Privacy Policy

1. Introduction

This Privacy Policy explains how Draftz LLC ("Draftz," "we," "us," or "our") collects, uses, discloses, and protects information when you access or use our website, mobile applications, and related services (collectively, the "Service"). The Service is a directory platform connecting consumers with professionals in the architecture, engineering, and construction industry.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Service. This Privacy Policy is part of, and incorporated into, our Terms of Service.

2. Information We Collect

We collect the following categories of personal information:

• Account information: Your name, email address, and password (stored as a hashed value) when you register for an account.
• Business profile details: When you create or manage a business listing, we collect the company name, address, phone number, website, license numbers, service area, logo and cover photos, project descriptions and photos, and other details you choose to publish.
• Payment information: Subscription payments are processed by Stripe, our third-party payment processor. We do not receive or store your full card number or other sensitive card details; Stripe handles that information directly.
• Communications: Messages exchanged between users and businesses through the Service, as well as support requests and other correspondence you send to us.
• Reviews and ratings: The content of reviews and ratings you submit, along with your display name as it appears on the Service.
• Verification documents: Documents (such as a business license, utility bill, tax document, or insurance certificate) that a business voluntarily submits to verify ownership. A professional license is optional. These documents are used only for the verification review process, are not made public on the Service, and are retained only as long as needed to support the verification record.
• Automatically collected data: When you use the Service, we may collect your IP address, device type, browser type, usage and activity data, and approximate location derived from your IP address or, with your permission, your device's location.
• Cookies and similar technologies: As described in Section 6 below.

3. How We Collect Information

• Directly from you: We collect information you provide when you register, create or edit a business listing, post a review, send a message, submit verification documents, or contact support.
• Automatically: We collect certain information automatically through cookies, analytics tools, and server logs when you visit and use the Service.
• From third parties: We receive limited information from service providers necessary to operate the Service — for example, payment confirmation from Stripe.

4. How We Use the Information

We use the information we collect to:

• provide, operate, and maintain the Service;
• create and manage your account and business listings;
• process subscription payments and manage your subscription tier;
• enable messaging, reviews, search, and map features;
• review verification submissions and display verification badges (with the disclaimers described in our Terms and Verification Policy);
• communicate with you about your account, security, support requests, and policy updates, and to send marketing or promotional messages where you have opted in;
• improve, analyze, and secure the Service; and
• comply with our legal obligations and enforce our Terms.

5. Sharing and Disclosure of Information

We share information in the following circumstances:

• Service providers: We share information with third-party providers that help us operate the Service, including Stripe (payments), hosting and email providers, and analytics tools. These providers are bound by their own privacy and security obligations.
• Other users: Business profile information, reviews, and messages you post are visible to other users as designed by the Service. Your display name may appear with your reviews.
• Legal requirements: We may disclose information when required by law, court order, or government regulation, or to protect the rights, property, or safety of Draftz, our users, or others.
• Business transfers: If Draftz LLC is sold, merged, or otherwise transferred, your information may be transferred as part of that transaction.
• With your consent: We may share information with your consent or at your direction.

We do not sell your personal information. We do not rent or sell the personal information we collect to third parties for their own marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar technologies (such as local storage and analytics tags) to maintain your session, remember preferences, measure and analyze how the Service is used, and improve performance. We use both essential cookies (required for the Service to function) and analytics or preference cookies (which help us understand usage). Our analytics may be provided through third-party analytics tools that collect usage data such as pages visited, session duration, and approximate location; these providers process that data under their own privacy policies.

You can control or disable cookies through your browser settings. Disabling essential cookies may prevent some features of the Service from working properly.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We keep reviews and business listing content for as long as the listing is active, and may retain them after removal where necessary for legal, dispute, or safety reasons. Verification documents are retained for a reasonable period after review to support the verification record. Server logs and similar usage data are retained for a limited time. When information is no longer needed, we delete it or de-identify it, except where retention is required by law.

8. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and secure infrastructure. Payment information is handled by Stripe and is not stored on our servers. However, no system is completely secure, and we cannot guarantee the absolute security of your information.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

• know what personal information we collect about you;
• access and receive a copy of your personal information;
• correct inaccurate or incomplete information;
• request deletion of your personal information;
• opt out of any "sale" or "sharing" of your personal information (we do not sell your information); and
• exercise these rights without discrimination.

You can manage much of your information through your account settings. To exercise any of these rights, or to submit a privacy request, please contact us through our Contact page. We will respond within the timeframe required by applicable law. You may also opt out of marketing emails at any time using the unsubscribe link in any marketing email we send, or by contacting us through the Contact page.

Global Privacy Control. We honor Global Privacy Control (GPC) signals where applicable. If your browser or device transmits a GPC signal, we will treat it as a request to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising, to the extent the law requires us to do so.

Notice to California Residents

This subsection provides additional disclosures required by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). In the past 12 months, we have collected the following categories of personal information:

• Identifiers (such as name, email address, and IP address);
• Commercial information (such as subscription and transaction records);
• Internet or network activity (such as usage data and pages visited);
• Geolocation data (approximate location derived from IP address or device location, with permission); and
• Inferences drawn from the above to create a profile reflecting your preferences.

Sources: We collect this information directly from you, automatically from your device and browser when you use the Service, and from service providers such as Stripe (for payment confirmation).

Business or commercial purposes: We use this information to provide and operate the Service, create and manage accounts and listings, process payments, enable messaging and reviews, verify businesses, communicate with you, analyze and improve the Service, and comply with legal obligations.

No sale or sharing for cross-context behavioral advertising: We do not sell your personal information, and we do not share it for cross-context behavioral advertising as defined by California law.

10. Children's Privacy

The Service is not directed to children under 13 (or under 16 where applicable), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. International Data Transfers

Our servers and service providers are located primarily in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries. By using the Service, you consent to such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will notify registered users by email and/or through a notice on the Service, and update the "Last updated" date on this page. Your continued use of the Service after any changes take effect constitutes your acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through our Contact page. Draftz LLC is an Arizona limited liability company.