Privacy Policy

1. Information We Collect

1.1: Account information

When you create an account, we collect your email address and basic profile information through our authentication provider, Clerk. We do not store passwords directly. Clerk handles authentication on our behalf.

1.2: Inspection content

When you upload a home inspection report, we collect and store the PDF file, the findings extracted from it (titles, body text, page references, photos, criticality), and the metadata associated with it (the property address you enter, upload date, inspector metadata parsed from the report).

1.3: Your buyer inputs and decisions

As you use the Service, we collect the decisions (Dealbreaker / Negotiable / I'll Handle / Monitor), statuses, sub-tasks, cost entries, retailer preferences, and other inputs you make within your analyses. This is the data the Service exists to help you organize.

1.4: Your inventory (Pro)

If you use the tool and material inventory features, we collect the items you record: name, category (tool or material), optional notes, and (for materials) optional quantity and unit. This data is scoped to your account and used only to personalize AI-generated guidance for your own findings.

1.5: Your Notes (Pro)

If you add Notes to a finding, we collect the note body, the category you assign it (contractor visit, attempted repair, physical constraint, and similar), the visibility setting you choose (private or shared with collaborators), and whether you have marked the note to be fed to the AI as context. Notes are tied to specific findings and, for shared notes, to the collaborators of that inspection.

1.6: Cabin Mode preference

If you enable Cabin Mode on a DIY generation, that preference is used for that generation. Cabin Mode preferences may be persisted to your account in future releases so you don't have to re-enable it.

1.7: Payment information

When you make a purchase or subscribe, payment is processed by Stripe. We do not see or store your full payment card number, and details such as the last four digits of your card and your billing country are retained by Stripe, not by WIT. We store transactional metadata in our own systems — amount charged, subscription status, and timestamps — so we can show you your purchase history and manage your account.

1.8: Usage data

We collect basic logs and analytics about how the Service is used: pages visited, features clicked, IP address, browser, device type, timestamps, error reports. We use this to operate, debug, and improve the Service. We do not sell this data.

1.9: Communications

If you email us, fill out the contact form, or otherwise communicate with us, we store the contents of those communications and any associated metadata.

1.10: Quotes and documents you paste in

If you paste a contractor's quote, estimate, or similar document into Contractor Corner, we collect that text. It may contain information about a third party, such as a contractor's pricing, business name, or contact details. We use it only to generate the response you asked for. We ask that you not paste financial account numbers, payment card numbers, or government identification numbers belonging to anyone.

1.11: Your plans and route choices

We store the project plans you generate, including which findings you selected, the time budget you entered, whether Cabin Mode was on, any reordering you did, and the resulting plan. We also store the route (do it yourself, handyman, contractor) that you commit to for a finding, where you commit to one.

1.12: Your feedback

When you rate AI-generated content, we collect the rating and any explanation you write.

1.13: Model inputs and outputs

To produce AI-generated content we send relevant portions of your information to third-party AI providers, and we record what was sent and what was returned. Depending on the feature, that record can include your inspector's finding text, your Notes, your tool and material inventory, and anything you pasted into Contractor Corner. See Section 6 for how long we keep it.

1.14: Format telemetry

For each inspection we process, we record a structural fingerprint of the report's format together with counts and success indicators. This contains no property address, no inspector identity, and no finding text.

2. How We Use Your Information

We use your information to:

• Provide the Service to you: parse inspection reports, extract findings, generate AI content, render product recommendations and DIY guides, produce negotiation letters, generate multi-month To-Do List plans
• Personalize AI-generated guidance using your inventory entries and any Notes you have marked as AI context (Pro)
• Generate Cabin Mode substitution suggestions that lean on the inventory you have registered (Pro)
• Authenticate you and keep your account secure
• Process payments and manage subscriptions
• Communicate with you about your account, billing, security, and Service updates
• Improve the Service, debug issues, and develop new features
• Evaluate and improve the quality of AI-generated content, including by reviewing recorded model inputs and outputs and the ratings users give them, and using explanations you write about your own ratings to inform guidance generated for you later
• Identify inspection report formats the Service handles poorly, so that we can improve coverage
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes.

