Privacy Policy
Effective date: May 21, 2026
Steward (“we,” “us,” or “our”) operates seesteward.com. This policy explains what information we collect, how we use it, and your rights under the California Consumer Privacy Act (CCPA) and other applicable laws.
Information we collect
Account information
When you create an account, we collect your email address and a hashed password. We use Supabase to manage authentication and store this data.
Home and project information
We store the home addresses, property types, and project descriptions you provide. This includes cost estimates, scope-of-work documents, and your answers to scoping questions.
Photos
When you upload photos of your project, those images are sent to Anthropic’s API to generate a plain-language description. We do not permanently store uploaded photos on our servers; they are transmitted directly for analysis and then discarded.
Home system records and documents
If you use Home Health, we store records about your home’s systems (HVAC, plumbing, etc.) including install year, condition, warranty dates, and notes you provide. Documents you upload (warranties, manuals, inspection reports) are stored in encrypted cloud storage.
Contractor connection requests
When you request a contractor connection, we collect your name and contact information (email or phone) solely to facilitate that introduction.
Usage and error data
We use Mixpanel to collect anonymized usage analytics (pages visited, features used) and Sentry to capture error reports. These help us improve the product. Your IP address is used transiently for rate limiting and is not stored in our database.
How we use your information
- To provide cost estimates and scope-of-work documents for your projects
- To track your home systems and surface maintenance insights
- To connect you with contractors when you request it
- To send transactional emails (account confirmation, password reset)
- To monitor application health and fix bugs
- To improve the product based on aggregate usage patterns
We do not sell your personal information. We do not use your data to train AI models.
Third parties we share data with
We share data with third-party service providers only as necessary to operate the product. These providers fall into the following categories:
- Cloud infrastructure and database providers — host our application servers, database, authentication, and file storage. Data is stored in the United States.
- AI inference providers — process your project descriptions and photos to generate estimates and descriptions. Your data is not used to train their models.
- Transactional email providers — deliver account and notification emails on our behalf.
- Analytics providers — collect anonymized usage data to help us improve the product.
- Error monitoring providers — capture application errors to help us fix bugs. Reports may include partial request data but never include passwords or payment information.
For a full list of named sub-processors, see our Sub-processors page.
We do not share your personal information with any other third parties without your consent, except as required by law.
Data retention
We retain your account and project data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law.
Your rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Delete your personal information (subject to certain exceptions)
- Opt out of the sale of your personal information — we do not sell personal information
- Non-discrimination — we will not treat you differently for exercising these rights
To exercise any of these rights, email us at teamstewcrew1@gmail.com. We will respond within 45 days.
Cookies
We use a session cookie to keep you logged in. We do not use advertising cookies or third-party tracking cookies. Mixpanel may set a first-party analytics cookie.
Security
All data is transmitted over HTTPS. Passwords are never stored in plain text. Files are stored with encryption at rest. Access to your data is enforced by row-level security policies — only your account can read or modify your records.
Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated via email or a notice on the site. Continued use after changes are posted constitutes acceptance.
Contact
Questions about this policy? Email us at teamstewcrew1@gmail.com.