Privacy Policy | Let Me Take A Look

1. Who we are

Let Me Take A Look (“we,” “us,” or “the Service”) is a platform that connects homeowners with qualified construction pros for independent quality reviews of in-progress and completed residential construction work. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service at letmetakealook.com, you agree to the practices described here and to our Terms of Service. If you do not agree, do not use the Service.

2. Information we collect

Account information. When you sign up we collect your name, email address, and role (homeowner, pro, or admin). Authentication is handled by our identity provider, which may also collect a password or social-login token on our behalf.

Project information. When you request a Professional Review, we collect details about your project: property address, project type, contractor name and license number (if provided), photos, plans, scopes of work, invoices, permits, punch lists, and any concerns or messages you share. Uploaded documents and photos may contain metadata (including GPS coordinates and timestamps) that we preserve to support the Review.

Pro information. Pros provide professional credentials including any state or provincial licensure they hold, license numbers (where issued and disclosed by the pro), expertise areas, years of experience, and rate information. Where practical, we review credentials against issuing authorities or third-party verification services on a reasonable-efforts basis; the depth of verification we can perform depends on the jurisdiction and trade.

Communications. Messages you exchange with your pro through the Service, and messages you send us via email or support, are retained for service-quality, dispute resolution, and legal purposes.

Payment information. Payments are processed by Stripe. We do not store your full card number. We retain transaction IDs, last four digits, card brand, and payment status to manage your account, process refunds, and respond to chargebacks.

Device and usage information. We collect standard server logs and device information including IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, links clicked, session duration, and timestamps. We use this information for security, abuse prevention, product improvement, and analytics.

Cookies and similar technologies. We and our service providers use cookies, local storage, pixels, SDKs, and similar technologies to keep you signed in, remember your preferences, measure traffic, and attribute conversions. See Section 8 for details.

Information from third parties. If you arrive through a marketing channel, we may receive limited attribution information (such as campaign identifiers and click identifiers) from that channel. If you use a social or single-sign-on login, that provider shares basic profile information with us.

Information we do not intentionally collect. Please do not submit sensitive categories of personal information (such as government identifiers, health records, or financial-account numbers) through the Service unless we specifically request them. If you do, you consent to our processing that information to deliver the Service.

3. How we use your information

To provide the Service, including matching you with a qualified pro, delivering Reviews, and processing payments.
To review pro-supplied credentials on a reasonable-efforts basis and support cross-jurisdiction compliance.
To communicate with you about your account, your projects, transactional matters, and Service updates.
To detect, prevent, investigate, and respond to fraud, abuse, security incidents, and violations of our Terms.
To improve the Service, develop new features, and perform internal research and analytics.
To personalize your experience and measure the effectiveness of marketing.
To comply with legal obligations, enforce our Terms, and protect our rights, your rights, and the rights of others.
To render an anonymized version of your delivered Review on a public share link you generate, and to display anonymized sample Reviews in a public gallery that helps future homeowners understand what a Professional Review looks like.
For any other purpose you consent to, or any other use compatible with the context in which the information was collected.

We may generate de-identified or aggregated information from your data and use that information indefinitely for any lawful purpose, including improving the Service, publishing industry insights, and displaying anonymized sample Reviews (for education, marketing, or search-engine discoverability), provided it cannot reasonably be linked back to you. Before any such public display, we remove your name, email, full street address, contractor name and license number, job price, and any other identifiers we know about. We do not attempt to remove identifiers that may be embedded in the photos you upload (such as faces, license plates, or documents visible in the frame); you are responsible for what you upload.

4. How we share your information

We share information only as needed to operate the Service:

With your assigned pro — project documents, photos, notes, and Q&A messages are shared with the pro you are matched to, so the pro can deliver your Review.
With service providers (processors). Stripe (payments), Amazon Web Services (hosting, file storage, transactional email via SES), Cloudflare (DNS and security), our identity provider Logto (authentication), and our analytics and marketing-measurement vendors, including Google Analytics 4, Meta Pixel and Conversions API, Microsoft Clarity, and (where enabled) Google Ads and Reddit Ads conversion APIs. These providers receive only what they need to deliver their service and are bound to confidentiality and data-protection obligations.
For legal reasons. To comply with a valid subpoena, court order, or other legal process; to respond to a regulator or law-enforcement inquiry; to enforce our Terms; to investigate or prevent fraud, security incidents, or harm; or to protect the rights, property, or safety of any person.
In a business transaction. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to the acquirer’s commitment to respect this Privacy Policy or to give you notice and choice before material changes.
With your direction or consent. If you choose to share a Review with a third party (such as your contractor, insurer, or attorney) — including by generating a public share link from your dashboard — you are responsible for that onward disclosure. Share links render an anonymized version of the Review (with your name, full address, contractor name, and job price removed) and can be turned off at any time from your dashboard; doing so immediately invalidates the link.

We do not sell your personal information, and we do not share your project documents with third parties for cross-context behavioral advertising. We do use third-party analytics and advertising pixels that may constitute “sharing” under certain state laws; see Section 9 for your opt-out rights.

5. Document storage and retention

Documents and photos you upload for a Review are stored encrypted at rest in Amazon S3 (US East region). Access is restricted to you, your assigned pro, and our administrators for support, fraud-prevention, and dispute-resolution purposes.

Retention. We retain account information, project information, Reviews, and Q&A messages for the life of your account and for a reasonable period afterward to handle disputes, comply with tax, accounting, and other legal obligations, and defend against claims (typically up to seven years). Transaction and payment records are retained as required by law. Security logs are typically retained for up to 24 months. De-identified and aggregated information may be retained indefinitely.

You may request deletion of your account and associated personal information at any time (see Section 7). Some information may be retained after a deletion request as necessary for the purposes described above or to enforce our Terms.

6. Security

We use industry-standard practices to protect your information: TLS in transit, encryption at rest, scoped access keys, least-privilege roles, and regular review of our security posture. No system is perfectly secure, and we cannot guarantee the security of your information. You are responsible for keeping your account credentials confidential. If you believe your account has been compromised, contact us immediately at [email protected].

If we become aware of a breach of personal information, we will notify you and applicable regulators as required by law. Our notification obligation does not create any contractual duty or cause of action beyond what applicable law requires.

7. Your choices and rights

Access and correction. You can view and update your profile information at any time from your dashboard. You may request a copy of the personal information we hold about you, and ask us to correct inaccurate information, by emailing [email protected].
Deletion. You can request deletion of your account and associated personal information. Some information may be retained for tax, legal, fraud- prevention, dispute-resolution, or security purposes, as described in Section 5.
Data portability. Where required by law, you may request a copy of certain information you provided to us in a portable, machine-readable format.
Restriction and objection. Where required by law, you may ask us to restrict or object to certain processing.
Marketing email. You can opt out of marketing email at any time using the unsubscribe link or by emailing [email protected]. We will continue to send transactional email related to your account and projects even if you opt out of marketing.
Opt-out of analytics and advertising cookies. You can disable cookies in your browser, use the Global Privacy Control signal (we treat GPC as a valid opt-out of sale and sharing), or use industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org.
No discrimination. We will not discriminate against you for exercising any of the rights described in this section.

To exercise any right, email [email protected]. We may need to verify your identity before acting on a request. If you are an authorized agent acting on behalf of a consumer, we may require written proof of authorization.

8. Cookies and tracking technologies

We use cookies and similar technologies for the following purposes:

Strictly necessary. Session cookies that keep you signed in, CSRF tokens, and load-balancing cookies. These cannot be turned off.
Functional. Preferences such as UTM attribution and device recognition.
Analytics. Google Analytics 4 and Microsoft Clarity help us understand how the Service is used and where to improve it.
Advertising measurement. Meta Pixel and Conversions API plus (where enabled) Google Ads and Reddit Ads pixels and conversion APIs help us measure the effectiveness of our marketing and, in some cases, reach similar audiences. We do not use these tools to advertise products based on sensitive categories.

Most browsers let you control cookies through their settings. Blocking strictly-necessary cookies will prevent the Service from working correctly.

9. State privacy rights (California, Colorado, Connecticut, Virginia, Utah, and others)

Residents of certain U.S. states have specific rights under their state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act, the Utah Consumer Privacy Act, and similar laws. These rights may include the right to know what personal information we collect, use, disclose, or share; the right to delete; the right to correct; the right to portability; the right to opt out of sale, sharing, or targeted advertising; and the right to limit use of sensitive personal information.

Categories of personal information we have collected in the past 12 months: identifiers; customer-records information; commercial information; internet or other electronic network activity; geolocation (approximate, from IP); professional or employment-related information (for pros); and inferences drawn from the above. We collect this information from you, from your device, from our service providers, and from publicly available sources. We use it for the purposes described in Section 3 and share it with the categories of recipients described in Section 4.

Sale and sharing. We do not sell personal information for money. We do enable certain advertising pixels and analytics that some states define as “sharing” for cross-context behavioral advertising. You can opt out of this by (a) sending a Global Privacy Control signal from your browser, (b) emailing [email protected] with the subject line “Do Not Sell or Share,” or (c) using the opt-out tools referenced in Section 7.

To exercise any right, email [email protected]. We will respond within the timeframe required by applicable law. You may appeal our decision by replying to our response with the subject line “Appeal.”

10. Children

The Service is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a child has provided us information, contact [email protected].

11. International users

The Service is operated from the United States and is intended for users located in the United States and Canada. Regardless of where you access the Service from, your information will be transferred to, stored in, and processed in the United States, which may have data-protection laws different from those of your country or province. Canadian users consent to this cross-border transfer and processing by using the Service. We do not currently offer the Service to residents of the European Economic Area, the United Kingdom, or Switzerland, and we do not represent that the Service complies with the GDPR, UK GDPR, or FADP.

12. Third-party links

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of those third parties. When you follow a link, read the destination site’s privacy policy.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “last updated” date and, for material changes, notify you by email or an in-app notice before the change takes effect. Continued use of the Service after the effective date indicates acceptance.

14. Contact

Questions about this Privacy Policy or your personal information? Email [email protected].