Privacy Policy

1. Two different roles

• For contractors and their team members (our customers and their users), we decide how account information is used, and this policy applies directly.
• For homeowners and other customers of a contractor, the contractor decides what information to collect and how to use it, and we process it on their behalf as their service provider. The contractor's own privacy practices apply to it. If you're a homeowner with a question or request about your information, please contact the contractor; if you contact us, we'll pass your request to them and help them answer it.

2. What we collect

From contractors and their users

• Account information: name, email, password (stored only as a one-way scrambled hash we can't read), role, and two-factor settings where used.
• Business information: company name, phone, email, address, service areas, license numbers, logo, prices, and anything you write about your company.
• Billing information: your plan, subscription status and billing history. Card numbers are collected and stored by Stripe, not by us; we see only things like the card brand and last four digits.
• What you put into the app: customer records, bids, jobs, invoices, payments you record, expenses and receipt photos, job photos, notes, website content and messages.
• Card payments setup: if you connect Stripe to take card payments, Stripe collects the identity and bank information it needs. We receive your Stripe account ID and whether payments are enabled.

About homeowners (entered or collected by a contractor)

• Name, phone, email and property address; project details, photos, bids, invoices and payment status; and messages sent to them.
• When a homeowner signs a bid: the typed name, the date and time, IP address and browser information, kept as a record of the electronic signature.
• Requests sent through a contractor's website form: name, phone, email, address, the service wanted and the message.
• Card payments are entered on Stripe's secure page. We never see or store card numbers.

Automatically

• Security records: IP addresses of login and sign-up attempts, used to block break-in attempts and abuse.
• Usage: which days each user signs in, so we can count active users, and records of actions our support staff take.
• Server logs: our hosting provider keeps short-lived technical logs (such as IP address, browser and pages requested) to run and protect the service.

3. Cookies

We use only cookies the service needs: one that keeps you logged in, and one used when a contractor previews website changes. We don't use advertising or analytics cookies, tracking pixels, or third-party trackers. Stripe may set its own cookies on its payment pages to prevent fraud.

4. How we use information

• to provide the Service: build bids and websites, send bids, invoices and reminders, track jobs and money, and show reports;
• to bill subscriptions, give referral credits, and prevent fraud;
• to keep accounts and the Service secure, and to investigate misuse;
• to provide support, including, when you ask for help, viewing your account (each time our staff does, it's logged and the owner is emailed);
• to send account emails, such as receipts, trial reminders, security notices and your morning briefing (you can turn optional emails off in Settings);
• to improve the Service, using anonymous, combined statistics where possible;
• to follow the law and enforce our Terms.

We don't sell personal information, share it for targeted advertising, or use it for profiling that has legal or similarly significant effects on anyone.

5. Artificial intelligence

Some features send text or images to an AI provider (currently Anthropic) to draft content: for example, your business facts to draft website pages, bid details to draft a scope of work, or a receipt photo to read the vendor and amount. Under its commercial terms, Anthropic doesn't use this data to train its models. AI never sets prices.

6. Who we share information with

We share information only with service providers that help us run Ridgewise, under contracts that limit their use of it to providing services to us:

• Vercel: website and app hosting.
• Turso: database hosting.
• Stripe: subscription billing, and card payments for contractors who turn them on.
• Resend: sending email.
• Anthropic: AI drafting (see section 5).
• Twilio: sending text messages, once texting is available.

We may also share information:

• with the contractor it belongs to (for example, a homeowner's estimate request goes to that contractor);
• when the law requires it, or to protect the rights, safety or property of anyone, including to prevent fraud;
• if our business is reorganized, sold or transferred, with the new owner, who must honor this policy;
• with your permission.

7. Emails and texts

Messages to homeowners (bids, invoices, reminders, review requests) are sent on behalf of the contractor and come from them. To stop receiving them, reply to the contractor or contact them. Account emails to contractors are part of the Service. If we ever send marketing emails, every one will have an unsubscribe link.

8. How long we keep information

• While a contractor's subscription is active, we keep their data so the Service works.
• After a subscription ends, we keep it for 30 days in case they return or want to export it, then may delete it. Backups roll off over time after that.
• Security records like login attempts are kept for a limited time. Records we must keep by law (such as billing records) or need for disputes are kept as long as needed.

9. Security

We protect information with encrypted connections (HTTPS), hashed passwords, limits on login and sign-up attempts, two-factor authentication for our staff accounts, and access limited to people who need it. No system is perfectly secure, so we can't guarantee security. If a breach affects your personal information, we'll notify you and the authorities as the law requires.

10. Your choices and rights

You can see and update most of your information in the app, download your records as spreadsheets, and turn optional emails off. Depending on where you live, including under the Texas Data Privacy and Security Act and similar state laws, you may have the right to:

• know whether we process your personal information and get a copy of it;
• correct inaccurate information;
• delete your information;
• get your information in a portable format; and
• opt out of the sale of personal information, targeted advertising and certain profiling (we don't do any of these).

To make a request, email support@getridgewise.com from the address on your account, or tell us how to reach you. We'll verify your identity and reply within 45 days (we may extend that once by another 45 days when reasonably necessary, and will tell you if we do). An authorized agent can make a request for you with proof of your permission. If we decline your request, you can appeal by replying to our decision with "Appeal" in the subject; we'll answer within 60 days. If you're not satisfied with the appeal, you can contact your state attorney general (in Texas, at texasattorneygeneral.gov). We won't treat you differently for using these rights. Homeowners: since contractors control their customer information, we'll pass your request to the contractor and help them respond.

Browser privacy signals: because we don't sell information or use it for targeted advertising, there's nothing to opt out of, and we treat Global Privacy Control signals accordingly.

11. Children

Ridgewise is for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children under 13. If you believe we have, contact us and we'll delete it.

12. Where information is stored

Ridgewise is run from the United States, and information is stored and processed in the United States.

13. Changes to this policy

We may update this policy. If we make important changes, we'll tell contractors by email or in the app before they take effect. The date at the top shows when it last changed.

14. Contact

Ridgewise, a sole proprietorship based in Amarillo, Texas. Email: support@getridgewise.com.