PRO AT HAND

Privacy Policy

Effective November 3, 2026

Pro at Hand is a consultation service operated by DeForest Custom Homes LLC. This policy explains how we use information when you use proathand.app or the Pro at Hand iPhone app.

Information we collect

We collect the name and email address you provide to sign in; your appointment choices, payment status, project descriptions, uploaded photos, change requests, and consultation notes; and an optional mobile number and consent record if you choose appointment texts. Our hosting and service providers also process technical information such as IP addresses, device/browser details, and request logs to operate and protect the service.

If you choose Google sign-in when available, Google supplies your account identifier, name, email address, email verification status and profile picture. We use these to sign you in and connect your existing account when the same email is verified. We request basic sign-in information only, without access to your Gmail messages, Drive files or calendar. Google processes sign-in under its own privacy policy.

How we use it

We use your information to authenticate your account, manage consultations, share your project with Eric, process payments, deliver call access and written next steps, respond to support requests, and protect against misuse. If you opt in, we use your mobile number for appointment confirmations, reminders, and schedule updates. We do not use this SMS program for marketing.

Payments, calls, and providers

Cloudflare hosts the app, database, private photo storage, sign-in email, and RealtimeKit calls. Stripe processes payment details through its checkout; Pro at Hand does not store your full card number. Twilio provides text-message delivery when enabled. These providers process information needed to supply their services. Eric can access customer project details to provide and manage consultations. Scheduling events also appear in a private owner alert list and can generate email alerts to Eric. These emails contain an event type, appointment time and a sign-in link, without project photos or descriptions. We retain read and sending-status records; an email accepted for sending is not proof of inbox delivery.

Camera and microphone access requires your permission. Pro at Hand does not record or transcribe consultations through the app. Avoid including sensitive information unrelated to your project in photos or notes.

iPhone permissions and device features

The iPhone app opens the system photo picker for images you select; it does not request access to your entire photo library. Taking a new photo requires camera permission. Before uploading a project photo, the iPhone app resizes it and converts it to JPEG without source location metadata. Anything visible in the image remains visible to Eric, so check photos before sending them. This conversion does not apply to uploads made through the website.

When you choose Add to Calendar, the app presents the system event editor with your appointment details. You choose whether and where to save the event. We do not read your existing calendar or upload its contents. A saved calendar copy does not automatically update after an appointment changes; it may be stored or synced by the calendar provider you choose.

The iPhone app stores your sign-in session in the device-only Keychain, accessible while the device is unlocked. It also keeps an unfinished project-save request there, including the original project details and retry identifier, so you can explicitly recover the same save after a lost connection or restart. Recovery does not run automatically, make a payment, or confirm an appointment. The local recovery record is removed after the saved project opens successfully, when you clear recovery, or when your sign-in expires, you sign out, or the signed-in account changes. Clearing local recovery does not delete a project already saved on our servers. Sign-out removes the local sign-in session. If the network is unavailable, local sign-out still works, but server-side session revocation cannot be confirmed. Signing out on one device does not sign you out on other devices. The iPhone beta uses email-code sign-in, with password sign-in for separately provisioned review accounts. Passwords for those accounts are stored as secure hashes, not readable passwords.

Call diagnostics and tracking

Cloudflare RealtimeKit processes participant names and identifiers, device and connection information, and call-service records to operate calls and diagnose problems. Its bundled iPhone SDK declares collection of device identifiers linked to users and crash diagnostics not linked to users for analytics. These diagnostics are separate from call recordings; recording, transcription and persistent meeting chat are disabled in our room configuration. Cloudflare retains service records under its RealtimeKit retention policy.

Pro at Hand does not include advertising SDKs or use your app information to track you across other companies' apps and websites for advertising. Optional microphone and camera access is used for the call you choose to join. You can change those permissions in iPhone Settings.

TestFlight beta testing

If you install a beta through TestFlight, Apple collects crash logs, usage information and any feedback you submit, and shares beta-testing information with us. Depending on how you join the beta, this can include your name and email address. We use this information to investigate problems and improve Pro at Hand, and do not share TestFlight feedback with third parties. Please leave customer information, passwords and payment details out of feedback and screenshots. Apple explains collection and retention in its TestFlight privacy notice. We retain beta feedback only as needed to investigate issues and support the beta; contact us to ask about information you submitted.

Owner iPhone notifications

If the owner enables iPhone notifications, we store the Apple push device token with the verified owner account and its active sign-in session. Apple processes that token and a generic scheduling alert to deliver notifications. Lock-screen alerts contain an app alert identifier and, where relevant, an appointment identifier; they do not contain customer names, contact details, project descriptions or pictures. Tapping an alert requires the app to authenticate before loading appointment details. Device registration ends when the session is removed, and expired or no-longer-authorized registrations are cleaned up. Push delivery status is retained for up to 30 days. You can turn off notifications in iPhone Settings. Apple acceptance does not guarantee delivery.

Mobile information and SMS consent

We do not sell or share mobile information with third parties or affiliates for marketing or promotional purposes. Text-message originator opt-in data and consent are not sold, rented, or shared for third parties’ own use. Service providers that deliver messages on our behalf may process the information necessary for delivery and opt-out handling; they do not receive permission to market to you.

Consent is optional and separate from booking. We keep a record of your preference, mobile number, disclosure version, and submission time. You can turn texts off at Text preferences or, when texting is active, reply STOP. Opting out of texts does not cancel a consultation.

Ongoing projects and shared advice

When you book a follow-up from an existing appointment, we link it to that project so you and Eric can review earlier questions, progress photos and written advice. Reference pictures Eric shares are visible to that customer and Eric, including after an appointment ends. Different projects are kept separate unless you choose a follow-up. Linked history follows the account retention and deletion choices below.

Cookies and security

We use necessary session cookies to keep you signed in. Access controls restrict project photos and appointments to the customer and authorized owner. No service can guarantee absolute security.

Retention and your choices

We keep information as needed to provide your account and consultations, maintain consent and transaction records, handle disputes, and meet applicable obligations. To request access, correction, or help with project information, email eric@deforestcustomhomes.com. We may verify your identity and retain records needed for legal, security, payment, or consent purposes. Request account deletion in Account settings. Accounts without unresolved appointments or payments are normally removed within minutes; requests needing review or technical attention are completed within seven days. We email confirmation. Deletion removes the sign-in account, project photos, consultation notes and SMS preferences/consent records. Limited payment references (amount, currency, date and Stripe session reference) remain for transaction records. A protected phone fingerprint may remain to honor text-message opt-outs, along with message identifiers used to prevent duplicate processing; it cannot be used to sign in. Phone verification and text delivery records are removed with your account. A protected email fingerprint is retained if a free introduction was redeemed, to prevent repeated free claims. It cannot be used to sign in. A completion receipt retains request and completion dates without your email address. Stripe and calling providers may retain their own transaction or service records under their policies.

Contact and changes

Contact DeForest Custom Homes LLC about privacy at eric@deforestcustomhomes.com. We will update this page and its effective date when this policy changes. Changes to message types requiring new consent will not be treated as covered by your earlier choice.