Privacy Policy

RemediationPros is operated by Echo Six Group LLC ("we", "us").

This policy describes what RemediationPros collects, why we collect it, and who else handles it. You can browse the directory without an account. An account is for claiming a listing, or submitting a company. Premium is coming later and is not offered yet.

When you sign up, Supabase stores your email address and password credentials and sends the confirmation message. We store your account id and email in our database so listings, claims, and subscriptions can be attached to you. A session cookie from Supabase keeps you signed in. We use that cookie to run the account. We do not use cookies for advertising.

If you submit or claim a company, we store the business details you provide: company name, services, license information, address, phone, website, email, a description, and your note about how you are connected to the company. A work email on a claim is used as a signal while we review it.

After a listing is public, visitors can see the business name, location, services, license numbers, and the phone, email, and website on that listing. Claim notes and your login email are not published as the public profile. A Premium listing can also show a logo and photos the owner uploads. Those files are stored in Supabase Storage and appear on the public profile while Premium is active.

Much of the directory is copied from public licensing records, such as a company name, a license number, and a location. Those records are already public. We show them so people can look up contractors, and we ask visitors to confirm status with the issuing board.

If you have claimed a listing, you can upload a document for work a state does not license. We collect the credential type (IICRC certification, general liability insurance, workers' compensation, bond, or other certification), the issuer, the name on the document, an optional credential or policy number, the issue date, the expiration date, and the file. The file must be a PDF, JPG, or PNG. We ask you to redact anything the form does not ask for.

We collect this so an admin can review the document, and so an accepted document that has not expired can be listed on the public profile as Credentials on record. The public text is the type, the issuer, the expiration month and year, and the date we checked it. The public page does not show the file, the credential or policy number, or the name on the document. A credential on file is not a state license. Featured and Premium do not change who reviews it or what becomes public.

You can see the details and the file for credentials on listings you own. Admins can open the file through a short-lived link while they review it. The file is stored in a private Supabase Storage bucket. It is not publicly readable.

When a credential expires or you replace it, we delete the file and keep the record of what was submitted. A file we do not accept is deleted about 30 days after that decision. The decision and the reason stay on your account. An upload that never finishes is deleted within a day, including its record.

Premium is not offered yet. When it is, it will be billed by Stripe. Stripe Managed Payments is the merchant of record and calculates and handles sales tax. Stripe receives the payment details you enter at checkout. We store the Stripe customer id, subscription id, price, status, renewal date, and scheduled cancel date. We do not store your full card number.

Resend delivers listing, claim, and credential notices: a new company submission or claim (to our admins), approval of a claim, a new credential upload (to our admins), the decision on that credential (to the account that uploaded it), and notice when a self-submitted listing is published or taken off the public site. Those messages include the business name and links back to the site. A credential notice names the credential type and issuer. It does not include the file or the credential or policy number. They go to the account email, or to the admin addresses we configure. Supabase sends the account confirmation email separately.

The request-a-quote form is on public profiles. We ask for your name, email, an optional phone number, and a message about the job. We also save the listing's city, state, and ZIP, and the services on that listing.

When the business has claimed its listing and saved an email address, we email the request to that address and save a copy for their account. When the business has not claimed its listing, we store the request and show your name, email, phone, and message to that business only after it claims the listing, and only for 30 days after you send it. We do not email an address that came from a public roster. We do not put your request on the public profile. We never sell homeowner details.

We use the network address to limit repeat quote requests. A short burst limit stays in server memory and is not written down. The daily limit uses a one-way hash of that address, stored with the request. We do not store the raw IP address. A repeat from the same email to the same business within 7 days is not stored again. Resend keeps a delivery record when we email a claimed business. If the bot check is turned on, Cloudflare Turnstile checks the submission before we accept it.

Questions about a message can go through the contact form.

The contact form asks for your name, email, a topic, and a message. We email that message to our admins. We do not store it in our database, and we do not email you an automatic copy. Resend keeps a delivery record. We use the IP address of the submission to limit repeat messages. That limit lives in server memory for a short time and is not written to our database. If the bot check is turned on, Cloudflare Turnstile checks the submission before we accept it.

• Run search and the public directory.
• Create accounts and keep them signed in.
• Review claims, self-submitted listings, and credentials on file.
• Bill for Premium and match the listing to the Stripe subscription.
• Save quote requests, email them to a claimed business, and show them to that business after it claims the listing.
• Show a claimed business the daily totals of profile views, search appearances, and contact clicks for its listing.
• Send the account, listing, claim, credential, quote-request, and contact-form emails described above.
• Protect the site and fix errors.

We do not sell personal information.

When a public listing is opened, or shown in search results or on a service, state, or city page, we add one to a daily total for that listing. A click on that listing's phone link, website link, or email link is counted the same way. Each total is the listing, the day in America/Phoenix, the kind of event, and how many times it happened. We do not store the visitor's name, email, IP address, or a separate row for each visit.

We skip counts from known bots and crawlers, from link previews, and from pages the browser fetches ahead of a visit. We do not count an event from the signed-in owner of that listing or from an admin. A cookie named rp_stat is stored on your browser for about 30 minutes so a refresh is not counted again. It holds short codes for the events already counted, not your name or a lasting id. We do not use it for advertising, and we do not send these counts to a third-party analytics service.

A contractor who has claimed a listing can see these totals on the dashboard. Free and Premium listings are counted the same way. Quote requests are stored separately, as described above, and are not part of this cookie.

• Supabase hosts accounts, the application database (including quote requests and daily listing totals), uploaded logos and photos, and private credential files.
• Stripe, through Stripe Managed Payments, processes Premium payments and sales tax as merchant of record.
• Resend sends the listing, claim, credential, quote-request, and contact-form emails.
• If the bot check is on, Cloudflare Turnstile receives the check token and connection data for the contact form and the quote form.
• Vercel hosts the website and processes ordinary request logs, such as IP address and the page requested, to deliver the site.
• Visitors see the information on a public listing, and license data taken from public records.

If you call or email a contractor from a published listing, that contact is between you and them. We also share information when the law requires it.

We keep quote requests so we can count them and so a claimed business can see a recent one. That business can see the homeowner's name, email, phone, and message for 30 days. After that, we do not show those details to the business. We do not sell them.

We keep those daily totals while the listing is in the directory. They are counts, not a history of who visited.

We keep account, listing, claim, credential, and subscription records while they are in use, and longer when we need them for security, disputes, or tax records related to a Premium charge. Credential files are deleted when the credential expires or is replaced, about 30 days after we do not accept one, or within a day if the upload never finishes. The written record can remain after the file is gone. Public-record listings can stay in the directory after an account is closed, without that account email attached. Use the contact form to ask about access to or deletion of your account. We may keep a record when the law requires it.

RemediationPros is meant for people hiring contractors and for the companies that list here. It is not directed at children under 13, and we do not knowingly collect their personal information.

When this policy changes, we update the Last updated date on this page. The new policy applies to information we hold after that date.