Privacy Policy

1. Who we are

SnapRepairPro ("SnapRepairPro," "we," "our," or "us") provides an AI-powered home repair diagnostic tool and, where available, connects homeowners with independent contractors. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to https://www.snaprepairpro.com, our mobile applications, and any other service we offer that links to this Policy (collectively, the "Platform").

For purposes of state privacy laws including the Oregon Consumer Privacy Act (OCPA), the California Consumer Privacy Act (CCPA/CPRA), and similar laws, SnapRepairPro is the controller (or "business") of the personal data described below.

2. Information we collect

2.1 Information you provide to us

• Account information: name, email, password (stored as a hash), and zip code or service area.
• Project information: photographs you upload, descriptions of the issue, room or location within the home, and any notes, checklist progress, or material purchases you record.
• Pro-request information: if you ask to be matched with a contractor, your full street address, phone number, preferred contact times, and project budget or scope.
• Communications: messages you send us through support channels, feedback, and survey responses.
• Payment information (when applicable): payments are processed by a third-party processor (such as Stripe). We do not store full payment card numbers on our servers.

2.2 Information collected automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, features used, timestamps, and crash logs.
• Approximate location: derived from your IP address or, if you grant permission in our mobile app, from your device. We use approximate location to match you with Pros in your area. We do not sell precise geolocation data and do not collect precise location without your permission.
• Photo metadata: the photos you upload may contain embedded EXIF data such as date taken, camera type, and GPS coordinates. We strip GPS coordinates from photos before sharing them with Pros. We may retain the original EXIF on our servers solely to diagnose technical issues.
• Cookies and similar technologies: we use first-party cookies to keep you logged in, remember your preferences (including dark mode), and measure how the Platform is used. See Section 9 for details and choices.

2.3 Information from third parties

• Public licensing data: we obtain contractor license information from state contractor licensing boards and similar public sources to populate the Pro directory.
• Authentication providers: if you sign in using a third-party identity provider, we receive the basic profile information that provider shares (typically name and email).

2.4 Information we do NOT intentionally collect

We do not ask for, and you should not upload: Social Security numbers, driver's-license numbers, financial account numbers, medical or health information, biometric identifiers, or images of identifiable people other than yourself. If you upload such information accidentally, contact us and we will delete it.

3. How we use your information

We use the categories of information above for the following purposes:

• Provide the AI diagnostic service: send your photo and description to our AI processor (currently Anthropic, see Section 4), receive the resulting analysis, and display it to you.
• Match you with Pros: when you affirmatively request a Pro match, share project information with eligible local contractors as described in Section 5.
• Operate, maintain, and improve the Platform: debug, prevent fraud and abuse, measure feature performance, and conduct internal research and analytics. We may use de-identified or aggregated data for product improvement.
• Communicate with you: send job updates, system notifications, security alerts, customer-support replies, and (if you have opted in) product news and tips.
• Safety and legal compliance: enforce our Terms of Service, investigate suspected violations, comply with subpoenas and other legal process, and protect the rights, property, and safety of users and third parties.

3.1 AI training disclosure

We do not sell your photos or descriptions to AI companies for training, and our current AI processor (Anthropic) does not train its models on data sent through the Anthropic API. We may use de-identified prompts and outputs internally to evaluate model performance, build benchmarks, and fine-tune internal classifiers (for example, a classifier that detects when a photo is too blurry to analyze). If we ever choose to use identifiable User Content to train a generative model, we will update this Policy and obtain any consent required by law.

4. AI service providers

We do not operate our own large language models. To generate AI Output, we send your photo and description to a third-party AI processor under a written data-processing agreement. As of the date of this Policy:

• Primary AI processor: Anthropic PBC (Claude models), accessed via the Anthropic API. Anthropic does not use API data to train its models by default.

Anthropic processes your content as our "processor" under state privacy laws and is contractually limited to using it solely to provide the AI service to us. Their privacy practices are described at https://www.anthropic.com/legal/privacy. We will update this Section if we add, remove, or change AI processors.

5. How we share your information

We share personal data only in the situations below. We do not sell personal data, and we do not share it for cross-context behavioral advertising.

5.1 With contractors and Pros — only with your action

When you use the Find-a-Pro feature, sharing happens in two stages:

• Stage 1 — Anonymized broadcast: we share a sanitized version of your job with local Pros that fits the trade and zip-code area. This includes your photo (with GPS metadata stripped and faces, addresses, or other identifying details masked when reasonably possible), the AI-generated description, and an approximate location (zip code or neighborhood). It does NOT include your name, street address, email, or phone number.
• Stage 2 — Contact reveal: your name, address, and contact information are shared with a specific Pro only after you affirmatively select that Pro and approve the connection, or after a Pro completes the contact-reveal step disclosed in the Pro Portal. You will see a confirmation screen before any contact information leaves the Platform.

Once you connect with a Pro, that Pro is an independent business and becomes a separate controller of any information you share with them directly. Their privacy practices are governed by their own policies.

5.2 With service providers (processors)

We share personal data with vendors who help us operate the Platform under written agreements that limit their use of the data to providing services to us. Current categories include:

On request, we can provide an Oregon resident with a list of the specific third parties to whom we have disclosed their personal data, as required by ORS 646A.570 et seq.

5.3 For legal reasons and safety

We may share information when we believe in good faith that doing so is necessary to (a) comply with a law, regulation, court order, subpoena, or other legal process; (b) enforce our Terms of Service; (c) detect or prevent fraud, security incidents, or illegal activity; (d) protect the rights, property, or safety of SnapRepairPro, our users, or the public; or (e) respond to an emergency involving risk of serious harm.

5.4 Business transfers

If SnapRepairPro is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We will provide notice through the Platform or by email before personal data becomes subject to a different privacy policy.

5.5 With your direction

We share information at your direction — for example, if you choose to forward a repair plan to a friend or share a job summary.

6. SMS messages and TCPA disclosures

6.1 Transactional SMS

If you provide your mobile number in connection with a project (for example, to receive a status update when a Pro accepts your job), you are providing prior express consent under the Telephone Consumer Protection Act (TCPA) to receive informational text messages from SnapRepairPro at that number. These messages may be sent using an automated system. We send only the texts reasonably necessary to support the service you requested, such as job-acceptance alerts, Pro arrival notifications, and account-security alerts.

6.2 Marketing SMS (opt-in only)

We will send you marketing or promotional text messages only if you have given prior express written consent through a separate, clear, and conspicuous checkbox or similar mechanism. Marketing SMS consent is not a condition of using the Platform. Message frequency varies.

6.3 Opt-out and message rates

Standard message and data rates may apply. You may opt out of any SMS messages at any time by replying STOP to any message from us. Reply HELP for help, or contact privacy@snaprepairpro.com. After you reply STOP, you may receive one confirmation message acknowledging the opt-out.

6.4 Carrier disclaimer

Wireless carriers are not liable for delayed or undelivered messages. We do not share your mobile number with third parties for their own marketing purposes.

7. How long we keep your information

We retain personal data only as long as needed for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. General retention guidelines:

• Account data: for the life of your account, plus up to 90 days after deletion for backup and legal purposes.
• Project photos and AI outputs: kept while your project is active and visible on your dashboard; you can delete a job at any time. Trashed jobs are purged from active storage within 30 days and from backups within 90 days.
• Anonymous-broadcast records: retained for up to 12 months for fraud detection and quality measurement.
• Support and security logs: up to 24 months, longer if needed to investigate an active incident.
• Records required by law (tax, accounting, dispute resolution): as long as required by applicable law.

