Privacy Policy

Havalook Pro · Last updated September 12, 2026

Havalook LLC (“Havalook,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with Havalook Pro, including our website at www.letshavalook.com, our mobile application, and related services (collectively, the “Services”).

This policy applies to two groups of people. The first is contractors — the trade businesses and their staff who subscribe to Havalook Pro. The second is customers of contractors — the property owners and occupants who receive a job request link from a contractor and submit photos and job details through it. Where a provision applies only to one group, we say so.

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you should discontinue use of the Services.

1. Information We Collect

1.1 Overview. We collect several categories of information. Some is provided directly by you, some is collected automatically through use of the Services, and some is generated in the course of providing functionality. We collect only what is reasonably necessary to operate the Services.

1.2 Contractor Account Information. When a contractor registers, we collect name, business name, email address, mobile telephone number, and account credentials. If a contractor registers through Google or Apple sign-in, we may receive basic identifiers from those providers, such as name and email address.

1.3 Subscription and Payment Information. We collect information necessary to administer subscriptions, including billing contact details and payment method information. Payments are processed by our third-party payment processor. Havalook does not store complete payment card numbers. We may retain limited transaction records such as amounts, dates, subscription tier, and payment method type for accounting, fraud prevention, and support.

1.4 Customer Contact Details. A customer who opens a job request link may provide a telephone number and other contact details on the intake form. That information is supplied by the customer, not by the contractor. We use it to identify the submission and associate it with the correct job, and we make it available to the contractor whose link was used. We do not send text messages or marketing communications to customers of contractors. We do not add these details to any marketing list and we do not make them available to any other contractor.

1.5 Job Content. When a customer opens a job request link, we collect what that person chooses to submit: photographs of the work or property, written descriptions of the problem, responses to questions about the job, and practical access details such as entry points, stairs, gates, or parking. Submission is voluntary and the customer controls what is provided.

1.6 Generated Job Scopes. We generate a written job scope from the content a customer submits. The scope is derived information rather than information you provided, and it is made available only to the contractor who sent the request.

1.7 Technical and Usage Information. We automatically collect technical data when the Services are accessed, including device identifiers, browser type and version, operating system, IP address, log files, error and crash reports, and usage statistics such as the number of job requests sent and scopes generated.

1.8 Sensitive Personal Information. We do not intentionally collect sensitive categories of information such as Social Security numbers, government-issued identification documents, precise geolocation, financial account credentials, health data, biometric data, or genetic data. Users are expressly instructed not to submit such information. To the extent sensitive data is inadvertently provided — for example, captured incidentally in a photograph — we will handle it with heightened safeguards and, where appropriate, delete it.

2. How We Collect Information

2.1 Directly From Contractors. We collect information contractors provide when creating an account, configuring a subscription, entering job request details, contacting support, or otherwise using the Services.

2.2 Directly From Customers of Contractors. We collect information a customer provides when opening a job request link and completing the intake screens. No account, password, or application download is required of the customer.

2.3 Automatically Through Use. We collect technical and usage information through server logs, cookies, and similar technologies when the Services are accessed. This helps us secure the platform, diagnose errors, and improve performance.

2.4 Third-Party Sign-In. If a contractor registers or logs in using an external account such as Google or Apple, we may receive identifiers and basic profile details from that provider. What we receive depends on the provider’s terms and that user’s settings.

2.5 Device Permissions. Certain features require access to device functions such as the camera or photo library in order to submit images. These permissions are controlled through device settings and may be declined, though declining will limit the ability to submit photographs.

3. Cookies and Similar Technologies

3.1 What We Use. We use cookies and similar technologies to operate and secure the Services. Essential cookies are strictly necessary for basic functionality including session management, login authentication, security, and fraud prevention. Analytics cookies help us understand how the Services are used so we can improve performance and reliability.

3.2 Advertising. We do not use advertising cookies, and we do not use tracking technologies to build advertising profiles. If this changes, we will update this Privacy Policy and provide appropriate consent or opt-out mechanisms before doing so.

3.3 Your Choices. Most browsers allow you to refuse or delete cookies through settings. Disabling essential cookies may prevent parts of the Services from functioning. Where required by law, we will request consent before placing non-essential technologies on your device, and you may withdraw that consent at any time.

4. How We Use Information

4.1 Providing the Services. We use information to operate and deliver the Services: creating and administering contractor accounts, delivering job request links, presenting the intake screens, generating job scopes, and making scopes and submitted content available to the contractor who requested them.

4.2 Generating Job Scopes. We process submitted photographs and written job details in order to produce a written job scope. This processing is performed to deliver the core function of the Services and is described further in Section 6.

