Privacy Policy

We collect the following categories of personal information:

• Account information: name, email address, phone number
• Business information: company name, service categories, service areas, license number, website, business description
• Profile image: photo you upload voluntarily
• Payment information: billing details processed by Stripe (we never store card numbers on our servers)
• Project and bidding data: construction plans and project details you upload for AI analysis, and the bid invitations, responses, and messages exchanged through the platform
• Usage data: pages visited, searches performed, interactions with the platform (via Vercel Analytics, a cookieless, privacy-friendly tool)
• Session recordings: how visitors move through and interact with our pages (clicks, scrolling, navigation), via PostHog session replay with strict masking (on-page text and anything you type is hidden and never leaves your browser)
• Device data: browser type, IP address, approximate location (country/region, via analytics)

• To create and manage your account
• To display your business profile in search results
• To process subscription payments via Stripe
• To send you service-related communications (bid invitations and responses, analysis results, payment receipts, subscription updates)
• To improve our platform through aggregate usage analytics
• To comply with legal obligations

We do not sell your personal information to third parties.

We never sell your personal information, and we do not share it with advertisers. We share data only with the service providers that run the platform, with other users as part of how Cablanico works, and when the law requires it:

• Service providers: Stripe (payments), Google Firebase (authentication, database, file storage), Vercel (hosting and analytics), Mailgun (email delivery), Google and OpenAI (AI processing of the project documents you upload, to generate scope analyses), and Google reCAPTCHA / Cloudflare Turnstile (fraud and abuse protection). These providers process data only on our instructions.
• Other users: your business profile is visible in search results; when a project owner sends a bid package, the project details are shared with the contractors they select, and contractor responses (including messages) are shared with that project owner.
• Legal requirements: we may disclose information when required by law, court order, or to protect the rights and safety of our users and the platform.

We use Vercel Analytics, a cookieless, privacy-friendly analytics tool, to understand how the platform is used — it does not track you across sites. Firebase Authentication stores a session token in your browser so you stay signed in, and we keep your language preference in your browser's local storage. Security tools (Google reCAPTCHA, Cloudflare Turnstile) protect our forms from abuse and may set their own cookies for that purpose.

We do not use advertising cookies or share analytics data with advertisers.

We use Cloudflare Turnstile to tell real visitors apart from automated traffic on actions like search, contact forms and sign-up. Turnstile works quietly in the background and most visitors never see a challenge. To do this, Cloudflare processes limited device and network information as described in the Cloudflare Turnstile Privacy Addendum.

Phone login is protected by Google reCAPTCHA. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

We retain your personal data for as long as your account is active. If you delete your account, we permanently delete your profile, uploaded files, and associated data within 30 days. Payment records may be retained longer as required by law.

Depending on your location, you may have the following rights:

• Right to access: request a copy of the data we hold about you
• Right to erasure: delete your account and all associated data directly from your profile page
• Right to rectification: update your information at any time from your profile page
• Right to portability: request your data in a portable format
• Right to object: object to certain processing activities
• California residents (CCPA/CPRA): right to know, delete, and opt out of sale (we do not sell data)
• Texas residents (TDPSA): same rights as above apply

To exercise any right, email us at info@cablanico.com or delete your account directly from your profile page.

We use industry-standard security measures including encrypted connections (HTTPS), Firebase security rules, and Stripe's PCI-compliant payment infrastructure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this policy from time to time. We will notify registered users of material changes by email or via an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests:

Cablanico
Email: info@cablanico.com