Privacy Policy
The short version
- We collect what we need to run Loden and to respond to people who ask for a demo.
- We don’t sell your data or share it for advertising.
- Your customer and job data belongs to you. We process it only to provide the service to you.
- We use a few service providers (Supabase, Netlify, Anthropic, Resend and Google) to run the service. They are listed below.
- You can ask to see, export or delete your data by emailing blake@rosaindustries.com.
1. Who this covers
- Visitors and leads: people who visit rosaindustries.com or fill out a demo or contact form.
- Customers: contractors and their staff who have a Loden account (“you”).
- Your clients: homeowners and other people whose information a contractor enters into Loden, or who receive a proposal, invoice or lead form from a contractor through Loden. For this data, the contractor decides what is collected and why, and we act as the contractor’s service provider. Clients with questions should contact the contractor first. We will help the contractor respond.
2. What we collect
From demo and contact forms
- Name, company name, phone number, email, what you mostly build, how you estimate today, and anything else you write.
- Past estimates you send us for a demo (photos or PDFs). We ask you to remove client names and addresses first. If any personal information is left in, we use it only for your demo and delete it on request.
Account data
- Name, business name, email, phone, business address, logo, login details and settings.
- Billing details. Once billing starts, payments are handled by a third-party payment processor. Card numbers are entered with the processor and are not stored by us.
Your rate library and business data
- Labor rates, unit prices, markups, line-item templates and similar pricing information you enter or that we build for you during setup. We treat your rates as confidential business information. We don’t share them with other customers or use them to price anyone else’s jobs.
Customer and job data you enter
- Your clients’ names, contact details, job addresses, job descriptions, estimates, proposals, e-signatures (the signer’s typed name, a time stamp and the signed document), invoices, deposits and payment records, calendar events, tasks, notes, reports and job photos.
- Submissions from your Loden lead form.
Uploaded files
- Estimates, photos, PDFs and other files you upload.
AI assistant inputs and outputs
- The job descriptions and questions you type into the estimating feature or AI assistant, along with the results generated.
Technical data
- IP address, browser and device type, pages visited and error logs, collected by our hosting and database providers to keep the service running and secure.
- We don’t use analytics or advertising cookies or tracking pixels. The Loden app stores a login session in your browser, which is needed for you to stay signed in.
- Our pages load fonts from Google Fonts, so Google receives your IP address and browser details when a page loads.
3. How we use it
- To provide, maintain and support Loden, including building your rate library during setup and making rate changes you request.
- To generate estimates and assistant responses (see section 5).
- To send service emails, such as proposals, invoices, signature requests, receipts and account notices.
- To respond to demo requests and run your demo.
- To bill you once billing starts.
- To keep the service secure, prevent abuse and fix bugs.
- To meet legal obligations.
We may send leads and customers occasional emails about Loden. Every marketing email includes a way to opt out.
4. Service providers
We use these companies to run Loden. They process data on our behalf under their own terms and security practices.
| Provider | What they do for us | Data involved |
|---|---|---|
| Supabase | Database, user login and file storage. Each account’s data is kept separate with row-level security. | Account, rate library, customer and job data, uploaded files, lead form submissions made inside the app |
| Netlify | Website and app hosting, serverless functions, and handling of the demo request form on rosaindustries.com | Site traffic, demo form submissions, technical logs |
| Anthropic (Claude) | AI model that turns job descriptions into estimate line items and answers assistant questions | Text you send to the estimating or assistant features, plus relevant rate library entries |
| Resend | Sending email (proposals, invoices, notifications) | Recipient names and email addresses, email content |
| Our business email (Google Workspace) and web fonts (Google Fonts) | Emails you send us, and your IP address when a page loads fonts | |
| Payment processor | Payments, once billing starts | Billing and payment details |
5. AI features
When you use the estimating feature or the AI assistant, the text you enter and the relevant parts of your rate library are sent to Anthropic’s API to generate a response.
Under Anthropic’s current commercial terms, Anthropic does not use inputs and outputs from its API to train its models by default, and it generally deletes them from its systems within 30 days. There are exceptions, for example content its safety systems flag as violating its usage policy, and where the law requires retention. These terms are set by Anthropic and can change.
Please don’t put information into the AI features that isn’t needed for the estimate, such as Social Security numbers or payment card numbers.
Quantities and prices in Loden estimates come from your own rate library. Loden doesn’t pull live market or retail material prices.
6. We don’t sell your data
We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We have never done so. We don’t use your customer data or rate library to market to your clients.
We disclose data only:
- to the service providers above, so they can run Loden;
- when you tell us to (for example, sending a proposal to your client);
- if the law requires it, or to protect someone’s safety or our legal rights;
- if Rosa Industries is sold or merged, in which case this policy, or one at least as protective, continues to apply and we will notify you.
7. Retention and deletion
- Demo leads: kept while we’re in contact, and deleted 12 months after our last contact, or sooner if you ask.
- Demo estimates you sent us: deleted within 90 days after the demo, unless you become a customer and want them kept.
- Account data: kept while your account is active.
- After you cancel: you can export your data for 30 days. After that we delete your account data from the live system. Backup copies held by our providers are deleted on their normal schedules.
- Records we must keep: we may keep billing and tax records as long as the law requires.
- To request deletion at any time, email blake@rosaindustries.com.
8. Security
Each account’s data is kept separate with database row-level security. Data travels over encrypted connections (HTTPS). Access is limited to people who need it to run the service, which today is the founder. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by California law.
9. Your California privacy rights
California residents have rights under California law, including the California Consumer Privacy Act as amended by the CPRA. We follow the practices below for everyone, whether or not that law strictly applies to us. You can:
- Know what personal information we collect, use and disclose.
- Get a copy of it in a portable format.
- Correct inaccurate information.
- Delete your information, subject to legal exceptions.
- Opt out of sale or sharing. We don’t sell or share data, so there is nothing to opt out of, but you can still ask.
- Limit use of sensitive personal information. We don’t use sensitive information beyond what is needed to provide the service.
- Not be treated differently for using these rights.
To make a request, email blake@rosaindustries.com with the subject “Privacy request.” We will confirm your identity, usually by matching the email address on file, and respond within 45 days. An authorized agent can submit a request for you with your written permission. We provide exports manually, so allow a few days.
If you are a contractor’s client, we hold your information on the contractor’s behalf. We will forward your request to that contractor and help them respond.
Do Not Track and Global Privacy Control: we don’t track visitors across other websites or use advertising cookies, so there is nothing to opt out of. We treat a Global Privacy Control signal as an opt-out request anyway.
10. Children
Loden is a business tool and isn’t directed at children under 16. We don’t knowingly collect their information.
11. Changes
If we change this policy, we will update the date at the top. For material changes, we will email account holders before the changes take effect.
12. Contact
Rosa Industries LLC, Sonoma County, California
blake@rosaindustries.com