Privacy policy

Last updated: 2026-06-08

This policy explains what personal information ProFix Directory collects, how we use it, and the choices you have. It applies to profixdirectory.com and any service we operate at that domain.

1. Information we collect

Browsing the directory

Standard server logs (IP address, user agent, request path, timestamp) and privacy-respecting analytics events (page views, referrer, country). We use Vercel Analytics, Speed Insights, Google Analytics 4, and PostHog. None of these require ad-tracking cookies.

Homeowner lead submissions

When you submit a job request, we collect:

• Name, phone number, email address
• ZIP code, city, and any address or location detail you choose to include
• Trade category, urgency, and your free-text description of the problem
• Submission timestamp and the IP address you submitted from

This information is the lead. It is shown only to contractors who purchase access to it. See refund policy and terms.

Contractor accounts

Contractors who claim a listing or purchase leads provide name, email, business phone, and a payment method (handled by Stripe). We do not store full card numbers — Stripe holds those.

Public-record contractor listings

Pro information shown publicly (business name, address, phone, license number, BBB rating, complaint history) is sourced from public records — Ohio Secretary of State, state license boards, the BBB, and equivalent agencies. Pros may request corrections or removal via /contact.

2. How we use information

• Lead routing. Homeowner submissions are matched to up to three relevant contractors based on trade, location, and urgency.
• Service operation. Authenticating contractor accounts, processing payments, sending email and SMS notifications about leads.
• Anti-fraud. Detecting duplicate or fabricated submissions and abusive contractor behavior.
• Aggregate analytics. Understanding which trades, cities, and pages drive conversions. We do not sell or rent personal information.
• Legal compliance. Responding to lawful requests and enforcing our terms.

3. Sub-processors we share data with

• Vercel — hosting and edge delivery (logs, analytics).
• Supabase — database storage (leads, contractor accounts, claims).
• Stripe — payment processing for lead purchases and contractor subscriptions.
• Resend — transactional email (lead notifications, receipts, refund confirmations).
• Twilio — SMS notifications to contractors when a lead is purchased (opt-in).
• PostHog and Google Analytics 4 — product analytics; cookies set only with consent where required.

4. Data retention

• Lead submissions: retained for 24 months to support refund disputes and aggregate analytics, then anonymized.
• Contractor accounts: retained while active; deleted within 90 days of an account closure request.
• Server and analytics logs: 90 days.
• Payment records: retained as required by applicable tax and accounting law (up to seven years).

5. Your rights — CCPA, GDPR, and other state laws

You can request to access, correct, port, or delete personal information we hold about you. The fastest path is our self-service form at /data-deletion — we respond within 30 days. You may also email privacy@profixdirectory.com with the subject "Privacy request".

• California (CCPA / CPRA): right to know, delete, correct, opt out of "sale" or "sharing" (we do neither), limit use of sensitive personal information, and non-discrimination for exercising any of these rights. We do not sell or share personal information for cross-context behavioral advertising.
• EU / UK (GDPR / UK GDPR): right to access, rectify, erase, restrict processing, data portability, and to object. Lawful bases include consent (analytics cookies where required), contract performance (lead routing), and legitimate interest (anti-fraud, service operation). You may lodge a complaint with your local supervisory authority.
• Other US states (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, Indiana, New Jersey, New Hampshire, and others): equivalent access, deletion, correction, and opt-out rights apply.

We will verify your identity before fulfilling a request (typically by matching the email or phone number on file). You may use an authorized agent. We do not charge a fee for the first request in any 12-month period.

6. Cookies

We use a small number of first-party cookies for authentication (contractor accounts), for session continuity, and for analytics. We do not use third-party advertising cookies. Where required by law, a consent banner controls analytics cookie placement.

First-party cookieless analytics

We run our own privacy-first, cookieless analytics (ProFix Insights) to understand which pages and trades are useful. It sets no cookie and assigns no advertising or cross-site identifier. We never store your IP address, your full browser string, your name, or your precise location. To estimate how many distinct people visit on a given day, we derive a one-way fingerprint from your request that is salted with a key that rotates and is discarded every 24 hours — it cannot be reversed to identify you and cannot be matched across days, so it is useless for tracking you over time. We honor the Global Privacy Control (Sec-GPC) and Do Not Track signals: if your browser sends either, we record nothing at all — not even an anonymous count. Because the method is cookieless, unique-visitor numbers are estimates, and we separate human visitors from automated bots and AI crawlers rather than blending them together.

7. Children's privacy

ProFix Directory is intended for adults. We do not knowingly collect information from children under 13. If you believe a child has submitted information, contact us and we will delete it.

8. Security

We use TLS in transit and standard hosting-platform controls at rest. No system is perfectly secure; we strive for reasonable industry-standard protection. If we detect a breach that affects you, we will notify you as required by law.

9. Changes

Material changes will be flagged on the homepage banner for at least 14 days. The "Last updated" date above always reflects the current version.

10. Contact

Privacy questions? Email privacy@profixdirectory.com or see /contact. ProFix Directory is operated by ProFix Directory LLC, an Ohio limited liability company. A Spanish version of this policy is available at /es/privacidad.

Mailing address: ProFix Directory LLC, 5650 Premier Park Dr Ste 138, Toledo, OH 43617, USA