StumpFast — Privacy Policy
⚠️ DRAFT — NOT YET REVIEWED BY AN ATTORNEY.
Working template capturing StumpFast's actual data practices. Review with
a lawyer before launch. Bracketed [ITEMS] need filling in.
Effective date: [DATE] Contact: [support@stumpfast.com]
1. Who this covers
- Contractors: tree/stump service businesses with StumpFast accounts.
- Customers: homeowners who use a contractor's quote link.
2. What we collect
From Contractors: business name, email, phone, logo, website, pricing settings, and login credentials (managed by our auth provider — we never see passwords; Google sign-in shares your name, email, and profile photo).
From Customers: name, phone and/or email, photos of stumps/property, optional job and access notes, and the reference object selected.
Automatically: standard technical data (IP address, browser type, pages used) and quote activity (estimates created, statuses, timestamps).
What we deliberately do NOT keep: photo location metadata. Phone cameras embed GPS coordinates in image files (EXIF); we strip this metadata when photos are processed at upload, so stored photos do not carry embedded location data.
3. How we use it
- To run the Service: deliver quote links, analyze photos with AI to estimate stump dimensions, apply the contractor's pricing, notify the contractor, and deliver quotes.
- To communicate: service messages about your estimate or account. By providing a phone number, Customers consent to receiving quote-related messages; reply STOP to opt out of SMS.
- To improve the Service: we use submitted photos, AI measurements, and contractor corrections to evaluate and improve measurement accuracy, including training and fine-tuning machine learning models. Content used this way is de-identified: photos are separated from names and contact details, and location metadata has already been stripped.
- We do not sell your personal information. We do not sell or license raw photo datasets to third parties.
4. Who we share it with (service providers)
We share data only as needed to operate the Service:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, photo storage |
| Google (Gemini) | AI photo analysis (photos are sent for measurement) |
| Vercel | Application hosting |
| Twilio | SMS notifications |
| Resend | Email delivery |
| Optional "Sign in with Google" | |
| [Stripe] | [Payments, when enabled] |
Each provider processes data under its own security and privacy commitments. We also share Customer information with their chosen Contractor — that's the point of the Service — and may disclose data if required by law.
5. Retention
- Account and estimate data: kept while the account is active.
- Photos: retained to provide quote history and improve measurement accuracy (see Section 3). You may request deletion at any time.
- After account closure: deleted or de-identified within [90] days, except records we must keep for legal/billing purposes.
6. Your choices and rights
- Access / correction / deletion: email [support@stumpfast.com] and we will honor verified requests within [30] days, including deletion of specific photos or exclusion of your content from model improvement.
- SMS opt-out: reply STOP. Email opt-out: unsubscribe link or email us.
- Depending on where you live (e.g., California, EU), you may have additional statutory rights; we honor verified requests consistent with applicable law.
7. Security
Data is encrypted in transit (HTTPS) and at rest by our storage providers. Access to production data is limited to those who need it to operate the Service. No system is perfectly secure; we will notify affected users of any breach as required by law.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect their data.
9. Changes
We'll post updates here and notify account holders of material changes. The effective date above always reflects the current version.