Privacy Policy

This Privacy Policy explains how [COMPANY LEGAL NAME] ("JobDeposit," "we," "us") collects, uses, shares, and protects personal information when you use the JobDeposit website, web application, and held-deposit and milestone-payment services (the "Platform"). It is part of our Terms of Service.

1. Information we collect

• Account and identity: name, email, phone number, mailing address, password, identity and business verification data (EIN / TIN match), and state contractor license and insurance certificates.
• Property and project: property address and ZIP code (within our eligible SERVICE_STATES), project scope, milestone schedules, task checklists, messages, dispute submissions, and reviews.
• Photos and media: task and dispute photos submitted by Contractors and Homeowners, which may show the home's interior, exterior, work in progress, and surroundings.
• Image metadata (EXIF) and perceptual hashes: capture timestamp, camera/device fields, perceptual image hashes (phash) for duplicate detection, and precise GPS coordinates embedded in task photos to confirm photos were captured at the job site after project start.
• Location: precise location from the in-app photo capture flow (with your device permission) and approximate location derived from IP address and ZIP code to enforce service-area eligibility.
• Payment and business bank account data: payment card and bank details are collected and stored by our third-party payment processor ([PAYMENT PROCESSOR, e.g., Stripe, Inc.]); we receive limited tokens and metadata (such as card/account last 4 digits, routing last 4 digits, business account holder name, and verification status).
• Device, cookies, and usage: IP address, browser type, session identifiers, request logs, and cookie preferences. See our Cookie Policy.
• From third parties: state licensing boards, insurance verification services, business/KYB verification vendors, lead partners, and (with consent where required) background-check providers.

2. How we use personal information

We use personal information to: operate the Platform; verify Contractor licenses, insurance, business EINs, and business bank accounts; run automated AI photo verification and fraud/duplicate checks; fund held deposits and release, hold, refund, or reverse milestone payments through our Processor (see the Payment & Funds-Holding Terms); administer disputes; match and deliver project leads (see the Lead Generation Terms); send transactional email and SMS alerts (see the SMS Terms); provide customer support; secure the Platform; comply with tax and legal obligations; improve our services using de-identified or aggregated data; and, with consent where required, send marketing communications.

3. AI processing

Task photos, captions, EXIF/check flags, and milestone scope descriptions are transmitted to our AI vision providers ([AI PROVIDERS, e.g., Google Gemini and OpenAI]) acting as our service providers to evaluate whether submitted photos match the agreed milestone tasks. Where available, we configure and contractually restrict AI providers from using customer content to train their foundation models. Because automated verification affects milestone payment releases, you may request human review or file a dispute at any time (see the AI Photo Verification Disclaimer).

4. How we share personal information

• With the other project party: task photos, AI verification summaries, milestone progress, and dispute evidence are shared between the Homeowner and Contractor on the project.
• With verified Contractors for leads: when a Homeowner submits a lead request, we share project and contact details with matched Contractors holding a Verified Pro badge in that trade and ZIP code, with the Homeowner's consent.
• With service providers and processors: our payment Processor ([PAYMENT PROCESSOR, e.g., Stripe, Inc.]), cloud infrastructure ([HOSTING PROVIDER]), AI vision providers, license/insurance/EIN verification vendors, SMS/email delivery providers, and support tools under confidentiality and data-processing terms.
• For legal, compliance, and safety reasons: to comply with subpoenas or law, enforce our Terms of Service, prevent fraud, or protect the rights and safety of users or the public.
• In a business transfer: in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information for monetary consideration. Sharing Homeowner lead requests with matched Contractors or enabling optional advertising cookies (if any) may be classified as a "sale" or "sharing" under certain state privacy laws; you may opt out at any time under Section 7. [ATTORNEY: confirm state-law classification of lead matching.]

5. Data retention

We retain project records, task photos, AI verification logs, and payment/dispute records for [7] years after project completion or account closure to satisfy tax, audit, dispute-resolution, and construction statute-of-repose requirements, after which we delete or irreversibly de-identify the data unless a longer legal hold applies.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, least-privilege access controls, and tokenized payment handling through our Processor. No method of transmission or storage is guaranteed to be 100% secure.

