Massachusetts Privacy Policy

A. Information about Vendors we list.

We do not create Massachusetts Vendor listings from a public license database. Initial Massachusetts listings are added by VendorSource using information the Vendor has provided to us directly, or that is publicly available from the Vendor’s own website or business listings. We may separately check a Vendor’s license or registration status against the relevant Massachusetts licensing board (such as the Home Improvement Contractor registry or a Division of Occupational Licensure trade board) to display alongside the listing. This may include:

• Business name and "doing business as" name
• License or registration number, type, and status, where applicable
• Business address and contact information
• Services offered and service area

If you are a Vendor and want this information removed from VendorSource, see Section 7 (“Your Choices”).

B. Information you provide.

When you use the Service, you may provide us with information directly:

• Vendors who claim a listing: business name, contact information, services offered, photos, license and insurance documentation, hours, service area, and any other information you choose to add to your profile.
• Vendors who respond to a job: your message, your initial estimate (price range, how confident you are in it, any note on what could change it, whether you need a site visit, and how soon you could start and finish), and — if you upload one — a quote document (such as a PDF or photo of a written estimate) and the price, materials, warranty, and timeline information you confirm from it.
• Property Owners who post a job: description of the job, property location (city/zip, plus the street address if you request a site visit), photos of the property or issue, any documents you attach (such as an inspection report or insurance estimate), contact information, and any other information you choose to share.
• Anyone who contacts us: name, email address, and the content of your message.
• Anyone who submits a review: your first name, your email address (used only to verify the review; never displayed), your rating and review, and the type and month of the service.

C. Information collected automatically.

When you use the Service, we automatically collect:

• Log data: IP address, browser type, device type, operating system, pages visited, time spent, referring URL, and timestamps
• Cookies and similar technologies: to remember your preferences, keep you signed in, and understand how the Service is used. You can control cookies through your browser settings.
• Analytics: we use Vercel Web Analytics to count page views and see which pages are used (for example, pages visited, referring site, and general device, browser, and country information). It does not use cookies and does not track you across other websites. We do not use advertising or cross-site tracking tools; if we add any, we will update this Policy first.

D. Documents you upload for AI-assisted processing.

When a Vendor uploads a quote document in response to a job post, we send that document to Anthropic (Anthropic, PBC), a third-party AI provider, to extract structured information from it — such as price, materials, warranty terms, and estimated timeline. That extracted information is shown only to the Vendor for review and confirmation before anything is shared with the Property Owner. Anthropic processes this data on our behalf and, under its standard commercial API terms, does not use data submitted through the API to train its models. We retain the uploaded document and the confirmed extraction as part of the job record.

We use the information we collect to:

• Operate, maintain, and improve the Service
• Display Vendor listings and connect Property Owners with Vendors
• Extract structured quote information from documents Vendors choose to upload, as described in Section 1(D)
• Check Vendors' licenses and review the certificates of insurance they upload before they can see or quote on open jobs
• Respond to inquiries, removal requests, and support questions
• Send service-related communications (e.g., account verification, listing claim confirmations, job and quote notifications)
• Send marketing communications, where you have opted in or as permitted by law (you can unsubscribe at any time)
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Service
• Comply with legal obligations

We share information only as described below. We do not sell your personal information.

• Publicly displayed information: Information in Vendor listings (including Unclaimed Listings, and information Vendors add to Claimed Listings) is publicly visible on the Service and indexable by search engines.
• Reviews: Reviews you submit are publicly visible with your first name. Your email address is never displayed.
• Job posts, photos, and quotes: When a Property Owner posts a job, the job details and any photos are visible to Vendors who can respond to it. When a Vendor submits a confirmed quote, it is shared with the Property Owner who posted the job. Contact information is not shared between a Property Owner and a Vendor until either party chooses to share it. When a Property Owner requests a site visit from a Vendor, or selects a Vendor for the job, that Vendor receives the property's street address and the Property Owner's contact information; other Vendors do not.
• Service providers: we share information with the providers who help us run the Service — Supabase (database and file storage), Vercel (hosting and page-view analytics), Resend (transactional email delivery), and Anthropic (AI-assisted extraction of quote documents you upload, per Section 1(D)). These providers are bound by contract or their own terms of service to use the information only to provide their services to us.
• Legal compliance: We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, the safety of users, or the public.
• Business transfers: If VendorSource is involved in a merger, acquisition, sale of assets, or bankruptcy, information may be transferred as part of that transaction.

We retain information for as long as is necessary to operate the Service and for the purposes described in this Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we delete or de-identify it.

If you request removal of your listing or your account, we will remove the publicly visible information within five (5) business days. We may retain limited internal records (e.g., the fact that a removal request was made) to honor that request and prevent re-creation of the listing.

We use reasonable administrative, technical, and physical safeguards to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage over the internet is completely secure, however, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at kbarry@vendorsource.us and we will delete it.

• Vendors who want a listing removed. Email kbarry@vendorsource.us with the business name (and license/registration number, if any), or use the “Remove this listing” link on the listing page. We will remove the listing within five (5) business days.
• Vendors who want a listing corrected. Claim the listing through the Service to take control of the content, or email us with the correction.
• Anyone who wants a job post, photo, or quote document removed. Email us with the job or listing URL and your request.
• Property Owners or others who want to delete their account or data. Email kbarry@vendorsource.us. We will delete or anonymize your account and associated personal information within thirty (30) days, except where retention is required by law.
• Marketing emails. Use the unsubscribe link in any marketing email to opt out. You will continue to receive service-related emails (e.g., account notifications) where applicable.
• Cookies. Most browsers let you refuse or delete cookies. Doing so may affect some features of the Service.
• Do Not Track. The Service does not currently respond to Do Not Track signals.

If you are a resident of a U.S. state with a comprehensive privacy law, you may have additional rights, including the right to:

• Know what personal information we have collected about you
• Request a copy of that information
• Request correction or deletion of that information
• Opt out of the sale or "sharing" of personal information for targeted advertising (we do not sell or share personal information for cross-context behavioral advertising)
• Not be discriminated against for exercising these rights

To exercise any of these rights, email kbarry@vendorsource.us. We may need to verify your identity before responding. You may also authorize an agent to make a request on your behalf, subject to verification.

The Service is operated from the United States. If you access the Service from outside the U.S., be aware that information will be transferred to, stored in, and processed in the United States. The Service is not designed for users outside the U.S., and we make no representation that the Service complies with the laws of other countries.

We may update this Policy from time to time. If we make material changes, we will post the updated Policy on the Service and update the “Last updated” date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Policy.

VendorSource
Email: kbarry@vendorsource.us

VendorSource is not a law firm and this Policy is not legal advice. If you have a legal question about your privacy rights, consult a licensed attorney in your jurisdiction.