3. Third-Party Service Providers

We rely on third-party service providers to operate WIT. Each handles a specific category of data on our behalf, under their service terms with us, which limit how they may use it. By category:

• Authentication provider: we use Clerk for user authentication and account management. Clerk handles login credentials, session tokens, and basic profile information; we do not store passwords directly.
• AI service providers: we use OpenAI and Google (Gemini) for language-model processing that powers parsing of inspection content, AI-generated DIY guides, negotiation letter drafts, To-Do List generation, and Cabin Mode substitution suggestions. When you use personalization features, your inventory data and any Notes marked as AI context are transmitted to these providers along with the finding content, for the purpose of generating personalized output. Our AI providers' published data-use policies state that they do not train models on data sent through their APIs by default. These providers may keep that data for a limited period under their own policies, for example to monitor for abuse.
• Payment processor: we use Stripe to process payments and manage subscriptions. Stripe handles your payment card details directly, including your card's last four digits and billing country — we do not receive or store those. We store transactional metadata in our own systems (amount charged, subscription status, timestamps) so we can show you your purchase history and manage your account.
• Cloud hosting and storage providers: we use third-party cloud providers to host the WIT website, application, backend API, and database, and to store your uploaded inspection PDFs and extracted images. Data is stored in encrypted form at rest and transmitted over TLS.
• Transactional email service: we use a transactional email service provider to deliver account, billing, invitation, and contact-form-response emails that WIT sends to you.
• Affiliate link service providers: we use one or more affiliate networks to facilitate product-recommendation links to retailers. See Section 4 for more detail.
• Content-curation search providers (planned): as we roll out AI-curated external resource links, we may transmit finding titles and short descriptors to third-party search providers to retrieve relevant public content. We will update this policy with named categories as those integrations go live.

If you would like the specific names of the providers we use in any of these categories, contact us at hello@iswit.app. If we materially change the categories of providers we use, we will update this policy.

4. Affiliate Links and Retailer Tracking

WIT includes links to retailers (Amazon, Home Depot, Lowe's, Walmart, Ace Hardware, Menards, Tractor Supply, and others) for product recommendations associated with your findings. These links may include affiliate identifiers.

When you click an affiliate link, the destination retailer may set cookies or otherwise track your activity on their own site, subject to their own privacy policies. We do not control or share information with retailers beyond the click-through itself.

5. Cookies and Local Storage

We use cookies and browser local storage for essential Service functions: authentication sessions, theme preference (light/dark mode), and basic Service operation. We do not use third-party advertising cookies or cross-site tracking.

6. Data Retention

Inspection data: we retain your inspection content whether or not your access is currently active. If access remains paused for twenty-three (23) consecutive months without reactivation or an active Pro subscription, we email a warning notice to the address on file. If access is still paused after twenty-four (24) consecutive months total, we permanently delete the photos and other file-based assets for that inspection, while the inspection record and original findings text are retained afterward in archived, non-interactive form for account-history and audit purposes for up to three (3) additional years, unless you delete your account sooner. See Section 5 of our Terms of Service for the full data-retention policy.

Personalization data (Pro): your inventory entries persist for the life of your account. Notes persist as long as the finding they are attached to is retained, which is tied to the inspection's retention above. If you delete your account, your personalization data is deleted with it.

Raw inspection PDF: the original PDF file is deleted from our servers 90 days after upload, regardless of your access or subscription status. Inspector photos extracted from the PDF are preserved with your analysis and remain available for as long as the inspection is retained as described above. This is a data-minimization measure; see Section 5.1 of the Terms.