7. Your state privacy rights

JobDeposit operates only in supported United States jurisdictions (SERVICE_STATES) and does not operate in excluded jurisdictions. Residents of supported U.S. states with comprehensive consumer privacy laws—including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia—have specific rights regarding their personal information, subject to statutory exceptions:

7.1 Applicable state privacy rights

• Right to know and confirm: confirm whether we are processing your personal information and access the categories and specific pieces of personal information we hold.
• Right to correct: request correction of inaccurate personal information in your account or profile.
• Right to delete: request deletion of personal information we collected from or about you, subject to retention needed for active projects, held deposits, milestone payments, disputes, or legal compliance.
• Right to data portability: obtain a portable, machine-readable copy of your personal information.
• Right to opt out of sale, sharing, and targeted advertising: opt out of any processing classified as a "sale" of personal information, "sharing" for cross-context behavioral advertising, or targeted advertising.
• Right to limit or withdraw consent for sensitive personal information: limit use of, or withdraw consent for processing, sensitive personal information—specifically precise GPS geolocation in photo EXIF metadata, government-issued identification/licensing numbers, and financial account credentials—to what is strictly necessary to verify on-site work, validate Contractor credentials, and process milestone payments.
• Right to opt out of automated profiling and request human review: opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, and request human review of any automated AI photo verification decision (see the AI Photo Verification Disclaimer).

7.2 How to submit a request and verification

Submit a privacy request by emailing [PRIVACY EMAIL], using our webform at [PRIVACY REQUEST WEBFORM], or calling [TOLL-FREE NUMBER]. To protect your account, we verify your identity by matching at least two data points (such as your registered email address, phone number, or recent project ID) or requiring you to sign in. We respond to verifiable requests within 45 days (with one 45-day extension when reasonably necessary, with notice). We will not discriminate or retaliate against you for exercising your privacy rights. Authorized agents may submit requests on your behalf with signed written permission and verification of the consumer's identity.

7.3 Right to appeal

If we decline to take action on your privacy request, we will explain the reason in writing. You may appeal our decision within 60 days by emailing [PRIVACY EMAIL] with the subject line "Privacy Rights Appeal". A senior privacy reviewer who was not involved in the initial determination will review your appeal and respond in writing within 45 days (or shorter where required by your state's law). If your appeal is denied, our response will include a link or contact method to submit a complaint to your state's Attorney General.

7.4 Global Privacy Control (GPC)

We recognize and honor browser-based Global Privacy Control (Sec-GPC: 1) signals automatically as a valid request to opt out of the sale or sharing of personal information and targeted advertising for that browser or device.

7.5 Notice at collection and category summary

• Categories collected: identifiers (name, email, phone, IP); commercial and project records (held deposits, milestone schedules, lead requests); financial account metadata (last 4 digits, routing last 4, bank approval status); internet and device activity (session logs, cookies); visual information (job-site task and dispute photos); professional/licensing records (contractor license, COI, EIN); and sensitive personal information (precise EXIF GPS coordinates, government ID/EIN, contractor bank account verification).
• Purposes and retention: collected to deliver the held-deposit, AI verification, lead-matching, and milestone-payment services described in Sections 1–4 and retained for the periods stated in Section 5.

8. Children

The Platform is intended solely for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. Contractors and Homeowners should avoid photographing any person, especially minors, when capturing task photos.

9. Photos of individuals and bystanders

Homeowners and Contractors should frame job-site photos to capture only the construction work and avoid people, personal documents, or family photos. Contact [PRIVACY EMAIL] to request removal or redaction of an uploaded image containing your likeness.

10. United States processing

The Platform is operated in the United States and personal information is stored and processed in the United States.

11. Changes and contact

We will post updates to this Privacy Policy with an updated effective date and notify you of material changes as required by law. Contact us at [PRIVACY EMAIL] or [COMPANY LEGAL NAME], [ADDRESS].