Privacy Policy

1. Information we collect

Account and contact information: your email address, authentication identifiers, account status, and information you provide when contacting us. If you add professional branding, this can include your business name, contact name, email, phone number, website, and logo.

Project information: details you enter into estimates and saved projects, location information used for estimates or supplier searches, and files you choose to upload, such as photos, floor plans, and documents. Some tools also save project details and preferences in your browser.

Subscription information: payment-provider identifiers, selected plans, subscription status, and payment or referral records needed to manage access and billing. Stripe collects payment details through its payment interfaces; our application does not store full payment-card numbers or card security codes.

Usage and technical information: pages and features used, referral sources, account and checkout events, browser or device information, cookie identifiers, network information such as IP addresses, and diagnostic or security records. Invitations may include a recipient’s email address and delivery status. Only provide another person’s information when you have permission or another lawful basis to do so.

2. How we use information

We use information to create and protect accounts, verify access, provide estimates and project tools, save the content you request, process subscriptions, administer invitations and referral rewards, send service messages, respond to requests, and diagnose or prevent errors, fraud, and misuse.

We also use service-usage information to understand how the site is used and improve it, and retain records where needed for accounting, dispute resolution, or legal obligations. Where applicable privacy law requires a legal basis, we rely on performing our agreement with you, legitimate interests such as service security and improvement, legal obligations, or consent where required.

We don’t sell your email address or share it for marketing. Our account, email, payment, and other service providers process information as needed to deliver the services described here.

3. Service providers and other disclosures

We use Clerk for authentication and email verification; Stripe for payment processing and subscription management; Resend for service emails and invitations; and Replit and database/storage providers to host the application and store account records and uploaded files.

OpenAI processes prompts and any reference images submitted through AI image features. Google Maps/Places processes location and search parameters used to find suppliers. These providers receive the information needed for the features you use, rather than unrestricted access to every project.

The site also supports Umami usage analytics when enabled, to measure feature use and improve the service.

Providers have their own privacy notices and may process some information for their own security, fraud prevention, and legal obligations. Their retention and processing practices are governed by the applicable service terms and privacy notices.

We may disclose information when required by law, to respond to lawful requests, to protect rights and safety, or in connection with a business transfer subject to applicable protections. If you download or share reports, images, or project files, you control whom you give those copies to; they may include the contact details or project information you entered.

4. AI images and uploaded content

When you request an AI-generated or edited image, your prompt and any reference image used for that request are sent to our AI provider. Generated results may be returned to your browser and saved to your account when you choose to save them.

Do not submit passwords, financial account details, identity documents, sensitive personal information, or images you do not have permission to use. Photos and floor plans can reveal people, addresses, possessions, or private spaces; remove unnecessary details before submitting them. AI processing is subject to the provider’s applicable terms and retention practices.

5. Cookies, analytics, and browser storage

Cookies and similar storage support sign-in, security, preferences, and first-party usage and subscription analytics. Browser storage may also hold drafts, project information, and time-tracking data. Data saved only in a browser can be lost if you clear that storage or change devices.

Our application’s optional browser analytics respects recognized Global Privacy Control and Do Not Track signals. Necessary account, payment, referral, and security records may still be processed to provide the service. You can manage cookies and local storage in your browser; blocking or clearing them may sign you out or affect saved work.

6. Retention and security

How long information is kept depends on its purpose, your account and project activity, legal or accounting requirements, security needs, and the systems involved. Removing an item from the application does not necessarily immediately remove provider records, backups, or records needed for billing, fraud prevention, or disputes.

We use safeguards such as encrypted connections, account authentication, and access controls. No internet transmission or storage system is completely secure. Keep your sign-in details private and avoid uploading information that is not needed for your project.

7. Your choices and privacy requests

You can use the available project and file controls to download or delete individual saved items, and use billing management to manage your subscription. Canceling a subscription does not automatically delete your account or project data. Browser-only data can be removed through your browser’s storage controls.

Depending on where you live and the law that applies, you may have rights to access, correct, delete, or receive a copy of personal information, object to or restrict certain processing, or withdraw consent. Contact kai@bkaidufresne.com to make a request or ask about these rights. We may need to verify your identity and may retain information where a legal exception applies.

You may also have the right to complain to your local privacy regulator. Please do not include passwords, full card numbers, or other sensitive credentials in a privacy request.

8. Processing locations

bkaidufresne LLC is based in the United States. Our service providers may store or process information in the United States or other countries where they operate. This policy does not promise that all information remains exclusively in the United States. Applicable privacy laws and provider arrangements govern any required protections for international processing.

9. Children’s privacy

Our services are not directed to children under 13. If you believe a child has provided personal information through the service, please contact us so we can investigate and address the request.

10. Changes to this policy

We may update this policy as our services or practices change. The last-updated date identifies the current version. We will provide additional notice when required by applicable law.

11. Contact us

For privacy questions or requests, contact bkaidufresne LLC, Nashville, Tennessee, at kai@bkaidufresne.com.