Privacy Policy

1. Introduction

Questimate, a product of Clarity For Product LLC (“we,” “us,” or “our”), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Questimate, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Name, email address, phone number, company name, business address
• Payment Information: Processed by Stripe (we do not store credit card numbers)
• Job Information: Customer names, addresses, phone numbers, job descriptions, project details
• Generated Estimates: All estimates created using the Service
• Communications: Messages you send to us via email or support channels

2.2 Sensitive Information

We do not process sensitive information. We do not collect or process data related to race, ethnicity, religious beliefs, sexual orientation, political opinions, health information, genetic or biometric data, or criminal history.

2.3 Automatically Collected Information

When you use the Service, we automatically collect:

• Usage Data: Features used, time spent, actions taken, errors encountered
• Device Information: Browser type, operating system, IP address, device identifiers
• Log Data: Access times, pages viewed, referring URLs
• Cookies: See Section 8 for detailed cookie information

2.4 Third-Party Information

We receive information from third-party services:

• Clerk: Authentication and user management data
• Anthropic Claude: AI processing metadata
• Vercel: Hosting and analytics

3. How We Use Your Information

We use collected information for:

• Provide the Service: Generate estimates, store your data, enable account features
• Process Payments: Billing, invoicing, subscription management
• Improve the Service: Bug fixes, feature development, performance optimization
• Training AI Models: With your explicit consent, use captured estimates to improve accuracy
• Customer Support: Respond to inquiries, troubleshoot issues, provide assistance
• Communications: Send transactional emails, service updates, marketing (with opt-out option)
• Security: Detect fraud, prevent abuse, protect against malicious activity
• Legal Compliance: Comply with applicable laws and regulations
• Analytics: Understand usage patterns, measure effectiveness, make data-driven decisions

4. How We Share Your Information

We do NOT sell your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

We share information only in these circumstances:

4.1 Service Providers

We share data with trusted third parties who help operate the Service:

• Clerk: Authentication and user management
• PostgreSQL Database: Database hosting via Supabase infrastructure
• Anthropic: AI-powered estimate generation. To generate estimates, we send job descriptions and customer information (names, addresses, phone numbers) to Anthropic's Claude API. Anthropic processes this data under their Commercial Terms and does not use API data to train their models.
• Twilio: SMS messaging for estimate generation via text
• Vercel: Application hosting and CDN

4.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal process (subpoena, court order, warrant)
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Respond to government requests

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share information with third parties when you explicitly consent, such as when you opt-in to the training data capture feature.

5. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Necessary to comply with legal obligations
• Resolve disputes or enforce agreements

After account deletion, we will:

• Anonymize or delete your personal information within 90 days
• Retain anonymized usage data for analytics
• Keep financial records as required by law (typically 7 years)

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: Role-based access, principle of least privilege
• Authentication: Clerk-managed secure authentication with MFA support
• Infrastructure: Secure hosting on Vercel and Supabase with regular security updates
• Monitoring: Automated security monitoring and incident response
• Third-Party Audits: Our service providers undergo regular security audits

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to access and export your personal information. You can download your data from your account settings or contact us for assistance.

7.2 Correction

You can update your account information at any time from your account settings. Contact us if you need help correcting inaccurate information.

7.3 Deletion

You can delete your account from the account settings page. Upon deletion:

• Your personal information will be anonymized or deleted within 90 days
• You will have 30 days to export your data before permanent deletion
• Some information may be retained as required by law

7.4 Marketing Communications

You can opt out of marketing emails by:

• Clicking “unsubscribe” in any marketing email
• Adjusting preferences in your account settings
• Contacting us at ashok@clarityforproduct.com

Note: You cannot opt out of transactional emails (receipts, password resets, account notifications).

7.5 Do Not Track

Our Service does not currently respond to “Do Not Track” browser signals.

7.6 Response Timeframe

We will respond to your data access, correction, or deletion requests within 45 days. If we need additional time due to the complexity of your request, we will notify you and may take up to an additional 45 days (90 days total). If we deny your request, you may appeal by contacting us at ashok@clarityforproduct.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication, security, and core functionality
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling cookies may limit Service functionality.

Third-Party Cookies

Third-party services may set cookies:

• Clerk (authentication)
• Stripe (payment processing)
• Vercel Analytics (usage analytics)

9. Age Requirements

Our Service is designed for business professionals and is not intended for individuals under 18 years of age. We do not knowingly solicit data from or market to anyone under 18. By using Questimate, you represent that you are at least 18 years old. If we learn that we have collected personal information from someone under 18, we will deactivate the account and delete the information promptly. If you become aware of any data we may have collected from someone under 18, please contact us at ashok@clarityforproduct.com.

10. U.S. State Privacy Rights

Depending on your state of residence, you may have additional privacy rights under state law.

10.1 California (CCPA/CPRA)

California residents have the right to:

• Right to Know: What personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: We do not sell or share personal information for targeted advertising
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

10.2 Colorado (CPA)

Colorado residents have the right to:

• Access, correct, and delete personal data
• Obtain a portable copy of personal data
• Opt out of targeted advertising and sale of personal data

10.3 Connecticut (CTDPA)

Connecticut residents have the right to:

• Access, correct, and delete personal data
• Obtain a portable copy of personal data
• Opt out of targeted advertising, sale of personal data, and profiling

10.4 Utah (UCPA)

Utah residents have the right to:

• Access and delete personal data
• Obtain a portable copy of personal data
• Opt out of targeted advertising and sale of personal data

10.5 Virginia (VCDPA)

Virginia residents have the right to:

• Access, correct, and delete personal data
• Obtain a portable copy of personal data
• Opt out of targeted advertising, sale of personal data, and profiling

10.6 Exercising Your Rights

To exercise any of these rights, contact us at ashok@clarityforproduct.com. We will verify your identity before processing requests. You may also designate an authorized agent to submit requests on your behalf. If we deny your request, you may appeal by responding to our denial with “APPEAL” in the subject line.

11. International Users

Our Service is operated in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to such transfer and processing.

Note: The United States may not have the same data protection laws as your country. We take steps to ensure your information is protected in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the “Last Updated” date at the top of this page
• Sending an email to your registered email address
• Displaying a prominent notice within the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: