1. Who we are and what this policy covers
ContrAPPtor LLC is based in Oregon, United States. “ContrAPPtor™,” “we,” “us,” and “our” mean ContrAPPtor LLC. This policy covers contrapptor.com, www.contrapptor.com, our contractor and business web application, onboarding, support, and communications that link to this policy.
It explains our handling of information about visitors, account owners, administrators, managers, crew members, and customers, tenants, property owners, and other people identified in workspace records. “Personal information” means information that identifies or can reasonably be linked to an individual.
Features described as planned or conditional apply only when made available. Publishing this policy does not activate a feature or enroll existing users in a new program. We provide additional notices and obtain permission where required before new processing begins.
2. Information we collect and its sources
We receive information from users, workspace businesses and their authorized personnel, service providers supporting requested features, and use of our website and application. Depending on the features used, this includes:
- Accounts: names, email addresses, telephone numbers, business details, account identifiers, roles, authentication information, preferences, and the owner’s declaration of whether they are 18 or older.
- Customer and property records: customer, tenant, and property-owner names and contact details; addresses and units; property type, dimensions, rooms, stories, and other characteristics; entry instructions, lockbox codes and locations, pet information, and relevant site notes. These fields may be optional.
- Work and financial records: scopes, estimates, invoices, contractor selling prices, material charges and costs, measurements, quantities, assignments, schedules, crew size, estimated and actual labor-hours, elapsed time, and work logs.
- Uploads: optional profile photos, job photos, videos, documents, attachments, and associated metadata.
- Communications and AI interactions: support correspondence, instructions, prompts, generated responses, and, if dictation becomes available, voice inputs and transcripts needed for the request.
- Payments: subscription status, billing contact details, invoice amounts, payment status, and processor transaction references. Payment credentials are addressed in Section 8.
- Notifications: delivery addresses and numbers, preferences, consent records, message content, delivery status, and opt-out records.
- Technical records: IP addresses, browser and device information, connection times, usage events, and diagnostic and security logs processed by the systems delivering the service.
For eligible research, a job-site address may be used to determine property characteristics and a broader region, including through an address or property-information source where that functionality is available. Exact addresses do not enter the deidentified research database.
A site address is not device GPS tracking. Device GPS collection is not a confirmed current feature; any future location feature will have an appropriate notice and permission process before use. Submit only information necessary for your work and that you are authorized to provide. Do not place payment credentials, government identifiers, health records, or unnecessary sensitive information in notes or uploads.
3. Why we process information
- Provide accounts, authentication, permissions, workspaces, job management, estimates, invoices, scheduling, time records, reports, and requested exports.
- Process subscriptions through a payment provider; communicate about billing and account status.
- Deliver requested notifications, scheduled reports, support, and essential service communications.
- Process user-directed AI requests where enabled, subject to Section 7.
- Operate the separately described research program under Sections 5 and 6.
- Maintain and troubleshoot the service, protect information, prevent misuse, investigate incidents, resolve disputes, and comply with law.
Where privacy law requires a legal basis, we rely on the basis appropriate to the specific activity: performing a contract with you, legitimate interests in operating and protecting the service where not overridden by your rights, compliance with law, or valid consent. Processing a business’s employee or customer records is not automatically justified by a contract with that individual. Where we act for a workspace business, its lawful instructions and applicable processing agreement govern that work. Consent is obtained where required and can be withdrawn for future processing.
4. Business workspaces, access, and responsibilities
Each workspace has one designated owner and may have multiple administrators, managers, and crew members. Authorized personnel manage access and deletion according to permissions configured in the application. Owners, administrators, and managers may view workspace site records; crew visibility can be broader or limited to information needed for assigned jobs, depending on workspace settings.
Profile photos are optional and displayed to members of the same workspace, not to customers. Authorized ContrAPPtor™ development and support personnel may access information when needed for their duties. Glide and other necessary service providers process information to deliver the service; access is not limited solely to ContrAPPtor™ employees.
Deactivation revokes a member’s workspace access but preserves records for possible reactivation. Removing a member does not automatically erase historical work logs or attribution, including their name, that form part of the organization’s records. Applicable retention requirements and privacy rights still apply.
The workspace business is responsible for its own lawful collection and use of worker, customer, and property information, required notices and permissions, and access decisions. We process business-controlled records on its behalf where acting as its processor or service provider. We separately determine purposes for our account administration, security, and any authorized independent research; those activities remain subject to applicable law.
