Privacy Policy

1. Introduction

FloorStrategy ("we," "us," or "our") operates floorstrategy.com. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Information you provide:

• Account information: name, email address, company name, password
• Profile information: phone number, profile photo, business type
• Business data: bids, projects, installer records, client information, price lists, and other content you create or upload in the Service
• Payment information: billing details collected and processed by Stripe (we do not store your full card number — see Payment Processing below)
• Communications: messages you send us via email or the bug report feature

Information collected automatically:

• Usage data: pages visited, features used, actions taken within the Service
• Device information: browser type, operating system, IP address
• Cookies and similar technologies for authentication and session management

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service
• Process payments and manage your subscription
• Send transactional emails (account confirmation, scheduling notifications, invoice updates, go-back alerts)
• Respond to support requests
• Monitor for security threats and abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Payment Processing

Payments are processed by Stripe, Inc. When you enter payment information, it is transmitted directly to Stripe and processed on their servers. FloorStrategy stores only a Stripe customer ID and subscription status — we do not store your full card number, CVV, or billing address. Stripe's privacy policy is available at stripe.com/privacy.

5. Google Calendar Integration

What data is accessed

If you choose to connect your Google account, FloorStrategy requests read-only access to your Google Calendar events (the calendar.events.readonly scope) via Google OAuth. We read your calendar events in order to import and display them inside FloorStrategy, where you can attach those dates to flooring projects and schedule installations. FloorStrategy does not create, edit, or delete events on your Google Calendar.

How this data is used

Imported Google Calendar events are displayed within FloorStrategy so you can use those dates to schedule projects and assign installers. When you attach an imported date to a project, FloorStrategy may create or update the corresponding install event on your FloorStrategy calendar. Google Calendar data is used solely to provide these scheduling features to the account holder who connected the Google account — never for any other purpose.

Google API Services User Data Policy — Limited Use

FloorStrategy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, FloorStrategy:

• Does not sell Google user data.
• Does not use Google user data for advertising or to serve ads of any kind.
• Does not transfer or use Google user data for any purpose other than providing the scheduling features described above.
• Does not allow humans to read your Google Calendar data, except where necessary to ensure security, comply with applicable law, or where you have given explicit consent.

Storage and retention

Your Google OAuth connection tokens and imported calendar event data are stored securely and associated with your company account. This data is used only to power the calendar scheduling features and is not shared with other companies or users outside your account.

Disconnecting Google Calendar

You can disconnect Google Calendar at any time from FloorStrategy Settings → Integrations. Disconnecting removes the stored connection tokens from our servers and ends our access to your Google Calendar. You can also revoke access directly from your Google Account permissions page.

6. Data Sharing

We share your information only in the following circumstances:

• Service providers: We use Supabase (database hosting), Vercel (hosting), Resend (transactional email), Stripe (payments), and OpenAI (AI blueprint analysis). Each processes data only as necessary to provide their service.
• Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights and safety of FloorStrategy or others.
• Business transfers: If FloorStrategy is acquired or merges with another company, your information may be transferred as part of that transaction.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data and business data within 30 days, except where retention is required by law.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and secure authentication. No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take reasonable steps to protect your data.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information via your account settings
• Delete your account and associated data via Settings → Danger Zone
• Opt out of non-transactional communications

To exercise these rights, contact garrett@floorstrategy.com.

10. Cookies

We use cookies and local storage for authentication sessions and user preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings but this may affect Service functionality.

11. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by email or by posting a notice in the Service. The date at the top of this policy reflects the most recent update.

13. Contact

Questions about this Privacy Policy? Contact us at garrett@floorstrategy.com.