Privacy Policy.

1. What we collect

We collect the following, depending on how you use Domestra:

• Account information: your email address and whether you are a homeowner or a contractor.
• Project information (homeowners): the type of project, your answers to our questions, your description, your ZIP code, and the photos or documents you upload.
• Contact information (homeowners): your name and phone number, which we verify by texting you a code, and the email you signed in with. Contractors receive these only as described below.
• Business information (contractors): company name, license number, years in business, number of employees, hours, service area and project types, logo, website and social links, a phone number, which we also verify by texting you a code, and the documents you upload to verify your license and insurance.
• Payment information (contractors): handled by Stripe. We keep Stripe's reference numbers, your card's brand and last four digits, and a record of charges. We do not receive or store your full card number.
• Messages and reports you send us, and notifications we send you.
• Technical information: basic logs such as your IP address, browser type, and pages requested; a cookie that keeps you signed in; and, through Google Analytics, aggregated information about how visitors use the site, such as which pages are viewed.

2. Where it comes from

Mostly from you. We also use public records, such as the California State License Board's license information, and information from our service providers, such as Stripe, about whether a payment succeeded.

3. How we use it

We use your information to:

• run the marketplace: show projects to eligible contractors, show ranges to homeowners, and release contact details when a contractor accepts;
• verify contractors and keep the platform safe, including preventing fraud and abuse;
• process contractor payments and send receipts;
• send you notices about your account and project, such as sign-in links and new ranges;
• respond to reports and requests, and improve the service; and
• comply with the law and enforce our terms.

4. Who we share it with

Contractors, in a limited way. Before a homeowner is contacted, only the contractors you invite (up to five, chosen from contractors who serve your area and do your type of work) see your project answers, description, ZIP code, and photos, but not your name, phone number, or email. A contractor sees your name, phone number, and email only after you asked that contractor to contact you and they accepted. A contractor's business details and range are shown to the homeowner who received the range, and their website and social links are shown only after they accept that homeowner's request.

Service providers who help us run Domestra, under contract: our hosting provider (Vercel), our database, sign-in, and file storage provider (Supabase), our payment processor (Stripe), an error-monitoring tool (Sentry) that helps us notice and fix bugs, an email delivery provider (Resend) and a text messaging provider (Twilio) for the notices and verification codes described above, and Google Analytics, which helps us understand how visitors use the site. They may use the information only to provide services to us.

Legal and safety reasons: to comply with the law, respond to valid legal requests, protect people's safety, or enforce our terms. And if Domestra is sold or merged, information may transfer to the new owner, who must honor this policy.

We do not sell your personal information, and we do not share it with others for cross-context behavioral advertising. We use Google Analytics only to measure how people use the site, such as which pages are visited; we do not use it to show you ads or share your information with advertisers.

5. How long we keep it

We keep your information while your account is open and as long as needed to run the service, resolve disputes, and meet legal, tax, and accounting obligations. In practice: payment and charge records are kept for 7 years, matching standard tax and accounting recordkeeping practice; a contractor's license and insurance verification documents are kept while the account is active and for 2 years after it closes, in case a dispute about work done during that time needs them.

Homeowners can delete their account themselves from the account page. When you do, we delete your name, email address, phone number, photos, and project descriptions and answers, and we sign you out. We keep a record of each project with no owner attached, showing only the type of project and the ZIP code, so that contractors' payment and range records stay accurate. Reports you made stay for our records without your name on them. A contractor who accepted your request keeps the contact details you shared with them, because you chose to share them; they may use those details only for your project, and you can ask them directly to delete them. Contractors can ask us to delete their account at privacy@domestra.com; we keep payment and verification records as the law requires.

6. Your California privacy rights

If you are a California resident, you have the right to:

• know what personal information we collect, use, and disclose;
• ask us to delete your personal information, and to correct information that is wrong;
• opt out of the sale or sharing of your personal information (we do not sell or share it);
• limit our use of sensitive personal information (we do not use it in ways that need a limit); and
• not be treated differently for using these rights.

7. How to use your rights

Homeowners can delete their account and personal details themselves, at any time, from the account page. For anything else, email us at privacy@domestra.com. We will confirm it is you, usually by using your account email, and respond within 45 days, or tell you if we need more time. You can ask someone to act for you, and we may ask for proof. We honor browser signals such as Global Privacy Control.

8. Security

We use safeguards including encrypted connections, access rules in our database so people see only what they are allowed to, private storage for uploaded documents, and limited staff access. No system is perfectly secure, so we cannot guarantee that your information will never be accessed without permission. Tell us right away if you think your account was misused.

9. Other choices

You can close your project, update your profile, or ask us to close your account. You can ask to stop non-essential emails, though we will still send account and safety messages. Beyond the code we text to verify your phone number, we send other texts only if you turn that on separately, and you can reply STOP at any time.

10. Children and where we operate

Domestra is for people 18 and older, and we do not knowingly collect information from children. Domestra is operated in the United States, and your information is processed there.

11. Changes and contact

We will post updates here and, for material changes, tell you in advance. Questions: privacy@domestra.com.