Privacy policy
Effective September 6, 2026
The short version
Your contact info is shared only with contractors whose bids you pick, at the moment you pick each one. You may pick one, or more than one to compare finalists; nobody you do not pick ever gets it. We do not sell, rent, or trade your information to anyone, for any reason. No lead lists, no marketing partners, no exceptions. That is the entire reason this company exists.
What we collect
When you create an account: your name, email address, and phone number. When you post a project: the project details, photos, budget range, and ZIP code you provide. When you bid as a contractor: your business name, license number, trades, service areas, and the bids you place. We also keep the operational records any service keeps, such as sign-in timestamps and email delivery status.
How we use it
To run the marketplace: showing your project (without your identity) to verified contractors, notifying you when bids arrive, verifying contractor licenses against state registries, and completing the contact reveal when you pick a bid. We send transactional email only: sign-in links, bid notifications, and pick confirmations. No marketing blasts.
Text messages
Giving us a mobile number is optional. If you enter one when you post a project, we send transactional text messages about that project only: when a contractor submits a bid, and when a contractor asks a question. We do not send marketing texts. Reply STOP to any message to opt out; reply HELP for help. Message frequency depends on activity on your project, and message and data rates may apply. Your number is never sold, rented, or shared with anyone other than a contractor you pick, and our messaging providers process it only to deliver these messages.
What contractors see before you pick
Your first name, last initial, neighborhood-level location (ZIP code), and everything you wrote about the project, including photos. Never your last name, phone number, email, or street address. Bid messages are automatically screened to block contact info from passing in either direction before a pick.
Who processes data for us
We run on a small set of service providers: Supabase (database and authentication), Vercel (hosting), and Resend (email delivery). They store and transmit data on our behalf under their own security commitments and do not get to use your information for anything else.
Cookies and advertising
We use session cookies to keep you signed in. We do not sell your personal information, and we never have.
We advertise on Facebook and Instagram to reach homeowners, and we use Meta's advertising pixel to measure whether those ads actually work. It tells us that someone who saw an ad later came here and posted a project. That measurement works by sharing your visit to our public pages with Meta, so we want to be plain about it rather than bury it.
Two limits we hold ourselves to. The pixel runs only on our public marketing pages. It is never loaded once you are signed in, so your dashboard, your projects, your bids, and everything you type into this site stay out of it entirely. And we never send Meta custom data: no email address, no phone number, no project details, no name.
There is one more piece we should name, because it does not happen in your browser. When a project is posted, our server also tells Meta directly that a project was posted. Browser measurement is unreliable, ad blockers and privacy settings drop a large share of it, and without this we cannot tell a campaign that found nobody from one whose results never got counted. That message carries the fact of the post and Meta's own advertising identifiers from the ad you clicked, along with your IP address and browser type. It does not carry what you wrote: not the project, not the category, not the budget, not your name, email, or phone. The same rule applies as above; nothing you typed goes to Meta.
If you would rather not be measured this way, opting out in your Meta ad preferences covers both halves. A browser or extension that blocks advertising trackers stops the pixel but not the server message, so it is the Meta setting that matters most here. Either way, nothing about the site stops working.
We also use Google Analytics on the same public pages, to see which pages people visit and whether visits turn into posted projects. It follows the same limits as the pixel: never loaded once you are signed in, nothing you type is sent, and Google's advertising and personalization features are switched off, so it is measurement only. A browser that blocks trackers stops it entirely, and the site works the same without it.
Deleting your data
Email us and we will delete your account and its data: profile, projects, photos, and bids. Records already shared through a pick (a contractor you chose has your contact info) cannot be unshared, and we may retain minimal records where the law requires it.
Contact
Questions or deletion requests: support@joinhouserules.com. We are HouseRules, Portland, Oregon.
Changes
If this policy changes, we will update this page and the date below. We will never change the core promise: your contact info goes to the contractors you pick, and nobody else.