Privacy Policy

Introduction

ContractorHUB ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, company name, and billing information when you create an account.
• Business Data: Information about your contracting business, including customer data, job details, and financial records that you input into the platform.
• Communications: Information you provide when you contact us for support or feedback.

Information Collected Automatically

• Usage Data: Information about how you interact with our platform, including pages visited, features used, and time spent on the platform.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: We use cookies and similar technologies to enhance your experience and analyze usage patterns.

Third-Party Integrations

When you connect third-party services (such as CRM systems, accounting software, or payment processors), we may receive data from those services as authorized by you.

Mobile Application (iOS)

The ContractorHUB iOS app is a companion to the ContractorHUB platform and requires an existing account. It collects and processes the following data solely to provide app functionality. We do not use this data for tracking across other companies' apps or websites, and the app contains no third-party advertising or analytics SDKs.

• Account & Business Data: The email you sign in with and the job, task, customer, schedule, and communication data you view or create are stored in your company's workspace, exactly as on the web platform.
• Camera & Photo Library: The app accesses your camera or photo library only when you choose to attach a photo to a job. Photos you capture or select are uploaded to your workspace. The app does not browse or upload your photo library otherwise.
• Microphone & Meeting Audio: When you start a meeting recording, the app records audio and uploads it to your workspace. Recorded audio is processed by a third-party transcription service (a subprocessor) to generate a transcript and summary, which are stored with the meeting. The app records only while you have an active recording in progress.
• Push Notifications & Device Token: With your permission, the app registers a device token with the Apple Push Notification service so we can notify you of events such as a job or task being assigned to you, or a meeting transcript becoming ready. The device token is stored in your workspace and removed when you sign out or disable notifications.
• On-device Storage: Your authentication token is stored securely in the iOS Keychain on your device. No password is stored on the device.

Managing app permissions. You can grant or revoke camera, microphone, photo, and notification access at any time in iOS Settings → ContractorHUB. Revoking a permission disables the related feature but does not otherwise affect your account. To delete data already collected, see the Data Deletion Instructions section below or contact privacy@contractorhub.app.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers (Subprocessors): With trusted third-party vendors who assist us in operating our platform, including cloud hosting and infrastructure providers, payment processors, email and SMS delivery services, analytics providers, and customer support tools. All subprocessors are contractually bound to protect your data and may only process it on our behalf for the specific services they provide.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, provided the acquiring entity agrees to honor the commitments made in this Privacy Policy. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
• With Your Consent: When you explicitly authorize us to share your information.

Our current list of subprocessors is published at contractorhub.app/subprocessors. We will notify customers of material changes to our subprocessor list with at least 30 days' advance notice. To receive change notifications by email, contact us at privacy@contractorhub.app.

Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption: All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256.
• Access Controls: Role-based access controls, multi-factor authentication, and least-privilege principles govern access to systems and data.
• Infrastructure: Our platform is hosted on infrastructure with physical and environmental security controls, including access monitoring and redundant systems.
• Monitoring: We maintain logging and monitoring systems to detect and respond to unauthorized access attempts and anomalous activity.
• Assessments: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate risks.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Retention and Disposal

We retain your information for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes.

When personal information is no longer needed for its stated purpose and is no longer subject to legal retention requirements, it is securely deleted or anonymized. Secure disposal methods include cryptographic erasure, secure overwriting, and destruction of physical media where applicable. Backups containing personal information are subject to the same retention schedules and are purged in accordance with our data lifecycle policies.

Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the information provided below.

State Privacy Rights (United States)

Depending on your state of residence, you may have additional rights under applicable state privacy laws. The following sections describe those rights. To exercise any right described below, please contact us at privacy@contractorhub.app or use the deletion methods in the Data Deletion Instructions section. We will verify your identity before processing requests and will respond within the timeframe required by applicable law.

