Privacy Policy

This Privacy Notice for Mero Mero Systems LLC dba ProjectHero ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://www.projecthero.ai
• Use the ProjectHero mobile app or any application that links to this Privacy Notice
• Engage with us in other related ways, including any marketing or events

Your use of the Services is also governed by our Terms of Service (v1.0, effective July 15, 2026).

Questions or concerns? Contact us at privacy@projecthero.ai.

1. What Information Do We Collect?

We collect personal information you voluntarily provide:

• Name, email address, phone number, business name, and trade type
• Business address and tax identification number (EIN/ITIN)
• Call recordings (opt-in, retained 90 days, deleted upon request)
• SMS metadata (sender/recipient numbers, timestamps)
• Payment data (processed by Stripe — we never store card numbers)
• Bank transaction data (accessed via Plaid for bookkeeping only)

We also automatically collect device/usage information (IP address, browser type, OS, location data) and session cookies for authentication.

Google API: Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Use Your Information?

• To create and manage your account
• To deliver AI receptionist, scheduling, invoicing, and marketing services
• To process payments via Stripe and bank connections via Plaid
• To send transactional SMS and email communications
• To respond to support inquiries
• To improve our platform and analytics
• To comply with legal obligations

3. Service Providers We Use

We use the following service providers (data processors) solely to operate the ProjectHero platform. They process data on our behalf, under contract, and are prohibited from using it for their own purposes. These are not marketing partners. Mobile phone numbers, text messaging originator opt-in data, and SMS consent are never shared with any third party or affiliate for marketing or promotional purposes. Twilio acts exclusively as our SMS delivery infrastructure.

• Supabase — database and authentication
• Twilio — SMS and voice communications
• Stripe — payment processing (stripe.com/privacy)
• Vapi — AI voice assistant
• Plaid — bank connectivity (plaid.com/legal/privacy-policy)
• Resend — transactional email
• Anthropic — AI document processing
• Cloudflare / Vercel — infrastructure and CDN
• Google — Calendar sync and Google Business Profile

4. Call Recordings

Call recordings are opt-in and stored for 90 days. You may request deletion at any time by contacting privacy@projecthero.ai. Recordings are used solely to generate AI summaries for the contractor and are never sold.

5. Bank Account Data (Plaid)

We use Plaid to connect bank accounts for bookkeeping purposes only. Plaid access tokens are encrypted at rest. Bank credentials are never stored by ProjectHero. Bank transaction data is never sold or shared with third parties. You may disconnect your bank account at any time from Settings, revoking our access immediately.

6. Your Rights (GDPR / CCPA)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Opt-out of marketing: Reply STOP to any SMS, or email us
• Do Not Sell: We do not sell personal information

To exercise any right, contact privacy@projecthero.ai or visit www.projecthero.ai/#contact.

7. SMS Consent and Mobile Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

In plain terms:

• We do not sell, rent, trade, or exchange your mobile phone number or SMS consent with anyone.
• We do not share your mobile number with third parties or affiliates for their marketing or promotional purposes.
• Text messaging originator opt-in data and consent are excluded from every data-sharing category described elsewhere in this policy, including Section 3 (Service Providers We Use).
• The only use of your mobile number is to deliver the SMS messages you explicitly opted into (project updates, bid notifications, lead alerts, and account notifications) via our SMS delivery provider, acting solely on our behalf.

Your phone number, SMS consent status, consent timestamp, and consent source are retained to maintain a TCPA-compliant audit trail. You may revoke SMS consent at any time by replying STOP to any message; revocation is honored immediately. See our SMS Terms for full program details.

8. Data Retention

We retain personal data for as long as your account is active. Upon account deletion, data is purged within 30 days, except where retention is required by law (e.g., financial records). Call recordings are deleted after 90 days.

Specific retention periods:

• Job photos (before/after): 2 years
• Job, estimate, and invoice records: 7 years (financial/tax compliance)
• Inactive accounts: closed and purged after 3 years of inactivity

9. Minors

We do not knowingly collect data from users under 18. If you believe a minor has provided us data, contact privacy@projecthero.ai.

10. Changes to This Policy

We may update this Privacy Policy and will post the revised version with an updated effective date. Material changes will be communicated by email.

11. Contact

Mero Mero Systems LLC
6635 S Dayton Street, Suite 310
Greenwood Village, CO 80111
privacy@projecthero.ai