Privacy notice

When you calculate a project estimate, project inputs are sent to HomeCostIQ’s estimate endpoint and are not submitted to a contractor. For applicable estimates, only the ZIP code is also sent to HUD USER or Zippopotam.us to identify state geography. On appliance comparison pages, the ZIP is used only for a separate guide-reference band; entered repair and replacement amounts stay unchanged. These public lookup services do not receive other project specifications or supply contractor prices. Project estimates are not saved automatically. If you are signed in and explicitly choose Save to account, the project inputs and a server-calculated result snapshot are stored in your account until you delete them or delete your account. If you choose Share, project inputs or rent-versus-buy assumptions may be placed in the link’s query string and included in the copied summary; links can appear in browser history or be visible to recipients, so do not share them if the inputs are sensitive. Print / PDF uses your browser’s print workflow. Two-bid comparison entries are stored in this browser’s local storage only, are not sent to HomeCostIQ, and can be cleared with the Clear bids control or browser storage settings.

Supabase Auth is used for account sessions. Project estimates are stored only after you explicitly save them while signed in. The homecostiq_project_estimates table uses row-level security that restricts reads and writes to the authenticated user ID. You can review and delete saved estimates at /account/estimates, download them through the account export, or remove them when you delete your account. Account deletion does not delete separate contact or project-interest submissions. Other homeowner-profile and scenario features have separate database-table requirements.

The Find a Pro form and its server endpoint are currently disabled, so new project-interest records are not accepted. Public submissions remain closed until owner review access and secure scheduled deletion are confirmed. Existing submissions have not been deleted by this change. If the form is enabled, it will collect name, email, ZIP code, project type, timeframe, project description, consent choices, and submission time. The optional contractor-sharing consent is separate from the required consent to process an inquiry; this release does not route submissions to contractors, and no referral is guaranteed. Owner alerts are available only inside the protected dashboard; no email notification service is configured. The repository contains a cleanup endpoint with a 90-day threshold, but no scheduled invocation is configured here, so that threshold is not an active retention guarantee.

The Contact form and its server endpoint are disabled in this release, so new messages are not accepted. Before being paused, the form stored name, email, message, consent status, and submission time in the HomeCostIQ application database; no email delivery or administrator notification was configured. Existing messages have not been deleted by this change. The repository contains a cleanup endpoint with a 12-month threshold for these records, but no scheduled invocation is configured here; that threshold is not an active retention guarantee.

Production analytics and performance monitoring are enabled through Vercel Analytics and Speed Insights. HomeCostIQ also stores daily aggregate HVAC pilot counts by event, project slug, and UTC date; those rows contain no user ID, ZIP, email, phone, name, message, or entered price. Custom analytics events contain event names and limited project context, not contact details or account IDs. The repository includes a cleanup endpoint that targets contact messages older than 12 months, project-interest records older than 90 days, and rate-limit rows older than 24 hours, but no scheduled invocation is configured here. Do not treat those thresholds as an active retention guarantee. No retention or automatic deletion schedule is confirmed for pilot aggregates. Technical logs and provider backups may have separate provider-controlled schedules.

No AdSense code or ad requests are active in this release, so account data, ZIP codes, saved estimates, entered bids, and calculator inputs are not sent to advertising systems. Ad requests must remain disabled until the owner supplies the actual AdSense ownership/publisher details and ads.txt entry, and a Google-certified consent platform is configured and tested for personalized ads in the EEA, UK, and Switzerland. No CMP or AdSense verification method is represented as configured here.

You can use calculators without submitting contact details. If you sign in, you can explicitly save project estimates, view or delete them at /account/estimates, export them, or permanently delete your account; account deletion cascades saved estimate rows. Historic contact and project-interest submissions are separate from account deletion and have not been removed by this change. No monitored privacy-request address or verified deletion process has been supplied, so the site cannot currently accept requests to locate or erase those historic submissions. The owner must provide a monitored contact, identity-verification steps, a deletion workflow, and an active retention schedule before public submissions resume.