Privacy Policy

1. Information we collect

• Account information: your email address and password (passwords are stored hashed by our authentication provider — we never see them).
• Business profile: business name, trade, hourly rate, overhead, markups, license number, and contact details you enter to configure the Service.
• Work content: jobs, bids, invoices, payments, planner tasks, leads, and the photos, receipts, and voice recordings you upload or record for AI estimates, receipt scanning, and design previews.
• Payment information: handled by our payment processor (Stripe). We do not store full card numbers on our servers.
• Usage & device data: basic technical information needed to operate the Service securely (e.g., session and log data).

2. How we use your information

• To provide and operate the Service — generate estimates, build bids and invoices, scan receipts, run the AI coach and receptionist, and create design previews.
• To personalize your results (for example, learning your labor pace from how you adjust estimates).
• To process payments and manage your subscription.
• To provide support, maintain security, prevent abuse, and meet legal obligations.

3. AI processing

To power features like photo/voice estimates, receipt scanning, the coach, the receptionist, and design previews, the content you submit is sent to our AI provider, Google (Gemini API), solely to generate your result. We do not use your content to train our own models. Google processes API data under its own terms; we encourage you not to submit sensitive personal information you don’t want processed.

4. How we share information

We do not sell your personal information. We share it only with service providers who help us run the Service, under agreements that limit their use of it:

• Supabase — database, authentication, and hosting.
• Google (Gemini API) — AI processing of your submitted content.
• Vercel — application hosting and delivery.
• Stripe — payment processing (when paid plans are active).
• Twilio — text messaging for the AI receptionist (where enabled).

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change).

5. Data isolation & security

Your data is isolated to your account using row-level security, so other customers cannot access it. Data is encrypted in transit. Some data may be stored on your own device. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

6. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. You may request deletion of your account and associated data at any time (see Your Rights). We may retain limited records as required by law.

7. Your rights & choices

You may access, correct, export, or delete your information. To make a request, email us at ethan@boazcore.com and we will respond within a reasonable time.

8. California privacy rights

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell personal information. To exercise these rights, contact us at the email above.

9. Cookies

We use only essential cookies needed to keep you signed in and operate the Service. We do not use them for advertising.

10. Children

The Service is for business use by adults and is not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to this Policy

We may update this Policy from time to time. We will revise the effective date above and, for material changes, take reasonable steps to notify you.

12. Contact us

Questions about this Policy? Email ethan@boazcore.com.