Privacy Notice

Controller. Contrax Inc. is the data controller for personal data collected through the Service.

Data we collect: account details (name, email, password hash); profile info (zip code, account type, business name); content you submit (quote photos, project details, messages); usage/telemetry (page views, device type, IP address); support communications.

Purposes & legal basis: account creation and service delivery (contract performance); fraud/security (legitimate interests); customer support (contract); analytics and product improvement (legitimate interests); marketing communications you opt into (consent).

Data sharing. We share personal data with: (a) infrastructure providers (hosting, database, email delivery); (b) our Merchant of Record Paddle.com for sale of the product, subscription management, payments, tax compliance, and invoicing; (c) AI providers (Google Gemini) that process de-identified analysis prompts; (d) professional advisers; (e) authorities where required by law.

Retention. Account data is kept while your account is active and up to 24 months after deletion for compliance and audit needs, then deleted or anonymized.

Security. We use encryption in transit and at rest, access controls, and regular reviews of our practices.

Your rights. Depending on your jurisdiction you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to lodge a complaint with a supervisory authority. Email privacy@contrax.app.

Cookies. We use essential cookies for authentication. Analytics or marketing cookies, if used, are opt-in.