Privacy Policy

1 Information We Collect

We collect information you provide directly to us and information generated automatically when you use our platform.

a) Account & Profile Information

• Full name, email address, phone number, and profile photo
• Home address and service location (homeowners)
• Business name, professional license details, insurance documentation, and portfolio images (contractors)
• Government-issued ID proof submitted during contractor onboarding

b) Job & Service Data

• Job descriptions, photos, requested service categories, and scheduling details
• Quotes, invoices, job status updates, and completion records
• Communications between homeowners and contractors via our in-app chat

c) Payment & Financial Information

• Payment card details (processed and stored securely by Stripe — we do not store raw card numbers)
• Coin/credit purchase history and wallet balance
• Transaction records including service fees

d) Device & Usage Data

• Device type, operating system, app version, and unique device identifiers
• IP address, browser type, and referring URLs (website visitors)
• Log data: pages/screens viewed, features used, timestamps, and crash reports
• Firebase Cloud Messaging (FCM) tokens for push notifications

e) Location Information

• Approximate or precise location when you grant permission (used to match you with nearby professionals)
• Service address you manually enter

2 How We Use Your Information

We use the information we collect to:

• Create and manage your account and verify your identity
• Match homeowners with qualified local contractors based on location, category, and availability
• Process payments, manage coin/credit balances, and issue invoices
• Enable real-time chat between homeowners and contractors
• Send transactional notifications (booking confirmations, status updates, OTP verification)
• Send in-app notifications and, where permitted, push notifications
• Verify contractor credentials, licenses, and insurance during onboarding
• Monitor platform safety, detect fraud, and enforce our Terms & Conditions
• Improve our app, fix bugs, and develop new features
• Comply with applicable laws and regulations

3 Sharing of Information

We do not sell your personal information. We may share it in the following limited circumstances:

a) Between Platform Users

When a homeowner books or contacts a contractor, relevant profile details (name, photo, rating, service area) are visible to facilitate the transaction.

b) Service Providers

We work with trusted third-party vendors who process data on our behalf:

• Stripe — payment processing
• Firebase / Google — real-time database (Firestore), authentication, and push notifications
• Vercel — cloud hosting and backend infrastructure
• Google Maps / Geocoding — location services

These providers are contractually bound to protect your data and may not use it for any other purpose.

c) Legal Requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of HMSRVC, our users, or the public.

d) Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity, subject to the same privacy protections.

4 Payment & Financial Data

All payment card transactions are handled by Stripe, Inc. We collect a 10% service fee on completed jobs. Contractors may purchase coin credits to unlock job leads. Raw payment card data never touches our servers — Stripe's tokenization system is used exclusively.

For questions about a specific charge, contact us at [email protected].

5 Location Data

Our app requests access to your device location (While In Use only) to:

• Show contractors available in your service area
• Auto-fill your address when posting a job

You can disable location access in your device settings at any time. Disabling location may limit your ability to find nearby professionals. We do not access your location in the background.

6 Communications

We may contact you via:

• Email — account verification OTPs, booking updates, invoices, and support responses
• Push Notifications — in-app alerts for new messages, job status changes, and promotions (you may opt out in device settings)
• In-App Notifications — real-time chat messages and activity alerts within the app

Transactional communications (OTPs, booking confirmations) cannot be opted out of while you maintain an active account, as they are necessary for platform operation.

7 Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained until you request deletion
• Transaction and job records are retained for a minimum of 7 years for accounting and legal compliance
• Chat messages stored in Firestore are retained as part of the job record
• Contractor onboarding documents (license, ID, insurance) are retained for the duration of the contractor's active status plus 2 years

After deletion, anonymized aggregate data (not linked to you) may be retained for analytics.

8 Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated data (see below)
• Portability — receive your data in a machine-readable format
• Opt-Out — unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at [email protected].

9 Children's Privacy

HMSRVC is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately at [email protected] and we will delete such information promptly.

10 Security

We implement industry-standard technical and organizational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• JWT-based authentication with role-based access controls
• Stripe's PCI-DSS compliant payment infrastructure
• Firebase Security Rules restricting Firestore access to authenticated users only
• Image compression and file-size limits to minimize exposure of uploaded documents

No system is 100% secure. In the event of a data breach that affects your rights, we will notify affected users as required by applicable law.

11 Third-Party Links

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any external services you access through our platform.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify you via email or an in-app notification at least 14 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

13 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out:

• Email: [email protected]
• Support: [email protected]
• Address: HMSRVC LLC, Wahiawa, Hawaii 96786, USA