the grace period, our automated account closure orchestrator permanently and irreversibly purges all relational database records across all registered schema tables and deletes all associated assets from storage buckets.

Financial & Compliance Records: Records related to processed Stripe payments, finalized invoices, carrier 10DLC registrations, and TCPA consent timestamps are retained for statutory minimum periods to comply with tax reporting, financial audits, and carrier anti-spam regulations.

6. Your Rights and Choices

Depending on your jurisdiction, you or your customers may have the right to request access to, correction of, or deletion of personal information, or to opt out of certain communications.

• Contractors: You may update your profile, manage team access, configure overage caps, and export customer, service, job, and invoice records directly in your dashboard.
• Homeowners / Consumers: If you are a customer of a contractor using Let's Get Quoted, please contact the contractor directly with privacy requests, as they are the Data Controller of your records. You can opt out of text messages at any time by replying STOP.

7. Contact Us & Privacy Request Intake

If you have questions about this Privacy Policy or wish to exercise your rights under GDPR, CCPA, or applicable state privacy statutes (Subject Access Requests, deletion, or correction orders), you may submit a formal request through our monitored intake channels:

• Support & Privacy Intake Desk: Submit an inquiry via our monitored contact form with “Privacy request / DSAR” in the subject (monitored by platform compliance staff; statutory response clock begins upon receipt).
• Written Inquiries: Attn: Privacy Compliance Team, LETS GET QUOTED LLC, 2222 W GRAND RIVER AVE STE A, OKEMOS, MI 48864.