Privacy Policy

Last updated: February 28, 2026

This Privacy Policy describes what information 4SR (“we”, “us”) collects when you use our website, request an estimate, use the client portal, message us, or make a payment.

Information we collect

  • Contact information: name, email address, phone number.
  • Project information: service requested, notes you provide, and scheduling/assessment details.
  • Property information: address/location you submit for an estimate or service.
  • Messages and attachments: messages you send through the portal and any uploaded images/files.
  • Account/session information: login state via session cookies required to access the client portal.
  • Payment information (via Stripe): when you make an online payment, payments are processed by Stripe using the payment method you select at checkout. We receive payment status and identifiers (e.g., payment intent ID), amount, currency, and timestamps to keep a ledger. Depending on the payment method, we may also receive limited payment method details from Stripe (for example, card brand and last 4 digits, or a wallet/payment method type).
  • SMS and email delivery: if you opt in or provide your phone/email, we may send confirmations, updates, and quote/payment notifications.
  • Analytics: we use first-party analytics to measure page visits, navigation, and lead submissions. We may also use Google Analytics, which may set cookies or collect browser/device data.

Information we do not collect (or do not store)

  • Full card numbers, CVC codes, or magnetic stripe data: card entry is handled by Stripe. We do not store your full payment card details on our servers.
  • Bank account credentials: we do not collect your online banking username/password.
  • Plaid customer bank linking data: Plaid is not currently offered in the customer portal or estimate flow. We do not ask customers to connect their bank account through Plaid.
  • Biometric identifiers: we do not collect facial recognition, fingerprints, or similar data.

How we use information

  • Provide estimates, schedule assessments, and perform requested services.
  • Communicate with you about your project (email and portal messaging), including quotes and payment status.
  • Operate the client portal (authentication, messaging, notifications).
  • Process payments and maintain internal accounting/records.
  • Maintain site security, prevent fraud/abuse, and troubleshoot issues.
  • Improve our website and user experience (analytics).

How we share information

We do not sell your personal information. We may share data with service providers only as needed to run the business:

  • Stripe (payments).
  • Email service providers (email delivery, e.g., SMTP/Google Workspace).
  • Hosting/infrastructure providers used to operate this website and database.
  • Legal: if required by law, subpoena, or to protect rights/safety.

Plaid usage scope (internal only)

Any Plaid integration used by 4SR is for internal business finance operations and not a customer-facing feature. Customers are not asked to provide Plaid-linked bank credentials through this site or client portal.

Cookies and similar technologies

  • Essential cookies: used for portal sessions to keep you logged in.
  • Analytics cookies/local storage: first-party analytics stores anonymous session/visitor IDs to reduce duplicate counting. If Google Analytics is enabled, it may also use cookies. You can use browser settings to block cookies; some portal features may not work without essential cookies.

Security

We use reasonable administrative, technical, and physical safeguards appropriate to our business. No method of transmission or storage is 100% secure.

Data retention

We retain information for as long as needed to provide services, maintain records, comply with legal obligations, and resolve disputes.

Contact us

Questions about this policy? Contact us via the contact form or through your client portal.

This page is a practical disclosure based on the site’s current features (client portal, messaging, Stripe payments, SMS/email notifications, and analytics). For formal legal review, consult a qualified attorney.