Privacy Policy

1. Information We Collect

Categories of personal information we collect:

• Identifiers: Name, email address, Google account ID, IP address, display username.
• Commercial information: Subscription history, transaction records.
• Internet or electronic network activity: Browser type, pages visited, features used.
• Professional or employment-related information: Business name, trade, business address, business phone, Google Business Profile URL.
• Geolocation data: State and city, as voluntarily provided.

Categories of personal information we DO NOT collect:

• Social Security numbers.
• Driver's license or state ID numbers.
• Financial account numbers or credit card information (payment processing is handled entirely by Stripe).
• Medical or health information.
• Biometric data.
• Precise geolocation data.

2. How We Use Your Information

• To create and manage your account.
• To display your reports, comments, and community contributions (anonymously — your real identity is never shown).
• To process subscription payments through Stripe.
• To verify your business through Google Business Profile linking.
• To calculate trust scores and reputation ranks.
• To communicate with you about your account, disputes, or platform updates.
• To enforce our Terms & Conditions and prevent abuse.
• To comply with legal obligations.

3. Data Shared With Third Parties

We share personal information with the following categories of third parties for the following business purposes:

Stripe receives payment card information directly during checkout; we never receive or store payment card data.

WE DO NOT SELL OR SHARE PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING AS DEFINED BY THE CALIFORNIA CONSUMER PRIVACY ACT.

Information on this platform is not intended for and may not be used for employment, insurance, housing, credit, or any other decisions governed by the Fair Credit Reporting Act (FCRA) or the Investigative Consumer Reporting Agencies Act (ICRAA).

4. Data of Reported Parties

Contractor Burnlist collects and stores personal information about individuals reported by users (reported parties), including names, initials, addresses, phone numbers, city, state, and descriptions of alleged incidents.

Reported parties are not users of the platform and have not consented to the collection of their personal information. This information is submitted by third-party users and is hosted by Contractor Burnlist as a neutral platform under Section 230 of the Communications Decency Act.

Reported parties who wish to dispute, correct, or request removal of information about them should contact support@contractorburnlist.com. See our Terms & Conditions for our full dispute resolution process.

IMPORTANT: Contractor Burnlist does not verify the accuracy of information submitted about reported parties. All reports reflect the personal experiences and opinions of the submitting user.

5. Submitter Anonymity

• Your real name, email, business name, and contact details are never displayed publicly on reports or comments.
• Only your chosen display username (or "Anonymous Contractor"), reputation rank, and verified badge status are shown publicly.
• Your submitted_by user ID is stored internally for account management but is never exposed through any public-facing query or API.

6. California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you have the following rights under the CCPA (Cal. Civ. Code § 1798.100 et seq.):

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to correct: You may request that we correct inaccurate personal information.
• Right to opt-out: You may opt out of the sale or sharing of your personal information. Note: we do not sell personal information.
• Right to limit: You may limit the use and disclosure of sensitive personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, email support@contractorburnlist.com with the subject line "CCPA Request." Include your name, email address associated with your account, and specify which right(s) you wish to exercise. We will verify your identity and respond within 45 calendar days.

You may designate an authorized agent to make requests on your behalf. We may require the authorized agent to provide proof of authorization.

7. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including encryption in transit (TLS) and at rest, secure authentication via Google OAuth, and role-based access controls on our database.

NO METHOD OF TRANSMISSION OVER THE INTERNET OR METHOD OF ELECTRONIC STORAGE IS 100% SECURE. WE CANNOT GUARANTEE ABSOLUTE SECURITY OF YOUR DATA.

In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by applicable law, including California Civil Code § 1798.82.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. If you request account deletion, we will delete or anonymize your personal information within 45 days, except where retention is required by law or for legitimate business purposes (e.g., preventing fraud or abuse).

Reports submitted by users may be retained even after account deletion, as they constitute user-generated content licensed to the platform under our Terms & Conditions. However, the association with your identity will be removed.

9. Law Enforcement and Legal Process

Contractor Burnlist may disclose personal information to law enforcement agencies, government officials, or other third parties when: (a) required by law, subpoena, court order, or other legal process; (b) we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request; (c) we believe in good faith that disclosure is necessary to prevent imminent physical harm or financial loss.

If we receive a valid legal request for user information, we will make reasonable efforts to notify the affected user before disclosing their information, unless prohibited by law or court order from doing so, or unless we believe notification would be futile or create a risk of harm.

10. Cookies and Tracking

Contractor Burnlist uses essential cookies for authentication and session management (via Supabase Auth). We do not use third-party advertising cookies, tracking pixels, or cross-site behavioral tracking.

Standard web server logs (hosted by Vercel) may record your IP address, browser type, and pages visited for security and performance monitoring purposes.

11. International Users

Contractor Burnlist is operated from the United States and is intended for use by contractors and businesses operating in the United States. If you access the platform from outside the United States, you do so at your own initiative and are responsible for compliance with local laws.

By using the platform, you consent to the transfer of your personal information to the United States, which may have different data protection laws than your country of residence.

12. Children's Privacy

Contractor Burnlist is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions or to exercise your rights, contact us at:

support@contractorburnlist.com

Mailing address: [To be provided before launch]