Zhlooop ("we," "us," or "our") operates an AI-powered lead marketplace that connects homeowners and consumers ("Consumers") with local service businesses ("Businesses"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using Zhlooop, you agree to the practices described here.
1. Information We Collect
1.1 Information you provide directly
- Consumers: When you submit a service request, we collect your name, email address, phone number, ZIP code, job description, budget, and timeline. If you create an account, we also store a profile linked to your Clerk authentication ID.
- Businesses: When you claim a profile or sign up, we collect your business name, contact email, phone number, service categories, service radius, and minimum job budget. Billing information (credit card details) is collected and stored by Stripe on our behalf — we never store raw card numbers.
1.2 Information collected automatically
- Usage data: We log pages visited, features used, timestamps, and referring URLs to understand how the platform is used and to improve it.
- Device and browser data: IP address, browser type, operating system, and device identifiers are collected automatically when you use the service.
- Cookies and similar technologies: We use cookies for authentication session management and analytics. See Section 7 for more detail.
1.3 Information from third parties
- Clerk: Handles authentication. We receive a unique user ID, email address, and basic profile data when you sign in.
- Stripe: Provides billing. We receive subscription status, plan tier, and payment event data.
- Serper / Hunter.io: Used to identify unregistered local businesses. We may collect business names, website domains, and email addresses from public sources to send outreach on behalf of matched leads.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Matching and fulfillment: To match Consumer service requests with appropriate local Businesses based on job type, location, budget, and timeline.
- Lead delivery: To send Businesses lead notification emails containing job details. Consumer contact information (name, phone, email) is only included after a Business claims the lead.
- Account management: To create and maintain Consumer and Business accounts, authenticate users, and manage subscriptions.
- Billing: To process lead charges, subscriptions, and overage fees through Stripe.
- Communications: To send transactional emails (lead notifications, reminders, account confirmations) and, where permitted, product updates. You may opt out of marketing emails at any time.
- Safety and fraud prevention: To detect and prevent spam, abuse, and unauthorized activity.
- Product improvement: To analyze usage patterns, fix bugs, and improve the platform using aggregated and anonymized data.
- Legal compliance: To comply with applicable laws, respond to legal requests, and enforce our Terms of Service.
3. How We Share Your Information
3.1 With Businesses (for Consumers)
When you submit a service request, we share your job details (type, location, budget, timeline) with matched local Businesses in the form of a lead notification. Your name, phone number, and email address are withheld until a Business actively claims your lead. Once claimed, your contact details are shared with that Business so they can reach out to you directly.
3.2 With Consumers (for Businesses)
After you claim a lead, the Consumer's contact information is revealed to you for the purpose of following up on the job. This information may not be used for any purpose other than responding to the specific lead it was provided for.
3.3 Service providers
We share data with third-party service providers who process it on our behalf under strict data processing agreements:
- Clerk — authentication and user management
- Supabase — database hosting (data stored in the US)
- Stripe — payment processing
- Resend — transactional email delivery
- Inngest — background job processing
- PostHog — product analytics (anonymized)
- Sentry — error monitoring (may capture request metadata)
3.4 Legal and safety disclosures
We may disclose personal information if required by law, subpoena, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Zhlooop, our users, or the public.
3.5 Business transfers
If Zhlooop is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our site before your data is transferred and becomes subject to a different privacy policy.
3.6 We do not sell your data
Zhlooop does not sell, rent, or trade your personal information to third parties for their own marketing purposes.
4. Data Retention
- Consumer accounts: Retained for as long as your account is active. You may delete your account at any time by contacting us at privacy@zhlooop.com.
- Lead records: Retained for 2 years for billing audit and dispute resolution purposes, then anonymized or deleted.
- Business accounts: Retained while your account is active and for 1 year after closure for billing and legal record-keeping.
- Outreach log: Business email addresses collected via Serper/Hunter.io for outreach are retained for 30 days for deduplication, then purged unless the business creates an account.
- Analytics data: Anonymized usage data may be retained indefinitely.
5. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal information, subject to legal retention requirements.
- Portability: Request your data in a structured, machine-readable format.
- Objection / Opt-out: Opt out of marketing emails via the unsubscribe link in any email we send. Businesses may opt out of outreach emails permanently via the same mechanism.
- California residents (CCPA): You have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, email us at privacy@zhlooop.com. We will respond within 30 days.
6. Data Security
We implement industry-standard security measures to protect your personal information, including TLS encryption in transit, row-level security on our database (Supabase), and strict access controls limiting which employees and systems can access personal data. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and keep your account credentials private.
7. Cookies
We use the following types of cookies:
- Essential cookies: Required for authentication and session management (provided by Clerk). These cannot be disabled without breaking the service.
- Analytics cookies: Used by PostHog to understand how users interact with the platform. These are anonymized and do not identify you personally. You may opt out via the PostHog opt-out mechanism or a browser-level "Do Not Track" signal.
We do not use advertising or tracking cookies. We do not share cookie data with advertisers.
8. Children's Privacy
Zhlooop is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@zhlooop.com and we will delete it promptly.
9. Third-Party Links
Our platform may contain links to third-party websites (e.g., a business's own website). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you by email or via a notice on the platform. Continued use of Zhlooop after the effective date of any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Zhlooop Privacy Team
Email: privacy@zhlooop.com