Privacy Policy

What we collect

• Account information. We collect your name, email address and mobile number, which you verify with a texted code. If you set a password, we keep only a secure scrambled form of it, never the password itself. If you sign in with Google, Google tells us your name, email address and an account ID; we never see your Google password.
• Addresses. We keep the addresses you save (a residence, a business or both), each with the name you give it. We use them so our crew can find the place and so we can look up the property's facts (below). We also use them to tell whether an address is inside the border of an HOA we serve.
• Property facts. For each address, we keep a short record of the property. It holds the roof's size and gutter run, from Google's satellite data. It holds the stories, siding and similar details, which our AI reads from a Google Street View photo of the building. It also holds the year built, size and lot from county parcel records, and any corrections or measurements you add. They help us price and prepare the work.
• Jobs with our crew. For each job, we keep what you write, the photos you upload and your answers to the job's questions. We also keep the estimate and quote, the booked time, the time on site, approved changes, the bill and any store receipts. We keep the crew's before-and-after photos and the messages between you, our crew and our team.
• DIY plans and quote checks. We keep your Fix it myself photos, plans and follow-up chats, and any contractor quote documents you upload to Fair Quote. Quote documents stay private to you. They are never shown to our crew or anyone else.
• HOA membership. We note which HOA your address is in, if it is one we serve. We work it out from your address and the county's parcel map, or from what you tell us. When it is unclear, a person on our team checks. HOA membership is optional and never required to book our crew.
• Service history. We keep a record of the jobs we did for you, the deals you joined, when, and what you paid. If you have a membership, we also keep its plan, dates and payments.
• Communication preferences. We keep your notification settings. If you turn on notifications on a phone or browser, we also keep the code that device gives us for sending them.
• Usage data. We use privacy-friendly page analytics from our hosting provider (Vercel Web Analytics). It counts page views and general region, without cookies, and is never tied to your identity.

We keep records of errors and of which screens and steps are used, tied to your account when you are signed in, so we can fix problems and improve the service. These records are not shared or sold and are deleted within 90 days.

How our AI features use your photos

• Some requests send your descriptions, photos and uploaded documents to our AI provider, Anthropic, to generate the result. These are a job request, a DIY plan or its follow-up chat, and a Fair Quote check. Anthropic also reads the street photo of your building for your property facts. It helps our team read and answer the messages you send us. It also answers our crew's questions about a job, sometimes with photos of the work. Anthropic processes them as a service provider under its commercial terms, and it does not use your content to train its AI models.
• Your photos are stored with your job so you, our crew and our team can see them. They are not published anywhere public unless you tick the box that lets us show before-and-after photos of your job. If you do, we may show them on our website's Our work page and our social pages. We never show them with your name, address or city.
• Without your explicit permission, we do not sell your photos, use them in advertising or share them beyond the job you asked us to do.
• Photos and documents are kept while the job, DIY plan, or quote check exists and are deleted when your account is deleted. You can also ask us to remove a specific item's photos at any time by emailing privacy@bundlehood.com.

Inspection reports

When you upload or forward a property inspection report, we keep the file for 30 days and then delete it. Our AI service (Anthropic) reads it to find the property's address and the items the inspector flagged. The report is never used to train the AI. The checklist we make from it stays on your account. It holds the items, the inspector's notes and the photos taken from the report. It goes with any request or booking you make from it, so our team and crew can see the work. If you share the checklist, people who open your link and make an account see the checklist, not the file. They can see it until you turn the link off. We never contact the people you share it with. A report you forward by email is read from your email's attachment; we do not keep the email itself. Deleting your account deletes your reports, their files and their checklists.

Cookies

We use only essential cookies. One keeps you logged in, and a few let our hosting platform serve the site securely. Our card processor, Stripe, also sets fraud-prevention cookies when you enter a card. We use no advertising cookies, do no cross-site tracking and sell no browsing data. That is why you do not see a cookie banner.

How long we keep things

• Account, jobs, DIY plans, quote checks and photos: we keep them while your account exists and remove them when you delete your account. We keep anonymized service records for our financial reporting. If you delete your account with a bill unpaid, we keep that bill in those records, without your name, until it is settled.
• Video estimate calls: we never record or transcribe them, so there is nothing to keep. The booking itself (the time and what you wanted to discuss) is kept like any job request.
• Analytics: the figures are combined and anonymous. Nothing ties back to you, so there is nothing to delete.