Exports and records sent outside the service are controlled by their recipients. Revoking app access cannot retract copies already lawfully exported or downloaded.
5. Research: purpose, fields, and safeguards
Our research program develops historical job benchmarks, task-duration estimates, material-use insights, educational reports, and tools that help contractors plan and estimate work. It may support ContrAPPtor™’s own predictive models. Contractors independently set their labor rates, overhead, profit, and final prices; the program does not prescribe a common selling price.
Eligible research fields: work scope and task descriptions; quantities, sizes, and measurements; estimated and actual labor-hours, crew size, and elapsed time; relevant job-site conditions and property characteristics; broad geographic region; and material types, quantities, and actual costs where available.
Excluded from research: contractor selling prices and customer markups; names, contact details, exact addresses, account and workspace identifiers, identifying links to source records, access and lockbox codes, private entry instructions, and uploaded photos, profile photos, videos, documents, and dictation audio. Estimates and invoices may supply selected structured fields, not complete identifying documents.
Extraction may occur shortly after eligible information is entered. Before information is admitted to the deidentified research database, identifying details must be removed, descriptions screened, and geography and unusually specific property characteristics generalized or suppressed as needed. A name-free record is not automatically anonymous. Records that can still reasonably identify someone remain subject to personal-information protections.
We commit to maintaining qualifying deidentified research information in deidentified form and not attempting to reidentify it, except for assessments permitted by law to test deidentification safeguards. We do not maintain a lookup linking that database back to a user or workspace.
Underlying research records remain internal to ContrAPPtor™, with necessary processing by contracted infrastructure providers. We do not distribute individual research records to members, partner businesses, or other independent recipients. We may publish or share aggregated reports and benchmarks with members, partners, educators, or the public. Outputs must combine sufficient observations and avoid exposing identifiable people, properties, or confidential individual business records.
6. Research eligibility, enrollment, and opt-out
The program is limited to eligible businesses based in the United States or Canada and eligible jobs located in those countries. Other workspaces and job locations are excluded from research and research-model training, though their information is still processed to provide the service.
Research eligibility is determined at the workspace level by its single designated owner. An owner who declares that they are under 18 makes the workspace ineligible. An eligible adult-owned business workspace may contribute permitted job measurements entered by authorized crew members, including younger members only where both law and the applicable provider terms permit their participation. Business enrollment does not waive crew members’ or customers’ rights or replace permissions required from them.
Where lawful and clearly disclosed at enrollment, research participation is included with an eligible free plan. Eligible paid workspaces are enrolled by default only where legally permitted, and the owner may opt out. Where affirmative consent or a separate choice is required, research does not begin until those requirements are met. No subscription tier removes statutory rights or makes their exercise conditional on payment.
Owners can use the available research preference control or contact info@contrapptor.com to request an opt-out or correct eligibility. Once an opt-out takes effect, future extraction stops for both existing records and new entries. We honor legally required withdrawal deadlines and do not treat a pending request as permission to accelerate extraction.
Research information validly collected and irreversibly deidentified before an opt-out or deletion may remain, as may reports and models derived from it, because it can no longer reasonably be attributed to the source workspace. Identifiable records do not qualify for this exception merely because they were copied into a research system.
Before accepting ownership, an incoming owner must review the current policy and provide their age eligibility declaration. The workspace’s existing research preference, including an opt-out, carries over without an automatic pause solely because of transfer. Ownership transfers must meet the service eligibility requirements in Section 17. Where a younger owner is permitted, a transfer to an owner under 18 ends future contributions when the transfer takes effect. Additional consent is obtained where required. Acknowledging this policy is not itself consent to every optional use.
This notice does not retroactively authorize incompatible research use of records collected under an earlier policy. Required notices, choices, and permissions must be in place first.
7. AI features and dictation
Glide’s built-in AI is the planned technology for functions such as drafting estimates, summarizing work orders, and predicting job duration. Future dictation features may turn spoken instructions into proposed jobs, estimates, or notifications. Feature availability and the providers involved will be disclosed as those functions are offered.
Using an AI feature may send the prompt and relevant workspace content to Glide and its AI subprocessors to fulfill the request. This operational processing is separate from contribution to ContrAPPtor™’s research or model-training program. An opt-out of research does not prevent processing needed for a user-requested AI response.
