Privacy Policy

Please read first: this is a template

This document is a working template. It has not been reviewed by a licensed attorney and it is not legal advice. It describes how we intend to operate, written in plain language, so that a lawyer has something concrete to correct rather than a blank page.

Before Saint Works relies on this document publicly, an attorney licensed in the state where we do business must review and revise it, including the consumer-protection, home-improvement-contract, and privacy rules that apply to residential contractors in this jurisdiction. Until that review is complete, treat this text as a description of our practices and not as an enforceable agreement or a complete privacy notice.

What this notice covers

This notice explains what Saint Works collects when you use this website or become a customer, why we collect it, how long we keep it, and who else sees it. It covers the quote request form, the client portal, and the email we send you about your project.

It does not cover information you give us in person or over the phone outside of those systems, though we handle that the same way: we collect what the job requires and nothing else.

What we collect and why

We collect only what is needed to price your project, schedule it, do the work, and get paid. Each item below exists for a specific reason, and we do not collect information speculatively in case it becomes useful later.

• Contact details — your name, phone number, email address, and how and when you prefer to be reached. We use these to respond to your request and to reach you about scheduling and job progress.
• Project scope — the service category, a description of the work, your budget range, and your desired timeline. This is what lets us estimate the job and assign the right crew.
• Property address and ZIP code — used to confirm the project falls inside our service area, to route a crew to the site, and to pull permits where the work requires them.
• Project photos — up to 8 images of 10MB each that you choose to upload. We use them to understand existing conditions before the site visit and to document the state of the work as it progresses.
• Payment records — the amount, date, and status of each deposit and milestone payment, plus the last four digits and card brand returned to us by our payment processor. This is our accounting and invoicing record.
• Basic technical data — your IP address and the time of a form submission, retained briefly to block automated spam and abuse of our forms.

Payment card data is never collected by us

We do not collect, process, transmit, or store payment card numbers, CVC codes, or card expiry dates. There is no field anywhere on this site where you can type a card number into our systems.

All payments run through Stripe-hosted checkout. When you pay an invoice in the client portal, Stripe collects the card details directly on its own pages under its own security controls. What comes back to us is a confirmation, an amount, a status, and the last four digits so you can tell your saved payment methods apart. If you have a question about how your card data itself is handled, Stripe's privacy policy governs it.

Who we share information with

We do not sell your personal information, rent it, or hand it to advertisers or data brokers. We share it only with the service providers that make the site and the portal work, and only with the portion each one needs.

• Stripe — payment processing. Receives your name, email address, and the invoice amount, and collects your card details directly from you.
• Resend — transactional email delivery. Receives your name, email address, and the contents of messages we send you about your project.
• Cloudflare R2 — storage for the project photos you upload. Photos are stored in our private bucket and served through expiring links, not on a public URL anyone can guess.
• Licensed subcontractors and inspectors — receive your name, site address, and the scope details needed to do their part of the job, and nothing beyond that.
• Government agencies — receive the information required on a permit application when your project needs a permit.
• Legal compliance — we will disclose information where a valid subpoena, court order, or law requires it, and we will tell you unless we are prohibited from doing so.

How long we keep it

Quote requests that do not become projects are deleted within twenty-four months, which is long enough for a homeowner to come back to a project they postponed. Anti-spam technical data is deleted within thirty days.

Records connected to completed projects — the contract, change orders, invoices, and payment records — are kept for seven years, because tax rules, licensing obligations, and the warranty period all require us to be able to produce them. Project photos are kept for the length of the workmanship warranty and then deleted unless you have asked us to keep them longer.

Cookies

This site sets two kinds of cookie and no others. A session cookie keeps you signed in to the client portal, and a CSRF token cookie prevents another site from submitting forms as you. Both are strictly necessary for the site to function, and both expire when your session ends or shortly after.

We run no analytics cookies, no advertising pixels, no cross-site trackers, and no third-party embeds that set cookies of their own. There is no consent banner on this site because there is nothing optional to consent to.

Your choices and how to request deletion

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to the address listed on our contact page or call the number listed on our contact page and say what you want done. We will confirm your identity — usually by matching the request to the contact details already on the project — and respond within thirty days.

Where a record must be retained for tax, licensing, warranty, or legal-defense reasons we will tell you which record and which obligation, delete everything else in the request, and delete the remainder once the retention period ends. You can also withdraw consent to marketing email at any time using the unsubscribe link, without affecting the transactional email about your project.

Security and changes to this notice

Access to customer records is limited to staff who need it for the job at hand. Portal traffic is encrypted in transit, uploaded photos are stored privately, and payment credentials never enter our systems at all.

If we change how we handle your information we will update the date at the top of this page and, for a material change, notify active customers by email. This notice was last updated on 2026-09-20.