Privacy Policy

1. Information We Collect

Information you provide:

• Account data: Email address and password when you create an account.
• Location data: City, ZIP code, or region you provide to receive localized pricing estimates.
• Quote submissions: Pricing data, service descriptions, provider information, and uploaded files (e.g., contractor quotes or invoices) that you submit through the Platform.
• Contact information: Phone number, if you choose to provide one when submitting a quote request.
• Notification preferences: Your choices for how and when we contact you.

Information collected automatically:

• Usage data: Pages visited, searches performed, features used, and timestamps.
• Device data: Browser type, operating system, IP address, and device identifiers.
• Cookies and local storage: Used for authentication, preferences, and analytics. See Section 5 below.

2. How We Use Your Information

• To provide, operate, and improve DoubleQuote's services.
• To generate and display aggregated, anonymized pricing estimates.
• To authenticate your account and maintain security.
• To send notifications you have opted into.
• To respond to support requests or inquiries.
• To comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share data in the following limited circumstances:

• Aggregated data: Anonymized and aggregated pricing data is displayed to other users as part of the Platform's core functionality. This data cannot be used to identify you.
• Service providers: We use third-party services (e.g., hosting, authentication, analytics) that may process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose information if required by law, subpoena, or government request.

4. Third-Party Services

DoubleQuote uses the following third-party services:

• Supabase: For authentication and database storage. Supabase processes your account data and submitted content.
• OAuth providers (Google, Apple, Meta, X): For account creation and sign-in. When you authenticate via a social provider, we receive your name, email address, and profile avatar from that provider.
• Vercel: For hosting and content delivery.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Cookies & Local Storage

We use cookies and browser local storage for:

• Essential cookies: Required for authentication and session management. These cannot be disabled.
• Preference cookies: Store your settings such as theme and location preferences.
• Analytics cookies: Help us understand how the Platform is used so we can improve it.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymized, aggregated data derived from your submissions may be retained indefinitely as it cannot be linked back to you.

7. Your Rights

Depending on your state of residence, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and account.
• Portability: Request your data in a portable, machine-readable format.
• Opt-out: Opt out of non-essential data collection and marketing communications at any time.

To exercise any of these rights, contact us at privacy@doublequote.com.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. DoubleQuote does not sell personal information. To submit a CCPA request, email privacy@doublequote.com.

9. Children's Privacy

DoubleQuote is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@doublequote.com.

10. International Users

DoubleQuote is based in and operates from the United States. If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Platform, you consent to the transfer of your information to the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data on the legal basis of your consent (provided at account creation) and our legitimate interest in operating the Platform. You may exercise your data rights under GDPR by contacting privacy@doublequote.com.

11. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach, in accordance with applicable state and federal laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@doublequote.com.