Privacy Policy

This policy explains what ContractorSearch collects, why we collect it, and how we handle it. By using the Service you acknowledge this policy.

Account data. When you sign in (via WorkOS AuthKit), we receive identifiers such as your email address and a stable user id so we can create a wallet and keep your session.

Billing data. Payments are processed by Stripe. We store Stripe customer and subscription ids, credit grants, usage events, and invoice references. We do not store full card numbers.

Search data. We process the queries you submit, agent tool activity needed to answer them, and (if you are signed in) search history you choose to keep. Usage metering records token and Places call counts for billing.

Technical data. Standard request logs may include IP address, user agent, and timestamps for security, rate limiting, and debugging.

We use this information to provide searches, meter and bill usage, prevent abuse, improve reliability, and communicate about your account (for example, billing receipts from Stripe).

We rely on service providers to operate the product, including:

• WorkOS - authentication
• Stripe - payments and invoices
• Vercel / AI Gateway - hosting and model inference
• Google Places API - optional contractor contact and rating enrichment
• Neon - application database

Public contractor license data comes from the Arizona Registrar of Contractors Posting List. Permit history comes from public city/county sources where available.

When enrichment runs, we fetch live place details from Google. We do not permanently store Places display content (phone, reviews, hours, etc.) in our database. We may store a mapping from license number to Google place_id so repeat lookups can skip an extra search. Google's terms also apply to that content.

Account, wallet, and usage records are kept while your account is active and as needed for accounting, fraud prevention, and legal obligations. You may ask us to delete your account; we will remove or anonymize personal data where we are not required to retain it.

We do not sell your personal information. We share data with processors listed above to run the Service, or when required by law.

We use industry-standard protections (encrypted transport, sealed session cookies, server-side secrets for Stripe and API keys). No method of transmission or storage is perfectly secure.

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

We may update this policy by posting a new version on this page with a revised "Last updated" date.

Privacy questions: use the contact options published on the Service. See also our Terms of Service.