Text messages

• When you verify a phone number with us and tick the box, you agree to receive texts about your own jobs. These are a sign-in code, a booking confirmation, a reminder the day before a visit, and on-the-way and job-done updates. Expect about 2 to 5 texts per job. We never send marketing texts, and we never sell or share your number.
• We also text appointment and video-call reminders. If you miss a video call, we text you a link to book it again.
• Message and data rates may apply. Reply STOP at any time to stop texts, or HELP for help. You can also choose “Email only” on your Account page, under How we reach you. Job updates then arrive by email instead. The full program description, with the opt-in screen, is at bundlehood.com/texting.

Video estimate calls

• Free video estimate calls run on Daily, a video infrastructure provider. During a video call you can also send chat messages and share your screen. Daily handles these the same way as the call itself, and nothing is recorded. The video and sound travel between you and our estimator in real time. We do not record calls, and we do not transcribe them. Neither we nor Daily make or keep a recording, an audio file or a written transcript.
• Daily receives the live video and sound and the names shown on the call (yours and the estimator's). It also receives the technical details any video connection needs, such as your device's internet address and when you joined and left. It does not receive your address, email, phone number or the details of your job.
• Each call belongs to one booking. Only you and BundleHood's team can join it: the estimator assigned to your call, or a member of our team. You join from the link in your reminder, logged in to your account, in a web browser or the BundleHood app. The link does not work for anyone else.
• You book a call through the same request form as any job, and tell us what you'd like to discuss. No card is needed. After the call, the estimator sends you a quote to approve or decline.

What we do not collect

• We do not store card numbers. You need a card on file to book a job or join a deal. You do not need one to sign up, ask for a quote or book a video estimate call. You type your card into a form from our payment provider, Stripe, and Stripe keeps it. We keep only the card's brand, last four digits and expiration date.
• We do not track you across the web. We do not sell your data to advertisers or third parties.
• We do not record or transcribe video calls, and we never record audio. If you use the microphone button to describe a job, your phone or browser turns your words into text. We receive only the text.

Who can see your data

• Your HOA board does not see your data at all. BundleHood operates independently from any HOA board. Boards are not granted accounts, dashboards, or aggregate views.
• Our crew sees your name and phone number, the address, the job details, the photos, the property's facts and the access notes. They see these for jobs offered or assigned to them, and for jobs not yet given to anyone. They never see your card details.
• BundleHood staff can access your account to handle support requests, fraud review, and operational issues. We log every time a staff member opens a customer's records.
• Other residents in your HOA only see the aggregate count of who's committed to a deal, never individual names. Your jobs and DIY plans are never visible to neighbors.

Your rights

• Export your data. Go to your Account page and open Delete my account to download a copy of everything we have about you.
• Delete your account. You can do this on the same page. We remove your personal information, including your job photos and messages, DIY plans and quote checks. We keep anonymized service records for our financial reporting. A paid membership is canceled first. The page bundlehood.com/account/delete lists what is erased and what is kept. It also explains how to ask us to delete your account if you cannot log in.
• Update your information at any time from your account pages.
• State privacy laws. If your state gives you additional rights (such as California's CCPA/CPRA), we honor them. Email privacy@bundlehood.com, and we will help. We do not sell personal information, so there is no sale to opt out of.

Where we store data

Our database is hosted by Supabase in the United States. It is encrypted to industry standards, both in transit and at rest. Photos are kept in our hosting provider's file storage (Vercel), at private web addresses that cannot be guessed. We use a small set of service providers to run BundleHood. Each one, and what it receives, is listed below.

• Anthropic: AI.
• Daily: video estimate calls.
• Twilio: texts and phone codes.
• Resend: email.
• Stripe: payments and memberships.
• Vercel: hosting, photo storage and page analytics.
• Mapbox: address search and maps; it receives the address you type.
• Google: sign-in, if you choose it, and your address's map point, used to read the roof and a street photo of the building.
• Apple and your browser's push service: notifications you turn on.
• Lob: printing and mailing our community-deal postcards; it receives a street address.
• National Weather Service: the forecast for an outdoor job; it receives the address's map point.

Each receives only the data needed to perform its function. Property records come from county parcel data licensed from Regrid (Parcel data © Regrid). We keep our own copy without owners' names, and we send Regrid nothing about you.

Children

BundleHood is for adults age 18 and older. We do not knowingly collect information from anyone under 18. Please avoid including people, especially children, in your job photos.

Changes to this policy

We'll update the “Last updated” date at the top of this page when this policy changes. Material changes will be communicated by email to active accounts.

Contact

If you have questions about this policy, email privacy@bundlehood.com.