Privacy policy

Last updated: 2026-06-25

This policy explains what personal information ProFix Directory collects, how we use it, and the choices you have. It applies to profixdirectory.com and any service we operate at that domain.

1. Information we collect

Browsing the directory

Standard server logs (IP address, user agent, request path, timestamp) and privacy-respecting analytics events (page views, referrer, country). We use Vercel Analytics, Speed Insights, Google Analytics 4, and PostHog. None of these require ad-tracking cookies. PostHog also records masked session replays — text inputs, email, phone, and other typed content are masked before capture, so we see how pages are used without capturing what you type into a form.

Homeowner lead submissions

When you submit a job request, we collect:

• Name, phone number, email address
• ZIP code, city, and any address or location detail you choose to include
• Trade category, urgency, and your free-text description of the problem
• Submission timestamp and the IP address you submitted from

This information is the lead. When you submit it, you are asking us to put you in front of contractors who can do the job. We share your request — including your name and contact details — with the matched contractor(s) in your area who purchase access to it. Those contractors pay ProFix a referral/access fee for that introduction. We do not sell your information to third-party data brokers, list brokers, or advertising networks, and we do not share it for cross-context behavioral advertising. If your browser sends the Global Privacy Control (GPC) signal when you submit — or you otherwise tell us "Do Not Sell or Share" — we honor it: we flag that lead and do not offer or sell it to paying contractors, routing it to our team for manual handling instead so you still get help without your contact details being sold. See refund policy and terms. California residents: see how this is classified, and how to opt out, in the California privacy notice.

Contractor accounts

Contractors who claim a listing or purchase leads provide name, email, business phone, and a payment method (handled by Stripe). We do not store full card numbers — Stripe holds those.

Public-record contractor listings

Pro information shown publicly (business name, address, phone, license number, BBB rating, complaint history) is sourced from public records — Ohio Secretary of State, state license boards, the BBB, and equivalent agencies. Pros may request corrections or removal via /contact.

2. How we use information

• Lead routing. Homeowner submissions are matched to up to three relevant contractors based on trade, location, and urgency.
• Service operation. Authenticating contractor accounts, processing payments, sending email and SMS notifications about leads.
• Anti-fraud. Detecting duplicate or fabricated submissions and abusive contractor behavior.
• Aggregate analytics. Understanding which trades, cities, and pages drive conversions. We do not sell or rent your personal information to third-party data brokers or advertising networks. The one place we disclose your contact details is to the matched contractor(s) who purchase your lead, as described above.
• Legal compliance. Responding to lawful requests and enforcing our terms.

3. Sub-processors we share data with

• Vercel — hosting and edge delivery (logs, analytics).
• Supabase — database storage (leads, contractor accounts, claims).
• Stripe — payment processing for lead purchases and contractor subscriptions.
• Resend — transactional email (lead notifications, receipts, refund confirmations).
• Twilio — SMS notifications to contractors when a lead is purchased (opt-in).
• PostHog and Google Analytics 4 — product analytics and masked session replay; cookies set only with consent where required.

4. Who else receives your information

Separate from the sub-processors above (which act on our instructions), there is one category of independent third party that receives homeowner lead information:

• Contractors who purchase leads. When you submit a job request, the matched contractor(s) who purchase access to your lead receive your name, phone, email, and the job details you provided. They use that information as independent businesses to contact you about your request. We require them by contract to use it only for the specific job and not to resell or redistribute it (see terms), but once disclosed, their handling of your information is governed by their own practices.

5. Data retention

• Lead submissions: retained for 24 months to support refund disputes and aggregate analytics, then anonymized.
• Contractor accounts: retained while active; deleted within 90 days of an account closure request.
• Server and analytics logs: 90 days.
• Payment records: retained as required by applicable tax and accounting law (up to seven years).

6. Your rights — CCPA, GDPR, and other state laws

You can request to access, correct, port, or delete personal information we hold about you. The fastest path is our self-service form at /data-deletion — we respond within 30 days. You may also email privacy@profixdirectory.com with the subject "Privacy request".

• California (CCPA / CPRA): right to know, delete, correct, opt out of the "sale" or "sharing" of your personal information, limit use of sensitive personal information, and non-discrimination for exercising any of these rights. We do not sell or share personal information for cross-context behavioral advertising. We do disclose homeowner lead details to the matched contractor(s) who purchase your lead — see the California privacy notice for how that is classified and how to exercise your "Do Not Sell or Share My Personal Information" right.
• EU / UK (GDPR / UK GDPR): right to access, rectify, erase, restrict processing, data portability, and to object. Lawful bases include consent (analytics cookies where required), contract performance (lead routing), and legitimate interest (anti-fraud, service operation). You may lodge a complaint with your local supervisory authority.
• Other US states (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, Indiana, New Jersey, New Hampshire, and others): equivalent access, deletion, correction, and opt-out rights apply.

We will verify your identity before fulfilling a request (typically by matching the email or phone number on file). You may use an authorized agent. We do not charge a fee for the first request in any 12-month period.

7. Cookies

We use a small number of first-party cookies for authentication (contractor accounts), for session continuity, and for analytics. We do not use third-party advertising cookies. Where required by law, a consent banner controls analytics cookie placement.

First-party cookieless analytics

We run our own privacy-first, cookieless analytics (ProFix Insights) to understand which pages and trades are useful. It sets no cookie and assigns no advertising or cross-site identifier. We never store your IP address, your full browser string, your name, or your precise location. To estimate how many distinct people visit on a given day, we derive a one-way fingerprint from your request using a daily-rotating salt derived from a secret key — the salt changes every 24 hours, so the fingerprint cannot be reversed to identify you and cannot be matched across days, making it useless for tracking you over time. We honor the Global Privacy Control (Sec-GPC) and Do Not Track signals: if your browser sends either, we record nothing at all — not even an anonymous count. Because the method is cookieless, unique-visitor numbers are estimates, and we separate human visitors from automated bots and AI crawlers rather than blending them together.

8. Children's privacy

ProFix Directory is intended for adults. We do not knowingly collect information from children under 13 (the federal COPPA threshold). California residents under 16 have additional opt-in protections — see the California privacy notice. If you believe a child has submitted information, contact us and we will delete it.

9. Security

We use TLS in transit and standard hosting-platform controls at rest. No system is perfectly secure; we strive for reasonable industry-standard protection. If we detect a breach that affects you, we will notify you as required by law.

10. Changes

Material changes will be flagged on the homepage banner for at least 14 days. The "Last updated" date above always reflects the current version.

11. Contact

Privacy questions? Email privacy@profixdirectory.com or see /contact. ProFix Directory is operated by ProFix Directory LLC, an Ohio limited liability company. A Spanish version of this policy is available at /es/privacidad.

Mailing address: ProFix Directory LLC, 5650 Premier Park Dr Ste 138, Toledo, OH 43617, USA