Model inputs and outputs: the content inside these records is emptied 90 days after the record is created, on the same clock as the raw inspection PDF. The operational measurement that remains, such as which feature ran, which model version answered, how long it took, and how you rated it, contains none of your content. We keep that measurement so we can compare the quality of the Service over time. See Section 5.2 of the Terms.

Feedback explanations: kept with the record they describe, and emptied on the same 90-day clock.

Negotiation letters and project plans: kept with the inspection they belong to and deleted when the photos and file-based assets for that inspection are deleted under the 24-month schedule above, or earlier on request.

Format telemetry: kept indefinitely. It is not linked to your account and contains no content from your report. Because it is not linked to you, it is unaffected by deletion of your account or of an inspection, and we cannot identify which entries came from you. We maintain it in de-identified form and do not attempt to re-identify it. See Section 5.3 of the Terms.

Account metadata (email, billing history) is retained while your account exists and for a reasonable period after deletion to comply with tax, accounting, and legal obligations.

7. Your Rights

You have the right to:

• Access the data we hold about you
• Export your inspection data, inventory, and Notes in a machine-readable format
• Correct inaccurate information in your account, inventory, or Notes
• Delete your account and the data associated with it (subject to retention obligations described in Section 6)
• Object to specific uses of your information
• Withdraw consent for processing where consent is the legal basis

What deletion does and does not reach. On request we delete your account data and empty the content out of the model input and output records associated with you, and we disassociate those records from your account. Operational measurement that contains none of your content, and the format telemetry described in Section 6, are retained; neither identifies you. We may also retain information where the law requires it, such as transaction records needed for tax and accounting purposes.

Deletion requests are handled by a person, not automatically. Deleting your login through our authentication provider's account screen does not immediately delete your WIT data, but it does notify us to process the deletion by hand, the same as if you had emailed us directly. You can also email us directly to delete your data or to confirm it has been completed. To exercise any of these rights, email us at hello@iswit.app. For general requests not brought under a specific state privacy law, we aim to respond within 30 days. If you are exercising rights under your state's privacy law, see Section 11 for the response timeline that applies to your request.

8. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it. If you believe we may have inadvertently collected information from a child, please contact us at hello@iswit.app.

9. Security

We protect your information using industry-standard security practices: TLS encryption in transit, encryption at rest for stored files, scoped API credentials, regular security review of our service providers, and access controls limiting who within our team can view stored content.

No system is perfectly secure. If we become aware of a security incident that may have compromised your data, we will notify affected users without undue delay, in accordance with applicable law.

10. International Users

WIT is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to this transfer.

11. State Privacy Rights

Depending on your state of residence, you may have specific rights under state consumer privacy laws. These include, but are not limited to, the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, and comparable laws enacted in other U.S. states. Rights commonly granted by these laws include:

• The right to know what personal information we collect about you and how we use it
• The right to access, correct, or delete personal information we hold about you
• The right to receive a copy of your personal information in a portable format
• The right to opt out of the sale or sharing of personal information for targeted advertising (we do not sell or share personal information for targeted advertising)
• The right to appeal any refusal by us to act on a rights request
• The right not to be discriminated against for exercising any of these rights

To exercise any of these rights, or to submit a rights request under the law of your state of residence, email us at hello@iswit.app. We will respond within the timeframe required by your state's law, and in any event no later than 45 days after receipt of your request. If we need additional time (up to 45 additional days) to respond, we will inform you of the reason and the extension period in writing.

We do not sell personal information. We do not share personal information for cross-context behavioral or targeted advertising. We do not use personal information for automated decision-making that produces legal or similarly significant effects.

If you are a resident of a state whose law grants additional rights not listed above (for example, sensitive-data opt-outs or profiling opt-outs), please state those specific rights in your request and we will respond accordingly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will provide notice by email or in-app notice before the change takes effect.

13. Contact

Questions about this Privacy Policy, requests to exercise your rights, or general data inquiries:

Email: hello@iswit.app
Worth It Software LLC
A Michigan Software Company
46906 Grasmere Rd, Northville, MI 48167