ContrAPPtor™’s required workflow is user review and explicit confirmation before AI-generated jobs, estimates, or outgoing notifications are created or sent. This is an application control we must implement, not a guarantee that Glide agents always request confirmation. Outputs may contain errors; users must check scope, quantities, recipients, and other important details. Task-duration benchmarks are estimates, not guarantees.
For planned dictation, our intended handling is to delete the source recording after transcription and retain only text needed for the task. Provider-side temporary processing, deletion, and backup periods must be established before that feature is enabled; this policy does not promise instantaneous deletion from every provider system.
Provider processing and training: Glide’s standard terms permit certain content and application-configuration training unless an available plan-level opt-out is exercised. They exclude identifiable-individual content in application data sources from that training; this is not a blanket exclusion for every input or file. Later opt-out does not require reversing prior training. See the applicable Glide Classic terms or GlideOS terms.
ContrAPPtor™’s research opt-out controls our research program; it is not itself Glide’s training opt-out. Our intention is to prevent independent provider training on customer content through an available opt-out or appropriate contractual arrangement. We do not represent that this has already been enabled or that disabling an AI feature prevents all platform-level processing. Before placing customer content under an arrangement inconsistent with our commitments, we must resolve the provider terms or limit the deployment and provide any required notice and choice. This policy does not authorize broader use merely because a provider’s default terms allow it.
We do not use these features to make solely automated decisions producing legal or similarly significant effects about individuals.
8. Payment processing
Subscription payment credentials are to be collected and processed by a third-party payment processor, rather than stored in ContrAPPtor™’s workspace database. Stripe is the planned processor, subject to confirmation in the actual checkout experience. The processor’s notice explains its own handling of payment information.
ContrAPPtor™ does not need or intend to store full payment-card numbers, card security codes, or bank-account credentials. We may receive billing contact information, subscription and payment status, amounts, invoice records, transaction references, and limited payment-method descriptors necessary for account administration. Those records are distinct from payment credentials and may be retained for accounting, tax, fraud-prevention, or legal requirements. Do not upload payment credentials into job records or support messages.
If Stripe is used, see the Stripe Privacy Policy.
11. Email and in-app notifications
In-app updates may appear on a notification page users must actively check; they are not a promise of push alerts or pop-ups. Scheduled email reports, including next-day work-order summaries, require email report delivery to be enabled. Turning that option off stops those optional reports.
Essential messages, such as sign-in links, security notices, billing notices, policy notices where required, and inactivity or deletion warnings, may continue regardless of optional report or marketing preferences. If we send marketing emails, they will have a separate unsubscribe mechanism and comply with applicable consent requirements. Unsubscribing from marketing does not stop essential service emails.
12. Mobile information and messaging privacy
We use mobile numbers, consent and opt-out records, notification preferences, message content, and delivery information to operate and support the messaging program.
We do not sell or share mobile numbers or SMS opt-in information and consent with third parties or affiliates for their own marketing or promotional purposes. Messaging consent information is excluded from independent marketing disclosures and from the research program. Information may be processed by messaging providers, aggregators, and carriers as needed to deliver and support texts, or disclosed when legally required.
Consent to ContrAPPtor™ texts does not authorize unrelated third parties to send messages. We retain limited suppression and consent records as needed to honor choices and demonstrate compliance.
13. SMS terms and conditions
The ContrAPPtor™ notification program is operated by ContrAPPtor LLC. It is for app-related notifications to enrolled users and team members, such as account, assignment, scheduling, work-reminder, and support messages. It is not a promotional SMS program. Texting contractors’ customers is not included without a separately established feature, notice, and appropriate recipient consent.
Voluntary enrollment
SMS requires a separate affirmative opt-in, such as checking an initially unchecked SMS consent box for a number you are authorized to use. Providing a number, accepting this privacy policy, or joining a workspace alone does not enroll you. Messages may use automated technology. SMS consent is not a condition of purchase. If you decline, you will not receive text alerts; you may check available in-app notifications and enable optional email reports.
Frequency, rates, and help
Message frequency varies. Message and data rates may apply. Frequency depends on activity and notification settings. Consult your carrier about charges.
To unsubscribe, reply STOP. We also honor other clear, reasonable revocation requests, including email to info@contrapptor.com. You may receive one non-promotional confirmation of the opt-out; messages covered by the withdrawal then stop in accordance with applicable requirements. Re-enrollment requires a new valid opt-in.
