Privacy Policy

1. Introduction & scope

This Privacy Policy explains how Trusavo, Inc. (“Trusavo,” “we”) collects, uses, shares, and protects personal information when you use trusavo.com, app.trusavo.com, and related services (the “Platform”). Trusavo is the controller of personal information processed under this Policy.

Several partners that power the Platform maintain their own privacy notices for the data they process: Plaid (bank connections), Checkr (background checks), Clerk (authentication), Stripe (subscription billing), and our banking partners. Where those services collect data directly from you, their notices apply alongside ours — we link to each at the point of collection.

2. Who you are on the Platform

What we collect depends on your role. “Homeowners” post and fund projects; “Contractors” bid on and perform them; “Inspectors” verify milestones; “Visitors” browse the marketing site. Some collection (like contractor background checks) applies to one role only — we note this throughout.

3. Personal information we collect

We organize collection into four groups:

• •Needed to use the Platform — account and contact details (name, email, phone); identity verification data, including government-issued ID and, with your consent where required, a selfie used for verification matching; project details, addresses, photos, and videos; bank account information collected through Plaid (we never see or store your bank credentials); escrow transaction and ledger records; for Contractors and Inspectors: license numbers, insurance certificates, business/KYB details, and background check reports (see Section 9);
• •Information you choose to provide — bids, messages, reviews, support emails, survey responses, referral information;
• •Collected automatically — device and browser data, IP address, usage activity, approximate location, and cookie data (see our Cookie Policy);
• •From third parties — verification results from identity and licensing providers, background check reports from Checkr, bank account verification from Plaid, and service-area/geocoding data from mapping providers.

4. How we use personal information

• •Operate the marketplace: accounts, projects, bids, contracts, messaging, notifications;
• •Administer escrow: fund, hold, release, and refund project money; maintain the ledger of record; generate statements and tax documents (e.g., 1099-K);
• •Verify and vet: identity (KYC/KYB), licenses, insurance, and background checks for Contractors and Inspectors;
• •Trust, safety & fraud prevention: automated and manual risk assessment of transactions and accounts, fraud detection, enforcement of our Terms;
• •AI features: generate project scopes, estimates, and assistant responses (see Section 5);
• •Communicate: transactional email and SMS about your projects and money movements, and — with the required consents — marketing you can opt out of;
• •Improve the Platform: analytics, debugging, and product development;
• •Comply with law: AML/BSA obligations, tax reporting, escrow record-keeping, and lawful requests.

5. AI & automated processing

The Platform uses AI to turn project descriptions into structured scopes, produce cost estimates, and power assistant features. Project text, photos, and related content may be processed by our AI service providers for these purposes. We do not permit those providers to use your content to train their general-purpose models.

We also use automated systems to assess fraud and transaction risk; automated flags that could materially affect your account (such as a hold or suspension) are subject to human review, and you may contest any such decision by emailing support@trusavo.com. AI-generated scopes and estimates are planning aids reviewed and accepted by the humans in the transaction — they do not autonomously move money.

6. How we share personal information

With other users — this is a marketplace, and certain sharing is the product: Contractors see posted project details, first names, and neighborhoods (full addresses are shared after a bid is accepted); Homeowners see Contractor business profiles, verification status, portfolios, and reviews; Inspectors see the project and milestone information needed to verify work; both parties to a project see its shared escrow ledger.

With service providers bound by contract to protect your data: banking partners and payment processors, Plaid, Checkr, identity-verification providers, Clerk, Twilio (SMS), Resend (email), cloud hosting and storage, AI providers, analytics, and error monitoring.

With authorities or third parties when required by law, to enforce our Terms, to prevent fraud or harm, or in connection with a corporate transaction (with notice to you). We do not sell your personal information for money. SMS opt-in data is never shared with third parties for their own marketing.

7. Cookies & tracking

We use cookies and similar technologies for sign-in, security, preferences, and analytics, as described in our Cookie Policy, which includes your choices and our treatment of opt-out preference signals.

8. Communications & SMS

By providing your mobile number you agree to receive transactional/service texts about your projects and account. Message frequency varies; message and data rates may apply; reply STOP to cancel, HELP for help. Marketing texts are sent only with the separate express written consent required by federal law and the Florida Telephone Solicitation Act, and consent is never a condition of purchase. Transactional notices about escrow and inspections cannot be disabled while you have an active funded project.

9. Background checks (Contractors & Inspectors) — FCRA notice

Background checks are performed by Checkr, Inc., a consumer reporting agency, only after you receive a standalone disclosure and provide written authorization. Report contents are governed by the Fair Credit Reporting Act: you have the right to dispute report accuracy directly with Checkr, and if we take adverse action based in whole or part on a report, you will receive the report, a summary of your FCRA rights, and time to respond before the decision is final.

Because FCRA governs this data, certain state privacy rights (such as deletion) do not reach the contents of consumer reports held by the reporting agency.

10. Data retention

We keep personal information for as long as needed for the purposes above, then delete or de-identify it. Specific practices: escrow, transaction, and ledger records are retained for at least 7 years after project close, as required by financial record-keeping and tax law; identity-verification images are retained no longer than 3 years after account closure; reviews and other content shared with the community may persist after account deletion; support email threads are retained while relevant to your account or any dispute.

11. Your rights & choices

Regardless of which state you live in, we extend the same core rights to all US users: access/know what we hold about you, correct it, delete it (subject to the legal retention duties above), receive a portable copy, opt out of targeted advertising, and appeal a refused request. We do not discriminate against you for exercising rights.

To exercise any right, email privacy@trusavo.com from your account email (or have an authorized agent do so with proof of authority); we verify requests before acting and respond within the time required by law. You can also: disconnect bank accounts via Plaid Portal (my.plaid.com), manage notification preferences in settings, and unsubscribe from marketing at any time. We honor Global Privacy Control browser signals as an opt-out of targeted advertising.

12. State-specific disclosures

California (CCPA/CPRA): the categories of personal information we collect, our purposes, and our disclosures are described in Sections 3–6. We do not sell personal information for money and do not use or disclose sensitive personal information beyond the purposes permitted by the CCPA. California residents may exercise the rights in Section 11, including through an authorized agent, and may request our request-handling metrics.

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Texas, Virginia, and others) have equivalent rights, all of which we honor under Section 11. Florida residents: we comply with Florida's data-security and breach-notification requirements (Fla. Stat. §501.171).

13. Financial privacy

Information we process in connection with escrow accounts and payments may be subject to federal financial privacy law (the Gramm-Leach-Bliley Act) in addition to this Policy. We share such information only as needed to provide the escrow service, prevent fraud, and comply with law — not for third-party marketing. A standalone consumer financial privacy notice will be provided when required.

14. Children

The Platform is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, email privacy@trusavo.com and we will delete it.

15. Security

We protect personal information with administrative, technical, and physical safeguards: encryption in transit and at rest, role-based access controls, audit logging of money and admin actions, vendor security review, and two-factor authentication for accounts. No system is perfectly secure; if a breach affects you, we will notify you as required by law (in Florida, within 30 days). Report security concerns to security@trusavo.com.

16. Where data is processed

Trusavo operates in the United States and your information is processed on US infrastructure. If you access the Platform from elsewhere, you understand your information will be transferred to and processed in the US.

17. Changes to this Policy

We will post updates here with a revised date, and give at least 30 days' notice by email or in-app for material changes before they take effect.