Privacy Policy

• Transparency: We explain what we collect and why.
• Purpose limitation: We use information to provide and improve the Services, communicate with you, secure our systems, and comply with law—not for unrelated uses.
• Minimization: We aim to collect only what we need to operate the Services.
• Security: We use administrative, technical, and organizational measures appropriate to the nature of the data.
• No sale of personal information: We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws.

2.1 Information you provide

Depending on how you use the Services, you may provide:

• Account and profile data — name, email address, phone number, password or authentication credentials, company/workspace name, role, and similar identifiers.
• Business and project content — customer and contact details, project and job information, addresses, insurance and claim-related fields you choose to enter, estimates, schedules, notes, tasks, documents, photos, videos, signatures, and other files you upload or generate in the Services (“Customer Content”).
• Billing information — payment method details processed by our payment provider (we do not store full card numbers on our servers when payments are handled by Stripe or a similar processor).
• Communications — messages you send us (support, sales, feedback) and content of transactional emails related to the Services.
• Invitation data — email addresses and names of teammates, subcontractors, or other invitees you ask us to contact on your behalf.

2.2 Information collected automatically

When you use the Services, we may automatically collect:

• Device and log data — IP address, browser type, device type, operating system, referring/exit pages, timestamps, and approximate location derived from IP.
• Usage data — features used, clicks, pages viewed, performance and diagnostic events, and crash or error logs.
• Cookies and similar technologies — session tokens, preferences, and analytics cookies needed to operate and improve the Services. You can control cookies through your browser; disabling some cookies may limit functionality (for example, staying signed in).

2.3 Information from third parties

We may receive information from:

• Identity providers (for example, Google Sign-In) when you choose to authenticate that way—typically name, email, and profile identifiers permitted by that provider.
• Payment and infrastructure providers — confirmation of payment status, subscription state, and operational metadata needed to run hosting, email delivery, and storage.
• Integrations you enable — data from tools you connect (for example accounting or productivity integrations) subject to their terms and your configuration.

2.4 Location and media metadata

Some uploads (such as photos or documents) may contain embedded metadata, including location information created by your camera or device. If you do not want that metadata stored, disable location tagging on your device before uploading, or strip metadata before upload where possible. Field or mobile features may request location permission; we use location only as needed for the feature and with your consent where required.

We use information to:

• Provide, operate, maintain, and improve the Services;
• Create and manage accounts, workspaces, roles, and permissions;
• Process subscriptions, invoices, and payments;
• Send transactional messages (invites, password resets, notifications, product notices);
• Provide customer support and respond to requests;
• Develop and improve product features, including AI-assisted features (see Section 5);
• Monitor security, prevent fraud and abuse, and enforce our Terms;
• Comply with legal obligations and respond to lawful requests; and
• With your consent or as otherwise permitted by law, send product updates or marketing communications (you may unsubscribe from marketing emails at any time).

We do not sell personal information. We may share information in these situations:

• Service providers — vendors who help us host, store, process payments, send email, provide analytics, authentication, AI processing, or customer support, under contracts that limit use to providing services to us.
• At your direction — when you invite users, share documents, send emails or links from the Services, or connect integrations.
• Workspace administrators — administrators of your organization may access content and activity within their workspace consistent with their role.
• Legal and safety — when we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, or security of RestoreKore, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to continued protection of personal information consistent with this Policy.
• Aggregated or de-identified data — we may share insights that do not reasonably identify you.

Some Services may use artificial intelligence or machine learning (for example, document or bid analysis, summarization, or suggestions). Inputs you submit to those features may be processed to generate outputs and to operate and improve those features. You are responsible for reviewing AI-generated output before relying on it. We do not use your Customer Content to train publicly available third-party foundation models in a way that discloses your confidential business data to other customers, except as described in our product documentation or with your agreement. You may contact us to ask about available opt-out options for certain improvement uses.

You (or your organization) control Customer Content uploaded to the Services. You are responsible for ensuring you have the rights and lawful basis to collect and process personal information of homeowners, insureds, subcontractors, employees, and other individuals whose data you enter into RestoreKore. Where we process personal information on behalf of a business customer, we act as a service provider / processor as applicable, and the business customer remains responsible for its own privacy notices to those individuals.

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business operations (including backups and security logs). When you request deletion, we will delete or de-identify personal information within a reasonable period, subject to legal retention requirements and technical limitations (for example, backup cycles). Shared content needed by other authorized users in a workspace may remain available to them.

We implement safeguards designed to protect information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security. Please use strong passwords, protect your credentials, and notify us promptly of any suspected unauthorized access.

We may process and store information in the United States and other countries where we or our service providers operate. Those locations may have different data protection laws than your jurisdiction. Where required, we use appropriate transfer mechanisms.

Depending on your location, you may have rights to:

• Access, correct, or update personal information;
• Request deletion of personal information;
• Object to or restrict certain processing;
• Request a portable copy of certain information; and
• Opt out of marketing communications.

Account holders can often update profile information in account settings. For other requests, email privacy@restorekore.com. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights available under applicable law.

California residents: Under the CCPA/CPRA, you may have rights to know, delete, and correct personal information, and to opt out of sale or sharing. We do not sell personal information. To exercise rights, contact us at the email above. Authorized agents may submit requests with proof of authority.

The Services are intended for business use by adults. We do not knowingly collect personal information from children under 16 (or under 13 where that is the applicable standard). If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

The Services may link to third-party websites or services. Their privacy practices are governed by their own policies. We are not responsible for those practices.

We may update this Privacy Policy from time to time. We will post the updated Policy with a revised “Last updated” date. If changes materially reduce your rights, we will provide additional notice where appropriate (for example, email or in-product notice). Continued use of the Services after an update becomes effective constitutes acceptance of the revised Policy.

Questions about this Privacy Policy or our privacy practices:
RestoreKore LLC
Email: privacy@restorekore.com
Web: https://restorekore.com

This Policy is provided for transparency and compliance purposes and is not legal advice. You may wish to have counsel review it for your specific circumstances.