Privacy Policy

1Information We Collect

This policy describes how The Contractors Marketing handles information on our agency website and when you contact us or use our services. We collect information you provide and information generated by your visit, booking, or call:

• Contact and Booking Information: Name, email address, phone number, business name, website, service area, and appointment details that you provide when you contact us or book a strategy session.
• Business Information: Details about your contracting business, services offered, target markets, and marketing goals provided during consultations.
• Visit and Advertising Information: IP address, browser and device information, page and referring addresses, advertising click or browser identifiers, campaign parameters, and event times.
• Communication and Call Information: Correspondence, caller number, call time, duration, and connection or menu outcomes when you contact us. Any call recording is subject to the notice provided for that call.

TCM Workspace and Connected Meta Data

When you use the TCM workspace, we store operator and workspace access records, client names, assigned Meta accounts and Pages, connection permissions and encrypted authorization tokens, saved campaign briefs and their versions, linked campaign records, and supporting reports, Page content, and analysis findings. These records support sign-in, authorized account access, reporting, planning, and campaign handoff.

2How We Use Your Information

We use the information we collect to provide, maintain, and improve our marketing services for contractors. Specifically, we use your data to:

• Deliver and manage your Google Ads, Meta Ads, and ChatGPT Ads campaigns
• Respond to your inquiries and provide customer support
• Create customized marketing strategies and performance reports
• Send important service updates, newsletters, and promotional offers
• Operate our website, booking, and call services; understand which advertising brings inquiries and bookings; and improve site performance
• Comply with legal obligations and enforce our terms of service

3Information Sharing

We share information with the providers needed to operate our website, respond to inquiries, arrange bookings and calls, and measure advertising. The information and provider's role depend on the service:

• Website, Booking, and Call Providers: Cloudflare delivers and protects the site and hosts our measurement service. HighLevel handles forms, calendars, contact records, and follow-up workflows. Ringba provides tracked phone numbers and call attribution on pages that use it.
• Advertising Platforms: When optional visit measurement is allowed, Meta, Google, OpenAI and LinkedIn can receive visit events, advertising or browser identifiers, and browser and network context. LinkedIn uses permitted visits to build retargeting audiences. The OpenAI browser Pixel may also use hashed contact information available to it on our website for matching, as explained below. Separate existing server conversion integrations can process click identifiers and event information; Meta matching may include hashed email addresses or phone numbers. Hashing does not make personal information anonymous.
• Legal Requirements: When required by law, subpoena, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
• With Your Consent: We may share information when you explicitly authorize us to do so.

Tasks, Lead Outcomes and Photo References

The private TCM workspace also stores assigned next steps, due dates and completion notes; client services, service areas and dated capacity; stable lead or opportunity references, source links and confirmed outcome histories; and approved job-photo or review references with usage-permission records. CRM imports are one-way summaries for the selected client. Main TCM agency sales are kept separate from homeowner roofing inquiries. Contact details, conversations and payment documents remain in the agreed CRM; imported outcome values are not proof of advertising attribution.

These local records support planning and outcome reporting. They do not automatically send customer messages, change CRM records, activate ads or send conversion events to Meta. CRM and photo data are not automatically included in Ask TCM requests. Private records are stored with our hosting provider, Cloudflare, and accessible according to workspace and client permissions.

Ask TCM and OpenAI

When you submit a question to Ask TCM, OpenAI processes your question, selected client and account names, reporting dates, account context such as currency and timezone, and a bounded set of campaign names and advertising metrics from the selected account. This supports source-linked advertising analysis. Page content retrieved by the workspace is not included automatically. Ask TCM has read-only reporting tools and cannot create or change campaigns.

Mobile Information & SMS Consent

4Cookies & Tracking Technologies

Our public website uses optional Meta, Google, ChatGPT and LinkedIn browser visit measurement, including LinkedIn retargeting. One Your Privacy Choices control governs all four. Visit events help us understand traffic and advertising; a visit is not a confirmed lead or booking.

• Browser Visit Measurement: These publishers can receive page visits, advertising click or browser identifiers, and browser or network information. We limit the page information supplied by our adapters and do not add form answers, booking details, message contents or call recordings to visit events. The publisher scripts can also process information as described in their own notices.
• Website, Forms and Booking: Cloudflare delivers and protects the site. HighLevel operates embedded forms and calendars and receives the information you provide to use them. These functions remain available when optional visit measurement is off.
• Calls: Ringba operates tracked phone numbers and call attribution where used. It processes caller and call information needed for those services. The footer choice does not prevent a phone call or delete call records.

The TCM workspace uses an essential sign-in cookie with a 12-hour session duration. Signing out clears that browser session.

Optional visit and booking measurement

For ordinary adult business visits that our trusted website service identifies as coming from the United States, optional visit measurement is on once our linked privacy information and Your Privacy Choices control are available, unless you opt out. Outside the United States, or when the country is unknown, it stays off until you make an affirmative choice. A saved opt-out or a Global Privacy Control signal keeps all four publishers' optional visit measurement off. An unreadable or unrecognized saved preference does not become default permission.

The OpenAI browser Pixel measures page visits and may use automatic advanced matching when supported information is available to it on our website. It can detect supported contact information, normalize it and hash it in the browser before including it with events. Raw contact information is not sent by that automatic matching feature. Hashed identifiers, cookies and browser identifiers can still identify or match a person; this measurement is not anonymous. An embedded HighLevel window has a separate origin; adding the Pixel to our site does not give it unrestricted access to information inside that window.

