Privacy Policy
Effective Date: [INSERT DATE] | Last Updated: [INSERT DATE]
Finley Ventures LLC, doing business as Kerf ("Kerf," "Company," "we," "our," or "us") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our website at kerfapp.io, our mobile applications, and all related services (collectively, the "Platform"). By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.
1. Information We Collect
1.1 Information You Provide Directly
Account Information: When you create an account, we collect your name, email address, phone number, mailing address, ZIP code, and password. Pros also provide business name, trade categories, years of experience, bio, license numbers, and service area information.
Profile Information: Profile photos, descriptions, availability schedules, and service listings you add to your account.
Transaction Information: Job descriptions, quotes, pricing, payment method details (processed by Stripe — we do not store full credit card numbers), transaction history, and payout information.
Communications: Messages you send through the Platform to other Users, communications with our support team, and responses to surveys or feedback requests.
Verification Information: Identity verification documents, background check authorization, professional license documentation, and insurance certificates submitted voluntarily.
Military Service Verification: If you choose to verify veteran status, we may collect a copy of your DD-214 (Certificate of Release or Discharge from Active Duty) or other proof of military service. DD-214 documents contain sensitive personal information including Social Security numbers, dates of birth, and service history. We will use this information solely for the purpose of verifying your veteran status on the Platform. We store DD-214 documents in encrypted form, restrict access to authorized personnel only, and delete the original document within 30 days of verification. Only your verified veteran status (yes/no) is retained on your profile — the underlying document is not stored permanently.
Reviews and Ratings: Reviews, ratings, and feedback you provide about other Users.
1.2 Information Collected Automatically
Usage Data: Pages viewed, features used, search queries, clicks, time spent on pages, and navigation paths.
Device Information: Device type, operating system, browser type and version, unique device identifiers, and mobile network information.
Location Information: Approximate location derived from your IP address and the ZIP code you provide. We do not collect precise GPS location unless you explicitly enable real-time tracking features during an active job (Pros only).
Log Data: IP address, access times, referring URL, and error logs.
Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies as described in our Cookie Policy.
1.3 Information from Third Parties
Payment Processors: Stripe provides us with limited transaction information such as payment confirmation, payout status, and dispute notifications.
Background Check Providers: If a Pro authorizes a background check, we receive the results (pass/fail status) from our third-party background check provider. We do not receive detailed criminal history records.
Public Sources: We may collect publicly available information related to a Pro's professional licensing status from state and local government databases.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Platform: Creating and maintaining your account, facilitating job matching between Customers and Pros, processing transactions, enabling messaging, and displaying profiles and reviews.
- Improving the Platform: Analyzing usage patterns, troubleshooting technical issues, developing new features, and conducting internal research and analytics.
- Communications: Sending transactional notifications (job updates, quote received, payment confirmed), responding to support inquiries, and sending promotional communications (with your consent, where required).
- Safety and Security: Verifying identities, detecting and preventing fraud, enforcing our Terms of Service and Acceptable Use Policy, and protecting the rights and safety of our Users.
- Legal Compliance: Complying with applicable laws, regulations, and legal processes, including tax reporting requirements (e.g., IRS Form 1099).
- AI-Powered Features: Processing inputs to our AI chatbot and other AI features to generate responses. AI interactions may be logged and reviewed to improve the accuracy and helpfulness of AI features. AI features do not access your payment information or perform account actions.
3. How We Share Your Information
We do not sell your personal information. We share your information only in the following circumstances:
3.1 With Other Users
- Customer to Pro: Your name, job description, approximate location (neighborhood-level, not exact address until a job is accepted), and contact information after a quote is accepted.
- Pro to Customer: Your business name, profile information, trade categories, reviews, ratings, service listings, and quote details.
- Pro to Pro (Reviews Only): Pro-side reviews of Customers are visible only to other Pros and do not include Customer contact information.
3.2 With Service Providers
We share information with third-party service providers who perform services on our behalf, including:
- Stripe (payment processing)
- Supabase (database hosting and authentication)
- Vercel (website hosting)
- Anthropic (AI chatbot functionality — message content only, no account data)
- Background check providers (if authorized by the Pro)
- Email and notification services
- Analytics providers
These service providers are contractually obligated to use your information only for the purposes of providing their services to us and to protect your information in accordance with this Privacy Policy and applicable law.
3.3 For Legal Reasons
We may disclose your information if we reasonably believe disclosure is required by law, regulation, or legal process (such as a court order or subpoena), or is necessary to protect the rights, property, or safety of Kerf, our Users, or the public.
3.4 Business Transfers
If Kerf is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
3.5 With Your Consent
We may share your information for other purposes with your explicit consent.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services, comply with our legal obligations (including tax reporting), resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.
Reviews you have submitted may remain visible after account deletion, but will be attributed to an anonymized identifier rather than your name.
5. Data Security
We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), encryption of sensitive data at rest, access controls, and regular security assessments.
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information.
6. Your Rights and Choices
6.1 Account Information
You may access, update, or correct your account information at any time through your account settings. You may request deletion of your account by contacting support@kerfapp.io or through your account settings.
6.2 Communication Preferences
You may opt out of promotional emails by clicking the "unsubscribe" link in any promotional email or by adjusting your notification settings. You may not opt out of transactional communications related to your account or active jobs.
6.3 Cookies
You can manage cookie preferences through your browser settings. See our Cookie Policy for more details.
6.4 Do Not Track
Our Platform does not currently respond to "Do Not Track" browser signals. We will update this Privacy Policy if our practices change.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides you with additional rights regarding your personal information:
Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions (such as completing a transaction, complying with legal obligations, or detecting security incidents).
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise these rights, contact us at support@kerfapp.io with the subject line "California Privacy Request." We will verify your identity before processing your request and respond within 45 days.
8. Ohio Privacy Rights
Ohio has introduced data privacy legislation (the Ohio Personal Privacy Act) that, if enacted, would provide Ohio residents with additional rights similar to those described in Section 7 above. We are committed to complying with applicable Ohio privacy laws as they take effect. We will update this Privacy Policy to reflect any new legal requirements.
9. Children's Privacy
The Platform is not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us at support@kerfapp.io.
10. Third-Party Links and Services
The Platform may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.
11. International Users
The Platform is operated in the United States and is intended for Users located in the United States. If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your jurisdiction.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:
Finley Ventures LLC dba Kerf
Email: support@kerfapp.io
Website: kerfapp.io
Last updated: [INSERT DATE]