1. Information we collect
We collect contact and inquiry information that you choose to provide, including name, email, role, organization or household name, general service area, offer interest, timing, and message content. Review and agency applications may request limited qualification information.
The authenticated portal stores records you create for tasks, assets, vendors, and property issues. Visual Issue Triage may collect a general room or area label, symptom description, urgency answers, up to three property photos, AI-assisted observations, referral requests, and a voluntarily supplied repair outcome or invoice total. Do not enter a precise property address.
Stripe processes purchases and may provide transaction status, order amount, date, and billing contact information. We do not receive or store full payment-card numbers.
The site records anonymous daily counts for approved events and public page paths. These aggregate records do not contain a cookie identifier, raw IP address, email, device fingerprint, or full referrer. A temporary one-way hash of a network address may be used to limit abusive form submissions. The raw address is not stored.
2. Information and images you must not submit
Do not send precise property addresses, passwords, alarm or access codes, Social Security numbers, government identification, full financial-account or payment-card details, medical information, information about minors, private itineraries, security plans, or other highly sensitive information through public forms, the portal, or ordinary email.
Do not upload photos showing people, minors, neighbors, mail, IDs, bills, keys, access devices, alarm or surveillance controls, security layouts, family photographs, license plates, valuables, or computer screens. Do not enter danger, climb, open equipment, or disturb material to take a photo.
3. How we use information
- Respond to inquiries and determine fit.
- Process purchases, deliver materials, and provide support.
- Operate the authenticated workspace and preserve a customer-controlled issue record.
- Re-encode issue photos, remove ordinary image metadata, perform optional AI-assisted visible-evidence triage, and prepare a work-order draft.
- Administer a signed service or pilot agreement.
- Secure, diagnose, and improve the website.
- Prevent fraud and form abuse.
- Meet accounting, tax, legal, insurance, and recordkeeping duties.
We do not use uploaded photos to train a model, create advertising, publish a case study, or develop facial recognition. Any materially different secondary use requires separate, specific permission.
4. Service providers and disclosure
Cloudflare hosts the website, database, private image storage, and image processing. Stripe processes payments for platform products and services, not repair invoices. OpenAI may process re-encoded, metadata-stripped issue photos that users confirm exclude sensitive content, plus limited symptom context, when production AI triage is used. Storage is disabled for the API request, though provider abuse-monitoring retention may still apply under its data controls. These providers process information under their own terms and privacy practices.
The referral beta does not send a provider the customer's account information, issue summary, property photo, address, access detail, or other customer data. Selecting an option only reveals that provider's recorded business contact details to the customer. The customer decides whether to contact the provider and what to disclose outside the platform. We may disclose information to professional advisers or authorities when reasonably necessary to comply with law, protect rights and safety, or address a claim. We do not sell personal information or share it for cross-context behavioral advertising.
5. Retention
Inquiries that do not become customer engagements are scheduled for deletion or de-identification 12 months after submission. Temporary rate-limit hashes expire within 48 hours. Anonymous daily site counts may be retained for 13 months. Each accepted issue photo receives a 30-day access cutoff when it is stored. At that cutoff the application stops serving the photo or sending it for analysis, marks it for deletion, and retries deletion from private object storage through a maintenance queue. Physical storage deletion is asynchronous and may complete after access has ended. A legal hold may require a separately documented exception, but a held image will not silently remain available through the ordinary portal.
Issue descriptions, immutable assessment and reviewer-decision records, work-order versions, referral choices, and voluntarily supplied outcomes are separate non-image records and may be retained for the active pilot, safety audit, dispute handling, or legal and accounting duties. Users can request earlier photo deletion in the portal; the application first makes the image inaccessible, invalidates the affected assessment and provider options, and then processes storage deletion. A request to delete the complete case can be submitted through the privacy request form. Transaction, tax, contract, and service records may be kept longer when reasonably required.
6. Cookies and preference signals
The public site does not use advertising cookies or a cross-site tracking identifier. The Private Estate OS portal uses a secure, first-party session cookie after sign-in. Stripe may use technologies necessary to process a payment after you choose to use checkout. Because there is no uniform browser Do Not Track standard, the public site does not respond to that signal. If a legally recognized opt-out signal becomes applicable to our practices, it will be handled as required.
7. Your requests
You may ask to access, correct, or delete personal information associated with you by using the privacy request form. We may verify identity before completing a request. Legal exceptions may apply. We will not discriminate against a person for exercising an applicable privacy right.
8. Security and children
We use safeguards appropriate to the limited information collected, but no transmission or storage system is completely secure. See our Security Practices. The website is intended for adults and is not directed to children under 13. Contact us if you believe a child has submitted information.
9. Changes and contact
We may update this policy as practices or legal obligations change. The posted effective date shows the current version. Toure Construction LLC is the operator responsible for this policy. Use the contact form for questions and select “Privacy request.”