Privacy Policy

Who this policy applies to

Stringlyne has two kinds of users: contractors (the business owners who sign up for an account) and homeowners (recipients of contractor-built proposals, who interact with us only through a public link). This policy covers both.

Information we collect

From contractors

• Account information — email, password (stored as a bcrypt hash), company name, contact name, phone number, business address.
• Business profile — license number and state, insurance carrier, default labor rates, material markups, preferred brands.
• Walkthrough content — voice recordings, photos, geo-coordinates of map pins, and dimension measurements captured in the app.
• Voice samples and writing samples — if you provide them during onboarding, used to match your tone in generated proposals.
• Payment connection — when you connect a Stripe Connect account, we store your Stripe account ID and connection status. We do not store bank account numbers, card numbers, or tax identifiers — those live with Stripe.
• Device identifiers — Expo push notification token, last active timestamp.
• Usage data — events logged during proposal generation, sends, opens, and payment flows, used for product analytics and to power the AI proposal generator.

From homeowners

• Customer information — name, property address, email, phone number, all provided by the contractor when initiating a proposal.
• E-signature data — your typed or drawn signature, the date and time you signed, and the IP address and user agent from which you signed. Stored as part of the executed contract record per the federal ESIGN Act.
• Payment information — handled directly by Stripe. We receive a payment intent ID and amount; we do not see your card details.

How we use information

• To generate proposals (voice transcripts and photos are sent to our AI model providers — see below).
• To send and track proposals to homeowners.
• To process payments via Stripe Connect.
• To send lifecycle emails (welcome, reminders) and push notifications about your account activity. You can unsubscribe from emails at any time via the link in each email.
• To improve the product (aggregated, de-identified usage analytics).
• To respond to support requests.

Third parties we share data with

We use the following service providers to operate Stringlyne. They process data on our behalf and are bound by their own privacy commitments:

• Anthropic — generates proposal text from your walkthrough data. Anthropic Privacy Policy
• OpenAI — transcribes voice walkthroughs via Whisper. OpenAI Privacy Policy
• AWS S3 — stores audio recordings and photos.
• Neon (Postgres) — primary application database.
• Stripe — processes all payments and stores card/bank information. Stripe Privacy Policy
• Postmark — delivers transactional and lifecycle emails.
• Twilio — delivers proposal links to homeowners by SMS when a phone number is provided. Twilio Privacy Policy
• Expo — delivers push notifications via Apple Push Notification Service and Firebase Cloud Messaging.
• PostHog — product analytics; records de-identified usage events (screens viewed, actions taken) to help us improve the app. PostHog Privacy Policy
• OpenWeather — provides weather data scoped to project ZIP codes.

We do not sell your personal information to anyone, and we do not share it with advertising networks.

Data retention

• You can delete your account at any time from the app (Settings → Delete account). Deletion immediately deactivates the account and removes your personal profile data (name, phone, license, insurance, voice sample). Remaining account data is purged from active databases within 30 days, and from backups within an additional 30 days.
• Signed proposals and payment records are retained for 7 years to comply with tax and contract retention obligations under U.S. law.
• Walkthrough audio and photos can be deleted by the contractor from the app at any time.
• E-signature records (signature image + audit trail) are retained for the life of the executed contract per ESIGN Act.

Your rights

You can:

• Delete your account and personal data directly in the app (Settings → Delete account), or by emailing privacy@stringlyne.app if you can't access the app.
• Access or correct your account data by emailing privacy@stringlyne.app.
• Unsubscribe from lifecycle emails using the link at the bottom of every email we send.
• Disable push notifications in your phone's system settings.
• Export a copy of your data by contacting support.
• If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising these rights.

Children

Stringlyne is a tool for business use by contractors and their adult customers. We do not knowingly collect information from anyone under 13.

Security

We use industry-standard practices: HTTPS for all network traffic, encrypted database at rest (Neon), JWTs stored in iOS Keychain via Expo SecureStore, signed acceptance tokens for homeowner-facing links, rate limiting on the API, and bcrypt password hashing. No system is perfectly secure; if you discover a vulnerability, please email security@stringlyne.app.

Changes to this policy

We may update this policy from time to time. Material changes will be announced via email and in the app. The "Last updated" date at the top tells you when this version became effective.

Contact

Questions about this policy? Email privacy@stringlyne.app.