California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know: Request the categories and specific pieces of personal information we have collected about you, the sources, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of personal information we collected from you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: We do not sell personal information. We do, however, share limited information with advertising platforms for the purpose of measuring campaign effectiveness — for example, sending Google Ads a hashed (irreversible) form of an email address or phone number you submit on our marketing site so the conversion can be attributed to the ad that drove your visit. Where California law treats this as "sharing for cross-context behavioral advertising," you may opt out at any time by declining marketing or analytics cookies via our cookie consent banner, or by contacting us at privacy@contractorhub.app. See the Advertising, Analytics, and Conversion Measurement section below for the full list of tools involved.
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to uses necessary to provide the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We will require the agent to provide proof of authorization and may require you to verify your identity directly.

"Shine the Light" Disclosure: California Civil Code § 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Notice of Financial Incentive: We do not offer financial incentives in exchange for personal information.

Virginia (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act grants you the right to:

• Confirm whether we process your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data provided by or obtained about you.
• Obtain a portable copy of your personal data.
• Opt out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities.
• Appeal our refusal to act on a request by contacting privacy@contractorhub.app.

Colorado (CPA)

Colorado residents have rights under the Colorado Privacy Act substantially similar to those under the VCDPA, including access, correction, deletion, data portability, and opt-out rights. You may also opt out of targeted advertising, sale, and profiling for decisions with legal or similarly significant effects, and you may appeal our refusal to act on a request.

Connecticut (CTDPA)

Connecticut residents have rights under the Connecticut Data Privacy Act substantially similar to those under the VCDPA and CPA, including access, correction, deletion, data portability, and opt-out rights.

Utah (UCPA)

Utah residents have rights under the Utah Consumer Privacy Act to access, delete, obtain a portable copy of, and opt out of the sale of personal data and targeted advertising.

Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Delaware (DPDPA), New Hampshire, New Jersey, and Other States

Residents of these states have similar rights under their respective state privacy laws, including the right to access, correct, delete, obtain a portable copy of, and opt out of certain processing of their personal data. We honor all applicable state privacy rights regardless of whether you specifically invoke a statute.

Nevada

Nevada residents have the right to direct us not to sell certain "covered information" to third parties. We do not sell such information, but you may still submit an opt-out request to privacy@contractorhub.app.

Submitting a Request and Response Times

To submit a privacy rights request, email privacy@contractorhub.app with the subject "Privacy Rights Request" and include (1) your full name, (2) the email address associated with your account, (3) your state of residence, and (4) the specific right you wish to exercise. We will acknowledge receipt within ten (10) business days and respond within forty-five (45) days (or the timeframe required by applicable law). We may extend the response period by an additional forty-five (45) days when reasonably necessary and will notify you of any extension.

Do Not Track

Our Platform does not currently respond to "Do Not Track" browser signals, as there is no industry-standard interpretation of such signals. However, we treat Global Privacy Control (GPC) signals as valid opt-out requests for the sale or sharing of personal information where applicable.

Data Deletion Instructions

You can request deletion of your data in the following ways:

• Google data (self-serve, immediate): Log in and open Settings → My Google Data, or visit our public deletion-procedure page at contractorhub.app/google-data-deletion. This revokes our OAuth tokens at Google and removes every Google-sourced record we hold for you. An audit-log entry is written confirming the deletion.
• Email Request: Send an email to privacy@contractorhub.app with the subject "Data Deletion Request" and include your account email address.
• Account Settings: Log into your ContractorHUB account and navigate to Settings > Account > Delete Account.
• Facebook/Instagram: If you connected via Facebook or Instagram, you can remove ContractorHUB from your Facebook Settings > Apps and Websites, or Instagram Settings > Apps and Websites. This will automatically trigger a data deletion request.

Upon receiving your request, we will delete your personal data within 30 days, except where we are required to retain certain information for legal or legitimate business purposes. You will receive a confirmation email once your data has been deleted. Google-data deletions via the self-serve flow are immediate; you will see an on-screen confirmation summarizing what was revoked and removed.

Google Workspace and Google API Services

Google Services We Access and OAuth Scopes

When you connect your Google account to ContractorHUB, you may authorize one or more of the following Google services depending on the features you use. The OAuth scope shown for each service is the minimum scope required to deliver the feature; we do not request broader scopes than necessary.

• Sign-in identity (openid, userinfo.email, userinfo.profile): Used to associate the OAuth grant with the correct ContractorHUB user account and to display the connected Google account on the integrations settings page.
• Gmail — read, label, draft, archive, and send (gmail.modify): Used to display your inbox inside the Platform so you can read, reply to, label, and archive customer email alongside the matching project record, and to send customer-facing transactional email — proposals, appointment confirmations, review requests, and project status updates — that you compose inside ContractorHUB. We use this single scope to list and read messages, apply a "ContractorHUB" label that links a thread to a project, save drafts, move messages to trash, and send messages from your verified business address. We request only gmail.modify (it covers both reading and sending, so we do not separately request gmail.send or gmail.readonly), never request the broader gmail (full) scope, never permanently delete messages, and never send bulk marketing email or any message you have not authored or approved.
• Google Calendar (calendar): Used to list your calendars during onboarding (so you can choose which calendar to sync with), and to create, update, and delete events for sales appointments, estimate visits, production schedules, and warranty callbacks. We use this scope to keep ContractorHUB and Google Calendar in two-way sync.
• Google Drive — app-created and picked files only (drive.file): Used to store files the Platform creates on your behalf (project photos, signed contracts, generated proposals) and to import files you choose with Google's own file picker — such as price lists, customer documents, and photo libraries — into the matching project or company-files area. The drive.file scope limits our access exclusively to files our app created and the specific files you select in the picker. We cannot list, see, or access any other content in your Drive, and Google grants us access to a file only at the moment you pick it.
• Google Docs (documents, documents.readonly): Used to generate customer-facing documents (proposals, scopes of work, warranty letters) into Docs in your Drive so you can refine them in Docs before sending, and to read documents you select so their content can be imported into the Platform.
• Google Sheets (spreadsheets): Used to export operational reports (project lists, financials, employee schedules) into Sheets you own, and to import user-supplied spreadsheets (price lists, customer lists) during onboarding.
• Google Analytics (analytics.readonly): Used to read GA4 metrics (sessions, conversions, traffic sources) from your property to display in the marketing performance dashboard. Read-only — we never write to Analytics.
• Google Ads (adwords): Used to read and manage your Google Ads account on your behalf. We read campaign performance (spend, impressions, clicks, conversions) into the marketing performance dashboard so you can correlate ad spend with leads tracked in our CRM, and — when you authorize it — we create, update, pause, resume, and adjust budgets, bids, keywords, ad copy, audiences, and conversion tracking for the campaigns you ask us to manage. All campaign changes are initiated from within the Platform by you or by your authorized team members, are logged for auditability, and only affect the Google Ads accounts you have explicitly connected. You may revoke this access at any time, after which we will no longer read or modify your Google Ads data.
• Google Business Profile (business.manage): Used to display your Google reviews inside the Platform and to post replies to those reviews from the review-management dashboard. We use this scope to list your business accounts and locations during onboarding, list reviews, and post reply text you have written. business.manage is the only scope the Google Business Profile API publishes; there is no read-only variant.

How ContractorHUB Is Granted Access to Your Google Data

ContractorHUB is granted access to Google data in one of two ways, depending on how your organization administers Google. The scopes listed above are the same under either method, and we request no broader access in one than the other.

• Individual sign-in (per-user OAuth consent): In most cases an individual user connects their own Google account from Settings > Integrations and is shown a Google consent screen listing the exact scopes above. Access is limited to that user's own data and remains in effect until that user revokes it. This is the only method available for personal Google (gmail.com) accounts.
• Domain-wide delegation (administrator-granted): If your organization administers its own Google Workspace and your Workspace administrator has explicitly authorized ContractorHUB through domain-wide delegation, ContractorHUB accesses the Google data of users in your organization under that administrator authorization rather than through an individual sign-in consent. In this mode your administrator — not each individual user — approves and controls the access, the same scopes listed above still apply, and individual users may not see a separate consent screen. Your administrator establishes this in the Google Admin console by authorizing ContractorHUB's service-account client ID together with the specific scopes, and can review or remove that authorization there at any time.

