Privacy Policy
Last updated: January 1, 2026 · Effective: January 1, 2026
ProvenQuote, Inc. ("ProvenQuote," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information about visitors to ProvenQuote.ai ("Site") and users of our lead generation platform ("Service").
This policy applies to two distinct groups: Contractors (businesses using the Service to receive leads) and Homeowners (individuals who submit quote requests through ProvenQuote-powered forms). Where practices differ, we note them explicitly.
1. Information We Collect
1.1 From Contractors
- Account information: Name, email address, business name, phone number, trade category, service area(s).
- Payment information: Credit/debit card details are processed and stored securely by Stripe. We do not store raw card numbers.
- Usage data: Pages visited, features accessed, session duration, device and browser type, IP address, and referral source.
- Communications: Messages, support tickets, and correspondence with our team.
- API & integration data: Webhook endpoints, CRM configuration, and integration authentication tokens.
1.2 From Homeowners
- Contact information: Name, email address, phone number, and residential address.
- Project information: Description of the requested service, preferred timeline, and budget range when provided.
- Device data: IP address, browser type, and operating system collected at time of form submission for fraud prevention.
1.3 Automatically Collected Data
We use cookies, web beacons, and similar tracking technologies to collect data about your interactions with the Site. See Section 6 for details.
2. How We Use Your Information
We use collected information to:
- Provide, operate, and improve the Service;
- Route homeowner leads to the appropriate contractor based on market and trade;
- Process payments and manage subscriptions;
- Verify lead quality and resolve disputes;
- Send transactional communications (lead notifications, billing receipts, account alerts);
- Send marketing communications where you have opted in, with an easy opt-out mechanism in every email;
- Detect, prevent, and respond to fraud, abuse, and security incidents;
- Comply with legal obligations and enforce our Terms of Service;
- Analyze usage patterns to improve the platform.
3. Information Sharing & Disclosure
We do not sell your personal information. We share information only in the following circumstances:
3.1 Service Providers
Stripe
Payment processing. Stripe handles all card data under their own PCI-DSS compliant infrastructure. We receive only payment status and tokenized payment method identifiers. Stripe Privacy Policy →
Email Delivery Provider
We use a transactional email service to deliver lead notifications, receipts, and account alerts. Your email address is shared with this provider solely for delivery purposes.
Analytics Provider
We use aggregated, anonymized analytics to understand platform usage. We do not share identifiable data with analytics providers beyond session-level identifiers.
3.2 Contractor-to-Homeowner Lead Routing
When you submit a quote request as a homeowner, your contact information is shared with the one contractor who holds an active lease for your market and trade. You consent to this routing by submitting your request.
3.3 Legal Requirements
We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights or safety of ProvenQuote, our users, or the public.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of substantially all assets, user data may be transferred to the successor entity subject to equivalent privacy protections.
4. Cookies & Tracking Technologies
We use the following types of cookies:
Essential cookies
Required for the platform to function. Cannot be disabled. Includes session management, authentication, and security tokens.
Functional cookies
Remember your preferences such as language, display settings, and dashboard configuration.
Analytics cookies
Collect anonymized data about how users interact with the Site to help us improve performance and usability.
Marketing cookies
Used only if you arrive via an affiliate or advertising channel, to attribute conversions. No cross-site behavioral tracking.
You can manage cookie preferences through your browser settings or our in-site cookie preference center. Disabling non-essential cookies will not affect core functionality.
5. Data Retention
We retain your information for as long as necessary to:
- Provide the Service and maintain your account;
- Comply with legal, accounting, and tax obligations (typically 7 years for financial records);
- Resolve disputes and enforce agreements.
Account data is deleted or anonymized within 90 days of a confirmed account closure request. Homeowner lead data submitted through the platform is retained for up to 24 months for dispute resolution and fraud prevention, after which it is anonymized.
6. Your Rights
6.1 GDPR (EU/EEA/UK Residents)
If you are located in the European Economic Area or United Kingdom, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
- Restriction: Request that we limit processing of your data in certain circumstances.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
6.2 CCPA (California Residents)
California residents have the right to:
- Know what personal information we collect, use, disclose, or sell;
- Delete personal information we have collected;
- Opt out of the sale of personal information (note: we do not sell personal information);
- Non-discrimination for exercising CCPA rights.
To submit a verifiable consumer request, email privacy@provenquote.ai with "CCPA Request" in the subject line. We will respond within 45 days.
7. Security
We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, multi-factor authentication for platform access, and regular security audits. Our infrastructure is hosted on SOC 2 Type II certified cloud providers. However, no system is completely secure, and we cannot guarantee absolute protection against all threats.
8. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected such information, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Site at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact for Privacy Concerns
For privacy-related requests, questions, or complaints, contact our Data Protection team:
ProvenQuote, Inc. — Privacy Team
Email: privacy@provenquote.ai
Mail: 1234 Commerce Way, Suite 500, Wilmington, DE 19801
We aim to respond to all privacy requests within 30 days. For GDPR-related requests, you also have the right to lodge a complaint with your local supervisory authority.