Privacy Policy

1. Information We Collect

From Contractors

• Account info: company name, owner or contact name, email, phone number, license number, team member emails.
• Preferences: service area (base ZIP code and radius), project types, desired volume, daily caps.
• Availability and calendar: your weekly hours, sit-down length, buffer, minimum notice and time zone. If you connect Google Calendar or Outlook, we also store the email address of the connected account and the access credentials (OAuth tokens) the provider gives us, and we read the busy or free status of your calendar (see Section 4).
• Payment info: processed by our payment provider (Whop/Stripe). We store only a tokenized identifier and the last 4 digits of the card — never full card numbers.
• Agreement: your acceptance of our Terms of Service, with the IP address and timestamp of acceptance.
• Usage data: login records, dashboard interactions, CRM integrations.

From Homeowners (via ads & request forms)

• Contact info: name, phone, email submitted through our remodel request forms.
• Project info: project type (kitchen, bath, or both), scope, budget range, timeline, whether you own the home, property type, ZIP code and city, and any project description you add.
• Consent metadata: IP address, user agent, page URL, referrer, UTM parameters, ad click IDs (fbclid/gclid/msclkid), timestamps — captured as part of our TCPA consent certificate.
• Booking info: if you book a free estimate, the time you choose and the street address for the visit, plus any change or cancellation you make to it. The booking page asks for nothing else and does not need an account.

2. How We Use Information

• Route each homeowner request to one matched remodeling contractor and let the homeowner book a time with them.
• Operate the platform, process payments, and provide support.
• Generate TCPA consent certificates as a record of homeowner consent.
• Send operational communications (booking confirmations and reminders, sit-down alerts, billing, account updates).
• Improve our service quality, campaign performance, and homeowner matching.
• Comply with legal obligations.

3. How We Share Information

We do not sell personal information. We share information only:

• With matched contractors: a homeowner's contact info , project details, chosen appointment time and visit address are shared only with the one contractor whose service area covers the homeowner's ZIP code and who is assigned to receive that request.
• With service providers: payment processing (Whop), email delivery (Resend), SMS (Twilio), CRM sync (as configured by the contractor), the calendar provider a contractor connects (Google or Microsoft), analytics, and infrastructure hosting (Supabase, Vercel).
• When legally required: to comply with subpoenas, court orders, or legal process.

4. Calendar Data

Connecting a calendar is optional and is done by the contractor through Google or Microsoft's own sign-in screen. When a contractor connects one:

• We read only whether each time on the calendar is busy or free (the start and end times of events). We do not read event titles, descriptions or attendees.
• We create an event for each sit-down we book, containing the homeowner's name, phone, email, the project and the visit address, and we update or delete that event if the sit-down is moved or canceled. We do not change any other event.
• The OAuth tokens the provider gives us are stored encrypted, and are used only for the two things above.
• A contractor can disconnect the calendar at any time in Settings, or revoke our access from their Google or Microsoft account. We then stop reading it and delete the stored tokens. Events already created stay on the calendar.
• Homeowners are never shown what is on a contractor's calendar, only the open times.

5. TCPA Consent Certificates

Every homeowner request we route carries a consent certificate documenting the homeowner's agreement to be contacted. These certificates are accessible to the receiving contractor via a unique public URL and serve as a record of consent under the Telephone Consumer Protection Act.

6. Data Security

We use industry-standard security: encryption in transit (TLS), encryption at rest for sensitive fields, hashed passwords and tokens, and role-based access controls. We do not store full credit card numbers or bank account numbers — these are tokenized by our PCI-compliant payment processor.

7. Data Retention

Booking records, homeowner request records and consent certificates are retained as long as needed for audit, compliance, and dispute resolution. Account data is retained for 30 days after account cancellation to allow data export, after which it may be deleted or anonymized.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information. Email operations@cliniclydistribution.com to exercise any of these rights.

9. Do Not Call / Opt Out

Homeowners can opt out of communications at any time by replying STOP to any text message or contacting us directly. Contractors receiving homeowner requests are responsible for honoring opt-out requests consistent with TCPA and applicable state laws.

10. Cookies & Tracking

We use cookies and similar technologies for session management, analytics (to understand how our platform is used), and conversion tracking (including Meta Pixel on our marketing and request pages). You can disable cookies in your browser settings, though this may affect platform functionality.

11. Children

Our services are not directed to individuals under 18. If we learn that a minor's information has been submitted, we will delete it and will not deliver it to a contractor.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The “Last updated” date at the top indicates the latest revision. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy? Email us at operations@cliniclydistribution.com.