Privacy Policy

Last updated: March 2026

1. Who We Are

ContractorWebDev is a web development agency demo site showcasing interactive features for local contractors. This site is operated for demonstration purposes. For any privacy-related requests, contact us at hello@contractorwebdev.com.

2. What Data We Collect

Source Data Stored
Quote Calculator form Name, phone, email, address, ZIP, problem description, photos (not saved — see §4) Yes — deleted after 90 days
Web Quote form (landing page) Name, email, phone, trade, budget range, timeline, project description Yes — deleted after 90 days
Emergency form Name, phone, problem type (simulation only) No — discarded immediately
Service Area check ZIP code (for geolocation lookup) No — not stored
Cookies csrftoken (CSRF protection), sessionid (technical session) Browser only — see Cookie Policy

3. Why We Collect It

  • To generate AI-powered price estimates in response to your request
  • To demonstrate the features of a contractor website to potential agency clients
  • To protect our forms from spam and automated abuse (CSRF tokens, Cloudflare Turnstile)

Legal basis (GDPR): Consent (Article 6(1)(a)) — you explicitly agree before submitting any form.

4. AI Processing of Your Data

How AI estimates work

When you submit the Quote Calculator or Web Quote form, your text description (and any photos you attach) are sent to Google Gemini AI via the OpenRouter API service to generate a cost estimate. This means:

  • Your description and photos are transmitted to OpenRouter's servers and then to Google's AI infrastructure
  • Photos are never saved to disk — they are converted to a temporary data format, sent to the AI, and then discarded
  • The AI-generated estimate is returned to you and stored alongside your contact details for up to 90 days

Important: AI estimates are generated automatically and are not professional assessments. They are indicative only and must be confirmed by an on-site inspection. See Terms of Use for full disclaimer.

OpenRouter privacy policy: openrouter.ai/privacy. Google privacy policy: policies.google.com/privacy.

5. Third-Party Data Processors

Service Purpose Privacy Policy
OpenRouter / Google Gemini AI estimate generation openrouter.ai/privacy
Cal.com Online booking scheduling — stores name, email, phone, and chosen time slot on Cal.com servers cal.com/privacy
Cloudflare Turnstile Bot protection on all forms cloudflare.com/privacypolicy
OpenStreetMap / Nominatim ZIP code geocoding on Service Area page osmfoundation.org

6. Data Retention

  • Quote and Web Quote requests — automatically deleted after 90 days
  • IP addresses — not stored in the database; used only in temporary server memory for rate-limiting and discarded immediately
  • Booking data — stored by Cal.com according to their own retention policy
  • Cookies — session cookie expires when the browser closes; CSRF cookie persists per browser session

7. Your Rights

Under GDPR and CCPA you have the right to:

  • Access — request a copy of the data we hold about you
  • Deletion — request that we delete all records associated with your email address
  • Rectification — request correction of inaccurate data
  • Portability — receive your data in a machine-readable format
  • Withdraw consent — at any time, for future processing

To exercise any of these rights, email us at hello@contractorwebdev.com with the subject line "Data Request". We will respond within 30 days.

8. Security

  • All data is transmitted over HTTPS (TLS encryption)
  • Forms are protected by CSRF tokens and Cloudflare Turnstile
  • Photos are never written to disk — processed in memory only
  • Database access is restricted to the application server

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after a policy change constitutes acceptance of the updated terms.

10. Contact

For any privacy questions or data requests:
hello@contractorwebdev.com