For help, reply HELP or contact info@contrapptor.com. Opting out of texts does not delete an account or stop essential non-SMS communications.
Your number and delivery
Tell us if your number changes or is reassigned. Delivery depends on network and carrier availability; messages can be delayed or undelivered. Carriers are not liable for delayed or undelivered messages. SMS is not an emergency service.
14. Retention, closure, and backups
We keep live workspace records while needed to provide the service, subject to the schedule below, valid deletion requests, and applicable legal requirements. A member’s inactivity is different from inactivity of the whole workspace: activity by any authorized team member counts.
- Free workspace inactive for 30 days: send the owner an inactivity reminder.
- Still inactive at 60 days: mark the workspace dormant and send a deletion warning with an export option.
- Still inactive at 90 days: delete the workspace’s identifiable records and uploaded content, including photos, from live systems. Send a final reminder seven days beforehand. Resumed qualifying activity resets the inactivity period.
- Paid subscription ends: after the paid-through period expires, allow 30 days of read-only access and exports, then delete workspace data unless the owner renews or selects an available free plan.
- Payment failure: provide a seven-day retry period and notices before beginning closure. A retry notice identifies the applicable dates; a failure does not itself erase records.
- Owner requests workspace deletion: explain and confirm the consequences, disable ordinary access, and delete live workspace data within 30 days, subject to applicable legal requirements.
This is ContrAPPtor™’s workspace retention schedule, not a Glide backup or platform-retention guarantee. It must be implemented through our service operations and supported provider deletion processes; notices identify the deadline relevant to a particular workspace. Privacy requests are handled within any shorter legally required period. Archiving a job is not deletion, and deleting an individual member does not necessarily erase the business’s historical work records.
Backups are separate from live storage
A 30-day backup history means a recovery window, not that live records disappear after 30 days without a login. Backup availability, coverage, and recovery depend on the contracted Glide product and plan. We do not promise a specific restore window, complete recovery, or a universal 30-day backup-erasure deadline until the applicable provider arrangement supports it.
Deleted records may remain in restricted backups until those copies expire through the provider’s documented lifecycle. They are not retained there for ordinary use or research. If a backup is restored, applicable deletion and opt-out instructions must be reapplied. Contact us for the retention details applicable to your workspace.
Limited exceptions
We may retain limited billing and tax records, consent and suppression records, security records, and information needed for legal obligations or actual disputes for as long as necessary for those specific purposes. Such exceptions do not authorize indefinite retention of the entire workspace. Irreversibly deidentified research and aggregate outputs may remain as explained in Section 6. Recipients control copies exported outside the service.
15. Security and incident handling
We are responsible for applying reasonable administrative, technical, and organizational safeguards appropriate to the information and risks, alongside the infrastructure safeguards of our providers. Our security approach includes limiting personnel access to legitimate duties, workspace permissions, authentication, and appropriate handling of sensitive site information. Available protections depend on the product, plan, and correct configuration. For GlideOS, native authentication and access controls must govern access; custom visibility conditions are not a permitted substitute. ContrAPPtor™ remains responsible for proper configuration. We do not promise unverified certifications, two-factor authentication, or isolation guarantees.
No service can guarantee absolute security. That limitation does not remove our duties under applicable law. Workspace owners should assign access carefully, protect sign-in links and credentials, remove unnecessary access, and avoid putting sensitive information in unrestricted fields.
Report suspected unauthorized access or disclosure to info@contrapptor.com. We investigate and take appropriate response steps, including legally required notifications to affected customers, individuals, or authorities.
16. Privacy rights and choices
Depending on where you live, the context of the records, our role, and applicable law, you may have rights to access or confirm processing; correct inaccuracies; request deletion; obtain a portable copy; withdraw consent; restrict or object to processing; or opt out of sale, targeted advertising, or specified profiling. We do not sell personal information or share it for cross-context behavioral advertising. Some laws also provide information about specific third-party recipients.
Use available account controls or email info@contrapptor.com with “Privacy request” and enough information to locate the relevant account or workspace. Former workers and customers may email even without app access. Do not send passwords or unnecessary sensitive documents. We may verify identity and an authorized agent’s authority proportionately.
Operational deletion in the app requires an authorized workspace role. A personal-data request is a separate process: we coordinate with the workspace business where it controls the records and respond or assist as required by law. An owner’s preference does not override an individual’s statutory rights. Requests may be subject to applicable exceptions, including lawful business recordkeeping.