Whichever method grants access, ContractorHUB uses Google data solely to provide the features you have authorized, applies the Limited Use commitments described in this section to that data, and logs each access for auditability.

How We Use Google Data

Data accessed from Google services is used solely to provide the features you have authorized within the Platform — unified email management, calendar synchronization, file storage, document and spreadsheet generation, marketing analytics, Google Ads campaign management and reporting, and review management. We do not use Google data for any purpose other than delivering the features you see and interact with in the Platform.

Google API Services Limited Use Disclosure

ContractorHUB's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke ContractorHUB's access to your Google account and delete every Google-sourced record we hold at any time, without contacting support. See our Google Data Deletion procedure for the self-serve flow, or sign in and visit Settings → My Google Data.

Prohibited Uses of Google Data

We will never:

• Sell or transfer Google data (including data accessed from Gmail, Calendar, Drive, Docs, Sheets, Analytics, Ads, or Business Profile) to advertising platforms, data brokers, or information resellers.
• Use Google data for serving ads, retargeting, personalized advertising, or interest-based advertising.
• Use Google data to determine credit-worthiness or for lending purposes.
• Use Google data to train machine learning or artificial intelligence models, except for user-specific personalization features within the Platform that you have explicitly authorized.
• Allow humans to read Google data, except (a) with your affirmative agreement for specific messages, (b) when necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) for internal operations where the data has been aggregated and anonymized.

Data Storage and Security for Google Data

Google data is transmitted using HTTPS with TLS 1.2 or higher and at least 128-bit SSL encryption for the Google Ads API. OAuth tokens and credentials used to access Google services are encrypted at rest using AES-256 and are isolated to your tenant. We access only the minimum data necessary to provide the features you have authorized. We do not create permanent copies of your Google data beyond what is needed to operate the Platform (such as cached message metadata for inbox display, synchronized calendar events, and imported review records).

Revoking Access

Where access was granted by an individual sign-in, you may disconnect your Google account and revoke ContractorHUB's access at any time through your account settings in the Platform or through your Google Account permissions page.

Where access was granted through domain-wide delegation, individual users cannot revoke it from their own Google Account, because the authorization was made at the organization level. Instead, your Google Workspace administrator removes the authorization for ContractorHUB's service-account client ID in the Google Admin console (Security > Access and data control > API controls > Domain-wide delegation).

Under either method, once access is revoked we stop accessing the affected Google data and delete any cached Google data within 30 days.

Managing and Deleting Google Data

You can manage and delete data that ContractorHUB has accessed from your Google account in the following ways:

• Disconnect integration: Navigate to Settings > Integrations in the Platform and disconnect your Google account.
• Revoke via Google (per-user): Visit Google Account permissions to remove ContractorHUB's access to your individual account.
• Workspace administrators (domain-wide delegation): Remove ContractorHUB's domain-wide delegation authorization in the Google Admin console under Security > Access and data control > API controls > Domain-wide delegation. This applies to organizations that authorized ContractorHUB at the domain level rather than per user.
• Request deletion: Contact privacy@contractorhub.app to request deletion of all cached Google data.

Advertising, Analytics, and Conversion Measurement

This section applies to our marketing site (contractorhub.app) — the pages where prospective customers learn about our product and submit demo or contact forms. Inside the Platform itself (after you sign in), we do not run third-party advertising or behavioral-tracking tags.

Use of the tools described below is gated by the choices you make in our cookie consent banner. You can reopen the banner and adjust your selection at any time using the Cookie Preferences link in the site footer, or by emailing privacy@contractorhub.app.

