Privacy Policy

What we collect

We collect the data we need to run your account and the work that flows through it. Nothing more.

• Contractor account data. Your name, business name, email, phone, trade, service area, and the credentials you sign in with. We support Sign in with Apple and passwordless email, so we hold a token, not a password.
• Job and proposal data. Quotes, proposals, line items, scheduled work, completed jobs, and the Props and Quotrr Score tied to verified completed jobs.
• Device tokens for push. If you turn on notifications, we store the device token your phone needs to receive them.
• Basic analytics. Page views, feature use, error reports, and coarse device and region data so we can fix what breaks and see what gets used.

How we use it

We use your data to operate the product, not to profile you for resale.

• Run your account, your jobs, and your public contractor profile.
• Compute anonymized local price ranges and the reputation signals that make the network worth being in.
• Send the messages and push notifications you ask for.
• Detect abuse, prevent fraud, and keep tenants isolated from each other.
• Improve the product using aggregated, anonymized usage data.

We do not sell your data

Quotrr does not sell leads. Quotrr does not sell personal data. We are not a lead broker and we do not run a marketplace that auctions homeowners to the highest bidder. The reputation network is built on published and anonymized data, and that is the only data that leaves your tenant boundary.

Your California privacy rights (CPRA)

If you are a California resident, the California Privacy Rights Act gives you the following rights, and we honor all of them:

• Right to know. Ask what personal data we hold about you and how we use it.
• Right to delete. Ask us to delete your personal data, subject to the legal records we are required to keep.
• Right to correct. Ask us to fix personal data that is wrong.
• Right to opt out of sale or sharing. You can opt out, though there is nothing to opt out of. We do not sell or share personal data for cross-context behavioral advertising.

To exercise any of these, email [email protected]. We will not discriminate against you for using your rights.

Agent data

Quotrr exposes a public agent surface so AI agents can read the network. What an agent can touch is tightly scoped.

• Free to read, anonymized only. Agents can query anonymized local price ranges by trade and ZIP, public contractor profiles including the Quotrr Score and verified Props, and contractor-published portal pages. This is anonymized or published data only, and it may be up to 24 hours stale.
• Actions for a person require that person's consent. Any action taken on behalf of a human, such as requesting a quote for a homeowner, submitting a review, or any write to a contractor account, requires a delegated, scoped, expiring token signed by that human through OAuth 2.0 with PKCE. Every such action is logged in the human's audit trail and is reversible for 24 hours.
• Tenant data stays private. Contractor-private data behind an account boundary is off-limits to agents. The same privacy firewall that separates one contractor from another applies to agents.

Lawful basis for agent consent tokens (GDPR-equivalent)

For users in jurisdictions with GDPR-equivalent rules, the lawful basis for any agent action taken on your behalf is your explicit consent, captured as the signed, scoped, expiring OAuth token described above. The token names what the agent may do, expires on its own, and can be revoked. Reading anonymized or published data carries no personal data and relies on our legitimate interest in operating a public reputation network.