When LinkedIn measurement is allowed, the Insight Tag sends visit information that LinkedIn can match to its member accounts for audience insights and retargeting. Our integration does not add contact details, form answers, booking details, messages or call recordings to LinkedIn visit events. LinkedIn may use advertising cookies and browser or network information under its own privacy notice. An earlier Allow covering Meta, Google and ChatGPT does not itself authorize LinkedIn; outside the U.S., a new choice covering LinkedIn is required.

When Google measurement is allowed, our website reports a completed booking to Google Analytics only after the embedded calendar confirms it. The event includes permitted campaign information and a hashed booking identifier used to prevent repeats. It excludes names, email addresses, phone numbers, form answers and appointment details. Opening the calendar or pressing Submit does not count as a completed booking.

Our separate server integration reports eligible confirmed bookings to OpenAI after checking the original visit permission, booking association and revocation state. That server payload does not include names, email addresses, phone numbers, contact hashes, form answers, recordings or message contents. Google browser completion events and OpenAI server-confirmed booking events have separate verification and reporting paths.

We store your measurement choice and limited reference records in your browser. When allowed, an opaque reference and permitted attribution information can pass to our booking or call tools to associate a later eligible outcome with its visit. Our adapters stop optional measurement identifier forwarding when the choice is off. The tools still process the information needed for their separate operational functions. OpenAI processes measurement data under its Conversion Terms and Ad Tools Data Processing Addendum; it is not always acting only as our service provider.

Open Your Privacy Choices in the footer or here to allow or opt out of optional Meta, Google, ChatGPT and LinkedIn visit measurement and LinkedIn retargeting. Opting out stops future optional browser visit events and associated identifier forwarding and requests revocation of available ChatGPT server references. A prior decline stays declined across policy updates. Earlier positive choices keep their original publisher scope; adding LinkedIn does not turn an earlier Allow into a new four-publisher consent.

A choice applies to this site address and browser; other browsers or devices can have different choices. Clearing site storage can remove a saved choice. A change cannot undo information already transmitted, erase records held by HighLevel, Ringba or advertising platforms, or disable every separate legacy server operation. Contact us about deletion, existing server records or a broader advertising-data request. GPC remains an opt-out even if Allow is selected.

5Data Security

We use HTTPS for our website and access controls for our systems. We limit the information included in the separate ChatGPT measurement integration and keep its access credentials out of website code. Our providers apply their own security measures to the information they process.

No transmission or storage system can be guaranteed completely secure. We retain information as needed to provide services, maintain business records, resolve issues, and meet applicable legal requirements. Contact us to request deletion or ask about a particular record.

6Your Rights & Choices

Depending on your location, you may have certain rights regarding your personal data. These rights may include:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to legal obligations. Meta app and platform-access deletion requests can also be submitted through our Data Deletion Instructions.
• Advertising and Measurement: Use Your Privacy Choices for optional Meta, Google, ChatGPT and LinkedIn browser visit measurement and LinkedIn retargeting. Contact us about separate server records and broader advertising-data requests. You can also review Meta Ad Preferences and Google My Ad Center and LinkedIn advertising settings; those provider settings have their own scope.
• Marketing Messages: Unsubscribe through the link in our marketing emails or follow the opt-out instructions in a text message.
• Data Portability: Request your data in a commonly used, machine-readable format.

To make a request, contact us using the details below. We may need to verify your identity and the records involved. We will respond within the period required by applicable law and explain any limits, including records we must retain. A browser or platform setting does not replace a request concerning information already in our business records.

Workspace Retention and Deletion

Saved clients, plans and their versions, tasks, capacity notes, lead outcome summaries and events, import receipts, photo permission records, connections, and campaign records persist across sessions until removed or an eligible deletion request is processed. Source-derived task explanations follow the source evidence expiry and access rules. Withdrawing photo permission removes the reference from future selections and exports; minimal permission and usage history can remain for audit. Derived report, Page-content, and analysis evidence expires after 30 days and is purged on subsequent workspace activity. Archiving retains a plan. Deleting a plan clears its saved text, versions, and evidence links; source snapshots follow their retention period, and campaign and audit records can remain. These actions do not delete a campaign from Meta.

For a wider request covering workspace records or connected account data, email support@thecontractorsmarketing.com using the Data Deletion Instructions. Include the relevant business, client, and account details without sending passwords or authorization tokens.

7Third-Party Services

You can review the providers' own privacy notices and controls here:

• Cloudflare privacy policy — website delivery, security, and our server measurement service.
• HighLevel privacy policy — forms, calendars, contact records, and communications.
• Ringba privacy policy — tracked calls and visitor attribution.
• Meta privacy policy and Google privacy policy — browser visit measurement and separate advertising services.
• LinkedIn privacy policy — visit measurement, audience insights and retargeting.
• OpenAI privacy policy — ChatGPT, Ask TCM advertising analysis and related services; the conversion-specific terms are linked above.

We remain responsible for our collection and sharing of information. Providers may also process information for their own purposes under their terms. Contact us first about a booking, call, or record held for our business.

8Children's Privacy

Our services are designed for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.

9Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.

We will provide additional notice or request a new permission when required. A policy update does not turn a saved measurement decline into permission or broaden an earlier publisher-specific affirmative choice.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please don't hesitate to reach out: