Redbud Way ("we," "us," or "our") operates a web application for service providers to manage listings and payment quotes and for customers to complete certain payments as guests. This Privacy Policy explains how we collect, use, disclose, and otherwise process information in connection with the Redbud Way websites and applications (collectively, the "Service").
1. Information we collect
Depending on how you use the Service, we may collect or receive the following categories of information:
- Account and profile data. For example, email address, authentication identifiers, and information you submit when you create or maintain a provider account.
- Business and listing content. Descriptions of services, quote-related content, and other materials you choose to publish or send through the Service.
- Transaction and billing-related data. Information about quotes, invoices, payment status, and related activity processed through our systems. Card payments and Connect payouts are handled by Stripe; we do not store full payment card numbers on our servers.
- Communications. Messages you send to us (for example, support requests) and operational emails sent through providers such as our email delivery vendor.
- Usage and device data. For example, IP address, browser type, general log data, pages or screens viewed, and approximate timestamps. We may use first-party or third-party analytics tools as described below.
- Security and abuse-prevention signals. Where we deploy them, services such as Google reCAPTCHA may collect hardware and software information according to Google's policies to help protect the Service from fraud and abuse.
2. How we use information
We use the categories above to:
- Provide, operate, maintain, and improve the Service;
- Authenticate users, prevent fraud, and protect the security of the Service;
- Process payments and payouts in connection with Stripe Connect and related workflows;
- Send transactional or service-related communications;
- Send a provider's Google review request to a customer who paid that provider, when the provider has turned review requests on. The email uses the customer's email address from the payment, and every request has a link to stop further requests from that provider;
- Comply with law, enforce our terms, and defend our legal rights; and
- Understand usage trends when analytics are enabled (see below).
3. Analytics (Matomo)
When not disabled in our build configuration, the Service may load Matomo analytics scripts so we can measure page views and certain in-app events. Matomo may process IP addresses and related usage data. Depending on deployment, Matomo may be self-hosted or operated on our behalf. You can use browser controls, industry opt-out tools where available, or contact us for more information about how analytics are configured for your environment.
When we run Reddit advertising and enable it in our deployment, Reddit's conversion pixel may load on our pages to measure visits and certain actions (for example, account creation). How Reddit processes information is described in Reddit's privacy policy.
4. How we share information
We disclose information to the following types of recipients as needed to operate the Service:
- Stripe. For payment processing, Connect onboarding, payouts, fraud prevention, and compliance with financial rules. Stripe's use of data is governed by Stripe's agreements and privacy policy.
- Google. For example, when you choose Google sign-in or when reCAPTCHA runs on protected flows.
- Email and infrastructure providers. For example, providers that send transactional email or host servers and databases.
- Professional advisors and authorities. When required by law or to protect rights, safety, and integrity.
We do not sell your personal information as that term is commonly defined in U.S. state privacy laws.
5. Retention
We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods can vary depending on the nature of the data and legal requirements.
6. Security
We implement technical and organizational measures designed to protect information against unauthorized access, loss, or alteration. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information, or to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights where they apply, contact us using the email below. We may need to verify your request before responding.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps.
9. International users
We may process information in the United States and other countries where we or our service providers operate. Those countries may have data protection laws that differ from the country where you live.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Where changes are material, we will provide additional notice as required by law.
11. Contact
For privacy-related questions or requests, contact us at service@redbudway.com.