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights with respect to your personal data:

• Access / Know: ask us to confirm whether we process your personal data and to provide a copy.
• Correct: ask us to fix inaccurate information.
• Delete: ask us to delete personal data we have collected from you.
• Portability: ask for a copy of your data in a portable, machine-readable format.
• Opt out of targeted advertising, sale, or significant profiling: we do not sell personal data, do not use it for cross-context behavioral advertising, and do not use it to make decisions that produce legal or similarly significant effects about you. If that changes, you will be able to opt out.
• Third-party disclosure list (Oregon): Oregon residents may request a list of the specific third parties to whom we have disclosed their personal data.
• Non-discrimination: we will not deny service, charge different prices, or provide a different level of quality because you exercised a privacy right.
• Appeal (where applicable): if we deny a rights request, you may appeal by replying to our denial email. If your appeal is denied, you may contact your state Attorney General.

8.1 How to exercise these rights

Send your request to privacy@snaprepairpro.com from the email associated with your account, or use the in-app deletion controls on your dashboard. We will respond within 45 days, with a permissible 45-day extension where reasonably necessary. We may need to verify your identity, typically by confirming control of the email or phone number on file. You may authorize an agent to make a request on your behalf, subject to verification.

8.2 Universal opt-out signals (GPC)

Effective January 1, 2026, the Oregon Consumer Privacy Act requires us to honor universal opt-out mechanisms. We recognize the Global Privacy Control (GPC) signal sent by your browser as a valid opt-out of any sale of personal data or targeted advertising. Because we do not currently engage in either, the GPC signal will not change what data we collect; we will continue to honor it as the laws and our practices evolve.

9. Cookies and tracking

We use a small number of cookies and similar technologies for the following purposes only:

• Strictly necessary: session and authentication cookies that keep you logged in.
• Preferences: remember settings such as dark mode and language.
• Analytics: first-party measurement of feature usage in aggregate.

We do not use third-party advertising cookies or cross-site tracking pixels. You can clear or block cookies through your browser settings, but doing so may break login and other essential features.

10. How we protect your information

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest for stored photos and database records, hashed passwords, role-based access controls, secret management, audit logging, and routine security review. No system is perfectly secure; we cannot guarantee that unauthorized access will never occur. If a breach affects your personal data, we will notify you and applicable regulators as required by law.

11. Children's privacy

The Platform is intended for users aged 18 and older. It is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data, contact us at privacy@snaprepairpro.com and we will delete it. Effective September 26, 2025, we also do not sell or share for targeted advertising the personal data of any user we know to be under 16, as required by Oregon HB 2008.

12. Region-specific disclosures

12.1 California residents (CCPA / CPRA)

In the prior 12 months, we have collected the following categories of personal information: identifiers (name, email, IP); customer records (account and project information); commercial information (Pro-request history); geolocation (approximate, derived from IP or with permission); internet-or-network activity (usage logs); visual information (uploaded photos); and inferences (e.g., suggested repair categories generated by AI). We have not "sold" or "shared" personal information as those terms are defined under the CCPA. California residents have the rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination. Contact privacy@snaprepairpro.com to exercise these rights.

12.2 Oregon residents (OCPA)

Oregon residents have the rights described in Section 8, including the unique right to request a list of the specific third parties to whom we have disclosed your personal data.

12.3 Other state residents

If you live in Colorado, Connecticut, Virginia, Texas, Utah, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another state with a comprehensive privacy law, you may have rights similar to those above. Contact us using the information below.

12.4 EEA, UK, and Switzerland

The Platform is operated from the United States and is intended for users in the United States. If you access the Platform from the EEA, the UK, or Switzerland, your personal data will be transferred to and processed in the United States, which may have data-protection laws different from your home jurisdiction. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

13. Changes to this Policy

We will update this Policy from time to time. When we make material changes, we will post the updated Policy with a new "Last updated" date and, where appropriate, provide additional notice (such as an in-app banner or email). Your continued use of the Platform after the changes take effect constitutes your acceptance of the updated Policy.

14. How to contact us

Privacy questions, requests, or complaints:

SnapRepairPro
Privacy contact: privacy@snaprepairpro.com
General contact: support@snaprepairpro.com
Website: https://www.snaprepairpro.com

You may also lodge a complaint with the Oregon Attorney General's Office or the privacy regulator in your jurisdiction.