We respond within applicable statutory deadlines and explain any permitted extension. If a request is denied, email the same address with “Privacy appeal.” We will review the appeal and provide legally required explanations and complaint options. We do not retaliate or unlawfully discriminate for exercising privacy rights.
You may complain to your applicable privacy regulator. Oregon residents covered by the Oregon Consumer Privacy Act may request a list of specific third parties receiving their personal data and contact the Oregon Department of Justice. Canadian users may contact the Office of the Privacy Commissioner of Canada or the relevant provincial authority. EEA and UK users may complain to their competent supervisory authority.
Research choices are described in Section 6; email preferences in Section 11; and SMS revocation in Section 13. Withdrawing consent does not invalidate lawful processing already completed, but does affect future processing covered by that withdrawal.
17. Younger users and age eligibility
ContrAPPtor™ is a business and professional tool. Access must satisfy the age and eligibility rules of the Glide product actually used, as well as applicable law. GlideOS’s published terms require age 18 or the local age of majority, whichever is higher. Glide Classic’s published terms set a minimum of 13 and require parent or guardian acceptance for minors. An adult workspace owner does not automatically create an exception for a younger user.
We do not offer underage access contrary to the applicable provider rules. We must confirm that the deployment permits younger end users before enabling their access. The owner’s “18 or older” research declaration does not replace these access requirements. Where a younger owner is permitted, that owner’s workspace remains excluded from ContrAPPtor™ research.
Glide’s data rules prohibit information collected from children under 13. Do not submit such information through ContrAPPtor™. If we discover prohibited children’s information or ineligible access, we will restrict processing and address removal as appropriate. Contact info@contrapptor.com with concerns. We continue to honor applicable children’s privacy obligations.
18. International processing
ContrAPPtor LLC operates from the United States. Information may be processed in the United States and other countries where our providers operate; this policy does not promise Canadian, European, or other local data residency. Those countries’ laws may differ, and information may be accessible to authorities under applicable legal process.
Where required, transfers must use an applicable adequacy decision, approved contractual safeguards, or another lawful mechanism. Contact us for information about the arrangements applicable to your data. Canadian workspace information may be processed outside Canada. Restricting the research program to U.S. and Canadian jobs does not eliminate international privacy obligations for the underlying service.
19. Providers, integrations, and external services
Glide is our selected application and database platform. Glide Classic and GlideOS have separate terms; the actual deployment, subscription, processing agreement, and enabled features determine the applicable provider protections. We do not treat an advertised Enterprise feature as active before it is included in our service arrangement.
Provider references: Classic terms, Classic privacy notice, Classic processing addendum; GlideOS terms, GlideOS privacy notice, GlideOS processing addendum; and provider/subprocessor information. Payment processing is separately described in Section 8.
Information not permitted in the application
Glide’s Classic data rules and GlideOS data rules prohibit unencrypted login secrets, financial-account numbers, protected health information, information collected from children under 13, specified sensitive personal characteristics, and identifying information embedded in application structure or shared templates. Ordinary profile photos are not to be used for biometric identification. Do not submit prohibited information in fields, uploads, prompts, or configuration.
Restricted information, including sensitive financial transaction records, requires an appropriate paid Glide account and a private application limited to approved users. A ContrAPPtor™ free membership does not mean the underlying Glide application may use a free plan or expose private workspace data publicly.
We remain accountable for our own processing and provider arrangements. External sites and independently operated services have their own notices. Enabling an integration can cause selected records to be sent to that service. Review the notice and scope before connecting it. A provider link does not waive your rights or expand our permission to use your information.
20. Changes to this policy
We may revise this policy as practices, features, or legal requirements change. We will publish the revised version and update the date. For material changes, we will provide appropriate notice through the service or email and obtain consent where required before the new processing begins.
Merely posting a revision, continued use, or acknowledging the notice is not a substitute for consent that the law requires. A policy update does not enroll anyone in SMS, override a research opt-out, or retroactively authorize incompatible uses of existing records.
21. Contact us
ContrAPPtor LLC
Oregon, United States
Email: info@contrapptor.com
Website: www.contrapptor.com
Use “Privacy request,” “Privacy appeal,” “Research preference,” or “Security concern” in your subject line to help route your message. For SMS help, reply HELP; to stop texts, reply STOP.