4.3 Administering Subscriptions. We use account and payment information to process subscription payments, manage seats, maintain billing records, and resolve payment issues such as failed or disputed charges.

4.4 Security and Fraud Prevention. We use technical and usage data to detect, investigate, and prevent fraud, abuse, unauthorized access, security incidents, and other harmful or unlawful activity. This includes monitoring for patterns consistent with messaging sent without proper consent.

4.5 Support. We use information to respond to requests, questions, and complaints, including troubleshooting technical issues and resolving disputes.

4.6 Service Communications. We use contractor contact information to send account, transactional, and service-related notices, including subscription confirmations, security alerts, and material changes to the Services. These are not marketing messages and are necessary to administer an account.

4.7 Improving the Services. We use aggregated and de-identified usage information to understand how the Services perform, identify defects, and guide product development.

4.8 Legal Compliance. We use information as necessary to comply with applicable laws, regulations, legal process, and enforceable governmental or carrier requests, and to establish, exercise, or defend legal claims.

4.9 No Automated Decision-Making About Individuals. A job scope is an informational summary prepared for a contractor’s use. It is not a decision about any individual, and we do not use personal information to make automated decisions or engage in profiling that produces legal or similarly significant effects for any person.

5. Text Messaging

This section describes how text messaging works within the Services and is provided in accordance with applicable messaging regulations and mobile carrier requirements.

5.1 We Message Subscribers Only. Havalook sends text messages only to contractors who have subscribed to Havalook Pro and who have provided a mobile telephone number for that purpose. These are account and service notifications, such as alerting a contractor that a job scope is ready or that a submission has been received.

5.2 We Do Not Message Customers of Contractors. Havalook does not send text messages to property owners or other customers of contractors. A contractor shares a job request link with their customer through their own means of communication. Any message the customer receives containing that link comes from the contractor directly, not from Havalook, and Havalook has no role in sending it.

5.3 Consent. A contractor provides their mobile number during registration or in account settings and consents at that point to receive account and service notifications. Consent is given directly to Havalook through our own interface.

5.4 Frequency and Charges. Message frequency varies with account activity. Message and data rates may apply according to the recipient’s mobile plan.

5.5 Opting Out and Getting Help. Reply STOP to any message to opt out of further messages. Reply HELP for assistance, or contact us at support@letshavalook.com. Opting out stops notification messages; it does not cancel a subscription, and account information will continue to be available in the application and by email.

5.6 Carriers. Mobile carriers are not liable for delayed or undelivered messages. Delivery depends on factors outside our control, including carrier networks and device settings.

6. Mobile Information

6.1 What This Means. Contractor telephone numbers and messaging consent information are used only to deliver the account and service notifications described in Section 5. Customer contact details collected through an intake form are used to identify the job and are provided to the contractor whose link was used. Neither is sold, rented, licensed, or disclosed for marketing purposes, and neither is shared with other contractors or with any advertising network or data broker.

7. Automated Processing of Job Content

7.1 How Scopes Are Produced. Job scopes are produced using automated systems. The photographs and written job details submitted through a job request link are transmitted to Anthropic, PBC and processed by its Claude models through the Anthropic application programming interface in order to generate the written summary returned to the contractor.

7.2 No Model Training. We access this processing under Anthropic’s Commercial Terms of Service, under which Anthropic does not train its models on customer content submitted through the interface. Submitted job content is used to generate a result and returned to us; it does not become training data.

7.3 Retention by the Processing Provider. Under those terms, submitted content and generated output are automatically deleted from the provider’s systems within thirty (30) days. Where content is flagged by automated safety systems as potentially violating the provider’s usage policies, it may be retained by the provider for a longer period for trust and safety purposes, in accordance with that provider’s published policies.

7.4 Data Processing Terms. Our use of this provider is governed by the provider’s commercial terms and applicable data processing terms, under which the provider processes submitted content solely to return a result to us, does not use it for its own purposes, and is subject to confidentiality and security obligations.

7.5 Our Own Use. We do not use identifiable job content to train our own models. Where we analyze job content to improve the accuracy of scope generation, we do so using aggregated or de-identified information that cannot reasonably be linked to an individual, property, or contractor.

7.6 Change of Provider. We may change or add automated processing providers. Any replacement will be subject to comparable contractual restrictions on training and retention, and we will update this section to identify the provider in use.

7.7 Accuracy. A generated scope is a preparatory summary and may be incomplete or incorrect. It is not an inspection, diagnosis, estimate, or professional opinion. Contractors remain responsible for verifying conditions and for any advice or pricing they provide to their customers.

8. Sharing of Information

8.1 No Sale or Sharing for Advertising. We do not sell, rent, or trade personal information for monetary or other valuable consideration, and we do not share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide the opt-out rights required by applicable law.

8.2 Between Contractor and Customer. Content a customer submits through a job request link is made available to the contractor who sent that link. This is the purpose of the Services and is disclosed to the customer at the point of submission. It is not made available to any other contractor.

8.3 Service Providers. We disclose information to vendors who perform services on our behalf, limited to what each requires to perform its function and subject to contractual confidentiality and security obligations. These include a messaging provider for delivering account notifications to contractors, a payment processor for subscription billing, cloud hosting and database providers for storage and computation, an automated processing provider for scope generation as described in Section 7, and error monitoring and analytics providers.

8.4 Legal Obligations and Protection of Rights. We may disclose information when required by law or legal process, including subpoenas, court orders, regulatory demands, and enforceable carrier or governmental requests. We may also disclose information where we reasonably believe it necessary to enforce our Terms of Service, investigate suspected fraud or messaging violations, address security issues, or protect the rights, property, or safety of Havalook, our users, or the public.

8.5 Business Transfers. If Havalook undergoes a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will require the receiving party to honor this Privacy Policy or provide equivalent protections.

8.6 Aggregated and De-Identified Information. We may use and share aggregated or de-identified information that cannot reasonably be used to identify an individual for business, research, or statistical purposes.

9. Data Storage and Security

9.1 Location. Information collected through the Services is stored in the United States using established commercial cloud infrastructure providers.

9.2 Safeguards. We implement commercially reasonable technical and organizational safeguards, including encryption of data in transit and at rest, access controls limiting internal access to personnel who require it, authentication requirements for contractor accounts, and monitoring for vulnerabilities and unusual activity.

9.3 Job Request Links. Job request links are generated with unique, non-sequential identifiers so they cannot be guessed or enumerated. Links are intended for the recipient only and should not be forwarded or posted publicly.

9.4 No Absolute Guarantee. No method of electronic transmission or storage is entirely secure. While we take appropriate measures, we cannot guarantee absolute security.

9.5 Contractor Responsibilities. Contractors are responsible for maintaining the confidentiality of account credentials, controlling access to devices, and promptly notifying us of any suspected unauthorized access.

10. Data Breach Notification

10.1 Our Commitment. In the event of a security incident that compromises the confidentiality, integrity, or availability of personal information, we will act promptly to investigate, contain, and remediate the issue.

10.2 Notice. We will provide notification in accordance with applicable United States state data breach notification laws. Notice may include a description of the nature of the incident, the categories of information affected, the steps we have taken or will take, and recommended protective measures.

10.3 Method. We may notify affected individuals by email, text message, in-application notice, or other direct means associated with the account. Where direct notice is not feasible, we may provide substitute notice as permitted by law.

10.4 Notice to Contractors. Where an incident affects content submitted by a contractor’s customers, we will notify the affected contractor so that they can meet any notification obligations they owe to their own customers.

10.5 Regulators. We may additionally notify regulators, law enforcement, or other authorities where required by applicable law.

11. Data Retention and Deletion

11.1 Retention. We retain information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, and meet our legal, tax, accounting, and contractual obligations.

11.2 Job Content. Photographs, job details, and generated scopes are retained while the associated contractor account remains active, so that the contractor can refer back to the job. A contractor may delete an individual job at any time from within the Services.

11.3 Messaging Records. We retain records of messages sent and opt-out requests for as long as necessary to honor opt-outs, demonstrate compliance with messaging regulations, and respond to carrier or regulatory inquiries.

11.4 Account Closure. When a contractor closes an account, we take steps to delete associated information from active systems. Residual copies may persist in routine backup archives for a limited period before being overwritten in the ordinary course.

11.5 Exceptions. We may retain information after a deletion request where necessary to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, or maintain the security and integrity of the Services.

11.6 Requests. You may request deletion at any time by contacting us at support@letshavalook.com. Where a request concerns content submitted to a specific contractor, we may direct the request to that contractor, who determines retention of their own job records.

12. Your Privacy Rights

12.1 Rights Available to All Users. Regardless of where you live in the United States, you may request access to the personal information we hold about you, request correction of inaccuracies, or request deletion, by contacting us at support@letshavalook.com. You may opt out of text messages at any time by replying STOP. You may also disable cookies through browser or device settings, though essential cookies are required for core functionality.

12.2 Service Messages. Even after opting out of non-essential communications, contractors with active accounts may continue to receive transactional and administrative notices necessary to operate the account, such as billing confirmations and security alerts.

12.3 California Residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, subject to certain exceptions. These include the right to know the categories and specific pieces of personal information we collect, use, and disclose; the right to request deletion; the right to correct inaccurate personal information; and the right to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under that law. If our practices change, we will provide a clear “Do Not Sell or Share My Personal Information” link.

12.4 Other State Privacy Laws. Residents of other states with comprehensive privacy laws may have comparable rights of access, correction, deletion, and portability. We honor verified requests under applicable state law regardless of the state of residence.

12.5 Our Role. For information submitted by a customer through a contractor’s job request link, the contractor determines the purpose of collection and we act on that contractor’s behalf in providing the Services. We will assist contractors in responding to requests from their customers, and will forward requests we receive directly to the relevant contractor where appropriate.

12.6 International Users. The Services are intended for users located in the United States. If you access the Services from outside the United States, you do so at your own initiative and your information will be transferred to and processed in the United States. We do not market the Services to residents of the European Union, United Kingdom, or other jurisdictions outside the United States, and rights under the EU or UK General Data Protection Regulation are not explicitly supported at this time.

12.7 Verification and Agents. We may need to verify your identity before fulfilling a request. You may designate an authorized agent to make a request on your behalf, subject to reasonable proof of authorization.

12.8 No Retaliation. We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right.

13. Complaints and Appeals

13.1 Response Timeline. We aim to acknowledge and respond to privacy requests within thirty (30) days of receipt. Where a request is complex, we may extend this period as permitted by applicable law and will notify you of the reason and expected timeframe.

13.2 Appeals. If you are dissatisfied with the outcome of a request, you may submit an appeal in writing to support@letshavalook.com with the subject line “Privacy Appeal.” Appeals are reviewed by someone not involved in the original decision.

13.3 External Remedies. If you remain unsatisfied after our internal process, you may escalate the matter to your State Attorney General, or file a complaint with the Federal Trade Commission at reportfraud.ftc.gov.

14. Children’s Privacy

14.1 Age Restriction. Havalook Pro is a business tool intended solely for use by individuals who are eighteen (18) years of age or older. By subscribing to or using the Services, a contractor represents that they are at least 18.

14.2 No Collection From Children. We do not knowingly collect, solicit, or store personal information from children under the age of 13, and the Services are not directed to children. If we learn that we have inadvertently collected such information, we will delete it promptly.

14.3 Parents and Guardians. If you are a parent or legal guardian and believe a child has provided personal information through the Services, contact us at support@letshavalook.com and we will act promptly to delete it.

14.4 Compliance. We are committed to complying with applicable laws governing the privacy of minors, including the Children’s Online Privacy Protection Act, to the extent such laws apply.

15. Third-Party Links and Services

15.1 External Links. The Services may contain links to third-party websites or applications not owned or controlled by Havalook. Information you provide to those parties is governed by their policies, not this one.

15.2 No Responsibility. We do not control and are not responsible for the privacy, security, or information practices of third parties, and we disclaim liability for their acts or omissions. We encourage you to review the policies of any third party before providing information to them.

16. Changes to This Policy

16.1 Right to Revise. We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The revised version is effective upon posting unless otherwise required by law.

16.2 Material Changes. Where changes materially affect your rights or how we handle personal information, we will provide advance notice as required by law, by email, in-application notice, or a prominent notice on our website.

16.3 Version Date. The “Last updated” date at the top of this page reflects the most recent revision.

16.4 Continued Use. Continuing to use the Services after changes take effect constitutes acknowledgment of the updated policy. If you do not agree, you should discontinue use.

17. Accessibility

17.1 Commitment. We are committed to making this Privacy Policy and the Services accessible to all individuals, including persons with disabilities.

17.2 Alternative Formats. On request we can provide this Privacy Policy in an alternative format, including large print or a screen-reader-compatible version. Contact support@letshavalook.com.

17.3 Ongoing Work. We work toward conformance with the Web Content Accessibility Guidelines (WCAG) 2.1 and welcome feedback on how to improve.

18. Contact Us

18.1 How to Reach Us. Questions, requests, or complaints regarding this Privacy Policy may be directed to Havalook LLC, Pittsburgh, Pennsylvania, by email at support@letshavalook.com, or through our website at letshavalook.com.

18.2 Privacy Requests. Please include enough information for us to verify your identity and locate the relevant records, including the mobile number or email address associated with the information in question.

18.3 Response Commitment. We review and respond to privacy inquiries in accordance with applicable United States privacy laws, generally within thirty (30) to forty-five (45) days.