We ask for very little, and we say why every time.

Four sentences, then the detail.

• We collect what is needed to verify who someone is, move money to the right account, and keep a record of a project that both sides can rely on years later.
• We do not sell personal data, we do not share it for advertising, and we have no advertising business that would give us a reason to.
• A homeowner’s address, phone and payment details do not reach a contractor because a contractor asked — there is no way for them to ask.
• Financial records attached to a project outlive the project on purpose, because a lien waiver is worth nothing if we delete it the year you might need it.

Everything we hold, by who gives it to us.

From a homeowner

A mobile number, and a code we text to it. Your name. The address of the property being worked on, so we know which property the project covers, and whether you occupy it — because occupancy affects which state protections apply to your project. Answers to a small number of state questions of the same kind. Your bank details, which reach our payments provider rather than us. Messages you send on a project, your approvals and disputes, and any rating you leave at the end.

From a contractor

A mobile number and a code. Business name, EIN, licence number where the state issues one, insurance details, and the beneficial ownership information a payments provider is required to collect before it will move money to a business. A payout account. The quotes you write and the work you submit.

From public and official records

We check a contractor’s licence against the state board that issued it, confirm business registration, and screen both sides against sanctions lists — a legal requirement for anyone in the payments chain, not our curiosity. We check property ownership against the county record. We do not run consumer credit checks; where you choose to pay over time, the lender does, under their own agreement with you.

From your use of the site

This marketing site sets no advertising or analytics cookies and embeds no third-party trackers. It loads two font files from Google Fonts, which means Google sees the request. That is the only third party this site contacts, and we are looking at self-hosting the fonts to remove it.

Nothing on that list is there for marketing.

The phone number

It is the account. There is no password to steal or reuse, and a code sent to a number you hold is what stops someone else approving a payment in your name.

The property address and occupancy

Construction law is state law, and several of its protections turn on facts about the property rather than the price. We ask the smallest number of questions that change what the product does, and the app tells you which protection each one is about.

Bank and ownership details

Payment diversion is the most common fraud in construction payments, and the defence is checking that the account receiving the money belongs to the business that did the work. That check is the reason we ask a contractor for ownership information, and the reason changing a payout account is treated as a security event rather than a settings change.

The project record

Approvals, releases, disputes and waivers form the file that proves what was agreed and what was paid. That file is the product. It is also the thing a homeowner needs if a subcontractor turns up years later claiming they were never paid.

A short list, and it does not include advertisers.

Our payments provider

Stripe Payments Company holds project funds during the pilot and performs the identity and business verification that its own licences require. Bank details you enter go to them. They handle that data under their own agreement with us and their own privacy terms.

The other side of your project — but not all of it

A contractor sees what they need to price and do the work: your first name, the project, the schedule, your approvals, your messages. Your address reaches them when you accept a quote and fund the project, not before. The code a homeowner shows a contractor to receive a quote expires in fifteen minutes, works once, and reveals a first name and a city — never a street, a phone number, an email, a bank, or what you paid anyone else.

A lender, only if you choose one

If you fund a project through Affirm or Klarna, your application goes to them and they decide it under their own terms. We are not the lender and do not see their credit decision beyond whether it succeeded.

A reviewer, only in an escalation

If a dispute escalates, both sides see the same evidence packet, and so does the reviewer deciding it. Nothing goes into that packet that both parties cannot see.

When the law requires it

Sanctions screening, tax reporting, and a valid legal demand. We will tell you when we are compelled to hand something over unless we are prohibited from telling you.

Longer than you might expect, for a reason.

A closeout package, a signed waiver and a payment record are evidence. Deleting them promptly would feel privacy-respecting and would leave a homeowner unable to prove they paid when someone claims otherwise — and lien and contract limitation periods run for years after the work is done. So project financial records are kept for as long as they could plausibly be needed, and payment records are kept as long as financial and tax rules require.

What does not need to persist, does not. An expired invite code is gone. Verification material we were required to collect but do not need to keep is not kept. If you close an account with no project attached, there is very little left to hold.

What you can ask for, and the honest position on which law applies.

What you can ask us to do

Ask what we hold about you and get a copy. Correct anything wrong. Ask us to delete what we are not required to keep. Object to something we are doing. We will answer within 45 days, and tell you plainly when a legal obligation stops us doing what you asked.

Which law gives you those rights — the honest answer

Utah’s Consumer Privacy Act applies to businesses above $25 million in revenue handling data on 100,000 people; we are nowhere near either. Texas’s Data Privacy and Security Act exempts small businesses from most of its obligations. Neither of them currently compels the rights above from a company our size. We are offering them anyway, because the size of the company is a poor reason for you to have fewer rights, and because we would rather build the process now than retrofit it at the threshold.

Financial privacy law does apply

Handling money for consumers brings federal financial privacy and safeguarding obligations with it, and those do not have a small-business exemption. Where a formal financial privacy notice is required, you will receive one when your account is opened rather than being pointed at a web page.

How to ask

Write to privacy@projectcomplete.app. A real person reads it. During a pilot this small, that person is one of the founders.

What protects it.

Card numbers are not accepted anywhere in the product, which removes an entire category of risk rather than defending it. Bank credentials go to our payments provider rather than being stored by us. Accounts have no password to phish. A payout account locks at verification, and changing one re-runs the checks, freezes payouts briefly and notifies every open project — because that change is what payment diversion looks like.

We are building the formal written security programme that federal law requires of anyone safeguarding consumer financial information. It is not finished. Saying so is more useful to you than a paragraph implying it is.