Privacy Policy

• Business accounts: your name, email address, and password (stored only as a secure one-way hash), plus the business details you publish in your listing.
• Quote requests: your name, email, optional phone number, project type, and message, which we pass to the business you contact.
• Contact form: your name, email, optional phone number, topic, and message.
• Newsletter: your email address, the page where you signed up, and when you confirmed.
• Payments: handled by Stripe. We never see or store card numbers; we keep your plan, billing status, and invoice references.
• Technical data: your IP address and browser type when you sign in or send a form, used to prevent abuse and keep a security record.

• To run your account and listing, and to show your public business profile in the directory.
• To deliver quote requests to businesses and send you a receipt.
• To reply to your messages.
• To send the newsletter you confirmed, only after you confirm by email. Every newsletter has an unsubscribe link.
• To send account emails you need, such as email confirmation, password resets, security notices, and billing notices.
• To protect the site, for example by limiting repeated sign-in attempts and keeping an audit record of account and staff actions.

We don’t sell your personal information, and we don’t use it for advertising.

• The business you contact receives your quote request.
• Service providers that run the site for us: hosting, our database (MongoDB Atlas), email delivery, payments (Stripe), and our email marketing service for the newsletter. They may use the data only to provide their service to us.
• Google Fonts: pages load fonts from Google, which receives your IP address when they load.
• Authorities, when the law requires it.

We use only the cookies needed to keep you signed in to your business account. We don’t use advertising or tracking cookies. Visitors who don’t sign in get no cookies from us. When you open a business profile, your browser remembers (in its local storage, for that day) that you’ve seen it, so the business’s view count goes up by one only; only the count is sent to us, nothing about you.

• Quote requests and contact messages: 24 months, then deleted automatically.
• Security and audit records: 24 months.
• Newsletter sign-ups never confirmed: deleted about 5 weeks after sign-up.
• Copies of emails we send: the message body is erased once delivered, and the delivery record is deleted after 30 days.
• Accounts and listings: while your account is open. Ask us to close it and we’ll delete or anonymize your information, except what we must keep for tax and billing records.

You can update your account and listing at any time from your dashboard, and unsubscribe from the newsletter using the link in any newsletter email. To see, correct, or delete the personal information we hold about you, or to close your account, contact us. We’ll reply within 30 days. Depending on where you live, you may have further rights under your state’s privacy law, and we honor them.

Connections to the site are encrypted. Passwords are stored as one-way hashes, sign-in sessions use secure cookies that scripts can’t read, and staff access is limited by role and recorded. No system is perfectly secure, so please use a password you don’t use anywhere else.

The site is meant for adults. We don’t knowingly collect information from children under 13.

If we change this policy, we’ll update the date at the top, and for significant changes we’ll tell account holders by email. Questions? Contact us.