Profixo Privacy Policy

We act as the controller of information about our own website visitors, prospects, and account holders (for example, your name and email when you request access, use the free Verobid scan, or sign in).

We act as a processor for our business customers. When a company uses Verobid or Profixo Ops, the customer, estimate, applicant, employee, and client records inside their account belong to that company. They decide why that data is collected and how it is used. We process it only on their instructions. If you are an applicant, employee, or customer of one of those businesses and want to access, correct, or delete your information, contact that business directly. We will help them respond.

You give it to us

• Account details: name, email, phone, company, role, password (stored hashed).
• Content you enter or upload: estimates, price books, customer records, photos, files, notes, applicant and employee records, incident reports, assignment details, and messages.
• Free scan submissions: the estimate you upload (processed, then discarded), your trade, city, and the contact details you submit to unlock results.
• Communications with us: emails, texts, forms, support requests.

Collected automatically

• Log and device data: IP address (hashed for the scan rate limit), browser type, pages viewed, timestamps, and error logs.
• Cookies and local storage needed to keep you signed in and remember settings. We do not run advertising cookies.

Sensitive information inside Profixo Ops

Business customers may store identity documents, employment eligibility records, background-check status, payroll-related figures, and incident reports about their workers. That data is stored in access-controlled private storage, visible only to roles the customer assigns, and access may be logged. We never use it for our own purposes.

• To provide, secure, and improve our services.
• To run features you trigger, including AI features (estimate import, market comparisons, price checks, visualizations, drafting, prescreening, and assistants).
• To send service messages: invites, password resets, estimate deliveries, assignment confirmations, reminders, and alerts.
• To respond to you and, for prospects and scan users, to follow up about our products.
• To meet legal obligations and enforce our terms.

We do not sell personal information and do not share it with advertisers.

Our AI features send the relevant content (for example, the text of an estimate or a record you ask about) to model providers, currently Anthropic and Google, to generate a response. We use these providers under business terms that do not permit them to train on your data. AI output is generated automatically and can be wrong; it is provided to help people decide, not to decide for them.

Where a business uses our platform to text its workers or customers, messages are sent because that business has a relationship with you and you agreed to receive them. Reply STOP to any message to opt out. Message and data rates may apply. Consent to texts is not a condition of employment or purchase.

• Service providers that host and run our products: Lovable Cloud and Supabase (hosting, database, storage, email), Anthropic and Google (AI), GoHighLevel (messaging and CRM), Stripe (payments, where used), and Bluehost (website hosting for some client sites). They may only use data to provide their service to us.
• Your business if you use our products through an employer or contractor account: that business can see the data in its own account.
• Recipients you choose: when a contractor sends an estimate through Verobid, the recipient sees the estimate and, if the contractor enables it, the market check.
• Legal: when required by law, subpoena, or to protect rights and safety.
• Business transfer: if Profixo is acquired or merges, data may transfer with the business under this policy.

• Account and customer data: kept while the account is active and for up to 30 days after cancellation so an export can be requested, then deleted or anonymized unless law requires longer.
• Free scan records: summary retained for up to 12 months for follow-up and abuse prevention; uploaded files are not stored.
• Signed estimate records: retained as long as the contractor's account is active, since they document an agreement.
• Logs: typically 90 days.
• Records processed for a business customer: retained as that customer instructs.

Data is encrypted in transit and at rest. Access is controlled by role-based permissions and row-level security so one company cannot see another's data. Sensitive documents live in private storage accessed by short-lived signed links. No system is perfectly secure; if we learn of a breach affecting you, we will notify you and any affected business customer as the law requires.

• Update your account details in the app or by emailing us.
• Opt out of follow-up emails using the unsubscribe link or by replying.
• Request a copy of the information we hold about you as a controller, or ask us to delete it, at cedric@getprofixo.com. We verify requests and respond within 45 days.
• For information held inside a business customer's account, contact that business. We will support their response.
• Residents of states with privacy laws (including California) may have additional rights to know, delete, correct, and not be discriminated against for exercising them. We honor those rights for everyone.

Our services are for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe a minor's data has been submitted, contact us and we will delete it.

We operate from the United States and store data there. If you use our services from elsewhere, your information is processed in the U.S.

We may update this policy. We will post the new version with a new effective date and notify account holders by email for material changes.