Tools We Use

• Google Analytics 4: Aggregated, session-level analytics covering pages visited, events triggered, and traffic sources. Used to measure site performance.
• Google Ads tag (gtag): When you arrive from a Google Ads click, the click identifier (gclid) is attached to your session so any conversion you later complete can be attributed to the campaign that drove your visit.
• Meta Pixel: When marketing-cookie consent is granted, page-view and event signals are sent to Meta to measure ad campaigns on Facebook and Instagram. You can opt out by declining marketing cookies in our consent banner or by adjusting your Facebook ad preferences.
• Other ad-platform click IDs: We also accept and persist click identifiers from Microsoft/Bing Ads (msclkid), LinkedIn (li_fat_id), TikTok (ttclid), X/Twitter (twclid), and Pinterest (epik) for the same purpose — attributing form submissions back to the campaign that drove the visit.
• Apollo website tracker: When marketing-cookie consent is granted, our pages load Apollo's tracker script, which transmits page-visit signals — your IP address, the page URL, and similar technical signals — to Apollo's servers (apollo.io / aplo-evnt.com). Apollo, a third-party sales-intelligence provider, uses these signals to identify the company associated with your visit for our sales and marketing team. No personal identifiers (such as your name or email) are collected from this tracker until you voluntarily submit a form. You can prevent this transmission by declining marketing cookies in our consent banner; Apollo's handling of the data it receives is governed by Apollo's privacy policy.

First-Touch Attribution Cookie

When you arrive at our marketing site from a tracked link (containing utm_*, gclid, fbclid, msclkid, or similar campaign parameters), we set a first-party cookie named ch_attr. It records which campaign brought you to the site, the landing page URL you arrived on, and the timestamp of your first visit. This cookie contains no personal information — only campaign attribution data — and expires after 90 days. If you submit a form during that window, the cookie's contents are attached to your submission so we can understand which marketing efforts produced the lead.

Enhanced Conversions (Hashed Contact Information)

When you submit a form on our marketing site that is configured for Google Ads "Enhanced Conversions for Leads" — and only when analytics cookies have been granted — your email address and phone number are hashed with SHA-256 inside your browser before being transmitted to Google Ads as part of the conversion event. The hashing is performed by Google's own tag library; we do not transmit your raw email or phone to advertising platforms. Google uses the hash to attribute your conversion to a prior ad click on a different device or session, and to improve the accuracy of its bidding algorithms. The hashing is one-way: the original values cannot be recovered from what is sent.

Your Choices

• Decline analytics or marketing cookies in our consent banner. This blocks the tools above at load time.
• Use browser-level ad-blocker or tracking-protection settings.
• Visit aboutads.info or YourAdChoices for industry-wide opt-out mechanisms.
• Contact us at privacy@contractorhub.app to request deletion of any form submission tied to your email address.

SMS/Text Message Communications

Consent and Opt-In

By providing your mobile phone number and opting in to the ContractorHUB Alerts SMS program, you consent to receive recurring automated SMS/MMS messages related to your account, including but not limited to: appointment reminders, job status updates, scheduling notifications, payment confirmations, and account alerts. You may opt in to receive text messages through our Platform, during account registration, or by texting a designated keyword to our short code or phone number.

Consent to receive text messages is not a condition of purchase or use of our Platform.

Message Frequency and Rates

Message frequency varies based on your account activity and notification preferences. You may receive multiple messages per week depending on your usage of the Platform. Message and data rates may apply. ContractorHUB is not responsible for any charges from your mobile carrier related to receiving text messages.

Information Collected via SMS

When you opt in to SMS communications, we may collect:

• Mobile Phone Number: Used to deliver text messages to your device.
• Opt-In/Opt-Out Status: Records of your consent preferences and any changes.
• Message Delivery Data: Information about message delivery status provided by carriers.

How We Use SMS Data

Your phone number and SMS-related data are used solely to deliver the text messages you have consented to receive and to manage your communication preferences. We do not use phone numbers collected for SMS opt-in purposes for any unrelated marketing or promotional activities without your separate explicit consent.

How Consent Is Collected

Consent is collected through web forms that display two clearly-labeled SMS consent checkboxes. These checkboxes are not pre-checked — you must actively check them to opt in. The first checkbox (required if you wish to receive any texts) covers informational messages. The second checkbox (always optional) covers marketing and promotional messages. Consent records, including the timestamp and IP address of the opt-in, are stored in our database for audit purposes. Screenshots of our opt-in forms:

• Contact form: View screenshot
• Beta/demo signup form: View screenshot
• Client lead form (used by customers of our tenants): View screenshot
• User/team member SMS opt-in (in-app profile): View screenshot

SMS Data Sharing

We do not sell, rent, or share your phone number or SMS opt-in data with third parties for their marketing purposes. Your information may be shared with our SMS service provider solely to facilitate message delivery. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

Opting Out of SMS

You can opt out of receiving text messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a one-time confirmation message and no further messages will be sent unless you re-subscribe. You may also opt out by contacting us at privacy@contractorhub.app or by updating your notification preferences in your account settings. Opting out of text messages does not affect your ability to use the Platform.

SMS Help

For help with our text messaging program, reply HELP to any message or contact us at support@contractorhub.app.

Supported Carriers

Our SMS program is supported by major U.S. carriers. Carriers are not liable for delayed or undelivered messages. T-Mobile is not responsible for delayed or undelivered messages.

Artificial Intelligence and Automated Processing

AI Features and Providers

ContractorHUB offers AI-powered features including a conversational assistant, automated business insights, and image analysis capabilities. These features are powered by the following third-party AI providers:

• OpenAI: Powers our conversational assistant, text generation, semantic search (embeddings), automated insights, and image-based analysis features such as roof measurement analysis.
• Anthropic (Claude): Used for internal platform diagnostics and engineering support tooling only. Anthropic is not used to process customer business data.

When you use AI features, your queries and relevant business data are sent to OpenAI for processing. All AI-generated responses within the Platform are clearly identified as AI-generated.

How Your Data Is Handled by AI Providers

We access AI services through their respective APIs, which operate under the following data practices:

OpenAI

• No model training: Data sent to the OpenAI API is not used to train or improve OpenAI's models. We have not opted in to data sharing for training purposes.
• Abuse monitoring: OpenAI may retain API inputs and outputs for up to 30 days for abuse and misuse monitoring, after which they are deleted.
• Embeddings: We use OpenAI's embedding models to power semantic search features. Text sent for embedding is processed and returned as numerical vectors; OpenAI does not store the original text beyond the abuse monitoring window.

Anthropic (Internal Tooling Only)

• Usage scope: Anthropic's API is used solely for internal platform diagnostics and engineering support tooling (such as automated issue triage for our observability system). It is not used to process customer business data or power any user-facing feature.
• No model training: Data sent to Anthropic's API is not used to train or improve Anthropic's models. Anthropic's API commercial terms prohibit use of customer data for model training.
• Data retention: Anthropic may temporarily retain API inputs and outputs for trust and safety purposes for up to 30 days, after which they are automatically deleted.

Content Ownership and Limitations

You retain ownership of the content you provide to AI features (inputs), and you own the AI-generated responses (outputs) to the extent permitted by applicable law. AI-generated content is provided for informational purposes only and should be reviewed by a qualified person before being relied upon for business decisions. AI outputs should not be represented as human-generated content.

Incident Response and Breach Notification

We maintain a documented incident response plan to detect, respond to, and recover from security incidents. In the event of a data breach that affects your personal information, we will:

• Notify affected users without unreasonable delay, and no later than 72 hours after becoming aware of the breach where feasible.
• Provide details about the nature of the breach, the types of data involved, and the steps we are taking to address it.
• Notify relevant regulatory authorities as required by applicable law.
• Offer guidance on steps you can take to protect yourself.

Privacy Complaints and Disputes

If you have a concern about our privacy practices or believe we have not handled your personal information in accordance with this Privacy Policy, you may submit a complaint to privacy@contractorhub.app. We will acknowledge your complaint within five (5) business days and provide a substantive response within thirty (30) days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Data Processing Agreement

For customers who require a Data Processing Agreement (DPA) to meet their own regulatory or compliance obligations, we offer a standard DPA that covers data processing terms, subprocessor commitments, security measures, and breach notification procedures. To request a copy, please contact legal@contractorhub.app.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

ContractorHUB
Email: privacy@contractorhub.app